A Security Engineer Is Setting Up a New AWS Account

question 260

Multiple Choice

A security engineer is setting up a new AWS account. The engineer has been asked to continuously monitor the company's AWS account using automated compliance checks based on AWS best practices and Center for Internet Security (CIS) AWS Foundations Benchmarks. How can the security engineer accomplish this using AWS services?

• A) Enable AWS Config and set it to record all resources in all Regions and global resources. Then enable AWS Security Hub and confirm that the CIS AWS Foundations compliance standard is enabled.
• B) Enable Amazon Inspector and configure it to scan all Regions for the CIS AWS Foundations Benchmarks. Then enable AWS Security Hub and configure it to ingest the Amazon Inspector findings.
• C) Enable Amazon Inspector and configure it to scan all Regions for the CIS AWS Foundations Benchmarks. Then enable AWS Shield in all Regions to protect the account from DDoS attacks.
• D) Enable AWS Config and set it to record all resources in all Regions and global resources. Then enable Amazon Inspector and configure it to enforce CIS AWS Foundations Benchmarks using AWS Config rules.

---

Definitions:

Difficulty In Speaking

The experience of struggling to articulate words or communicate verbally, potentially due to disorders such as aphasia, dysarthria, or apraxia.

Stroke

A medical condition that occurs when the blood supply to part of the brain is interrupted or reduced, causing brain tissue to die.

Cholesterol Levels

The measure of cholesterol in the blood, which can indicate risk for heart disease; includes measurements of LDL (bad) and HDL (good) cholesterol.

Stroke

A medical condition occurring when the blood supply to part of the brain is interrupted or reduced, causing brain cells to die due to a lack of oxygen.