Discuss Amazon SAA-C03 Exam Topic 2 Question 66

A company has customers located across the world. The company wants to use automation to secure its systems and network infrastructure The company's security team must be able to track and audit all incremental changes to the infrastructure.

Which solution will meet these requirements?

AUse AWS Organizations to set up the infrastructure. Use AWS Config to track changes

BUse AWS Cloud Formation to set up the infrastructure. Use AWS Config to track changes.

CUse AWS Organizations to set up the infrastructure. Use AWS Service Catalog to track changes.

DUse AWS Cloud Formation to set up the infrastructure. Use AWS Service Catalog to track changes.

Suggested Answer: B

AWS CloudFormationallows for the automated, repeatable setup of infrastructure, reducing human error and ensuring consistency.AWS Configprovides the ability to track changes in the infrastructure, ensuring that all changes are logged and auditable, which satisfies the requirement for tracking incremental changes.

Option A and C (AWS Organizations): AWS Organizations manage multiple accounts, but they are not designed for infrastructure setup or change tracking.

Option D (Service Catalog): Service Catalog is used for deploying products, not for setting up infrastructure or tracking changes.

AWS Reference:

AWS Config

AWS CloudFormation

Get Premium SAA-C03 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

28 comments · newest first

Timothy 7 months ago

I agree with Lanie. Tracking changes is crucial for security.

Shonda 8 months ago

Option C seems off. Service Catalog doesn’t track changes like Config does.

Carisa 8 months ago

I prefer option B. Cloud Formation is great for infrastructure as code.

Lanie 8 months ago

I think option A is the best. AWS Organizations and AWS Config work well together.

Carma 8 months ago

Totally agree with A), it covers all bases for security!

Corrie 9 months ago

Wait, can AWS Config really track all incremental changes?

Raina 9 months ago

Definitely A) - AWS Organizations + Config is a solid combo!

Ryan 9 months ago

I think B) is better since Cloud Formation is more flexible.

Iluminada 9 months ago

I'm just here for the AWS puns. "A match made in heaven" - nice one, Sarah!

Page 9 months ago

B) is the obvious choice. AWS CloudFormation and Config are a match made in heaven for this scenario.

Ines 9 months ago

Hmm, I was thinking C) might work too. AWS Service Catalog could be a good way to track changes.

Katheryn 10 months ago

I vaguely recall that AWS Service Catalog is more about managing resources rather than tracking changes, which makes me doubt options C and D.

Jean 10 months ago

I practiced a similar question where AWS Config was crucial for auditing changes, so I’m leaning towards options that include it, like A or B.

Cristina 10 months ago

I'm a bit unsure about the difference between AWS Organizations and Cloud Formation in this context. I feel like both could potentially work.

Ashanti 10 months ago

B) is the correct answer. AWS CloudFormation allows you to set up the infrastructure, and AWS Config can track all the changes.

Arlen 11 months ago

I agree, B) is the way to go. AWS Config is perfect for auditing infrastructure changes.

Nilsa 11 months ago

A) is the best choice for tracking changes with AWS Config.

Claribel 11 months ago

I remember studying AWS Config and its role in tracking changes, so I think options A and B could be relevant.

Alline 11 months ago

I'm a little confused by the differences between AWS Config and AWS Service Catalog. I'll need to review those services more closely to decide which one would be better for tracking and auditing the changes. Maybe I'll start by looking at some examples of how each one works.

Sharen 11 months ago

I'm feeling pretty confident about this one. Option B is the way to go. AWS CloudFormation is a great tool for setting up the infrastructure, and AWS Config can provide the detailed tracking and auditing that the company needs. Seems like a straightforward solution to me.

Fletcher 12 months ago

Option D looks promising to me. Using AWS CloudFormation to set up the infrastructure and then AWS Service Catalog to track the changes seems like it would meet all the requirements. I'll have to think it through a bit more, but that's the one I'm leaning towards.

Mayra 12 months ago

Hmm, I'm a bit unsure about this one. The question mentions tracking and auditing all incremental changes, so I'm not sure if AWS Config is the best option. Maybe AWS Service Catalog would be a better fit for that requirement?

Edna 12 months ago

I think I'd go with option B. AWS CloudFormation seems like the best way to set up the infrastructure, and AWS Config can track all the changes, which is exactly what the question is asking for.

Marleen 7 months ago

↳ replying to Edna

I’m leaning towards A for organization, but B is solid too.

Weldon 7 months ago

↳ replying to Edna

Option B covers both setup and tracking well.

Blair 7 months ago

↳ replying to Edna

I think tracking changes is crucial, so Config is a must.

Maddie 7 months ago

↳ replying to Edna

But what about option A? AWS Organizations could be useful too.

Germaine 10 months ago

↳ replying to Edna

I agree, option B makes sense. CloudFormation is powerful.

Amazon SAA-C03 Exam - Topic 2 Question 66 Discussion