Amazon SAA-C03 Exam - Topic 2 Question 66 Discussion

Actual exam question for Amazon's SAA-C03 exam

Question #: 66
Topic #: 2

A company has customers located across the world. The company wants to use automation to secure its systems and network infrastructure The company's security team must be able to track and audit all incremental changes to the infrastructure.

Which solution will meet these requirements?

AUse AWS Organizations to set up the infrastructure. Use AWS Config to track changes

BUse AWS Cloud Formation to set up the infrastructure. Use AWS Config to track changes.

CUse AWS Organizations to set up the infrastructure. Use AWS Service Catalog to track changes.

DUse AWS Cloud Formation to set up the infrastructure. Use AWS Service Catalog to track changes.

Show Suggested Answer

Suggested Answer: B

AWS CloudFormationallows for the automated, repeatable setup of infrastructure, reducing human error and ensuring consistency.AWS Configprovides the ability to track changes in the infrastructure, ensuring that all changes are logged and auditable, which satisfies the requirement for tracking incremental changes.

Option A and C (AWS Organizations): AWS Organizations manage multiple accounts, but they are not designed for infrastructure setup or change tracking.

Option D (Service Catalog): Service Catalog is used for deploying products, not for setting up infrastructure or tracking changes.

AWS Reference:

AWS Config

AWS CloudFormation

by Abel at Oct 30, 2025, 01:47 PM

Limited Time Offer

25%

Off

Get Premium SAA-C03 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shonda

9 days ago

Option C seems off. Service Catalog doesn’t track changes like Config does.

upvoted 0 times

...

Carisa

14 days ago

I prefer option B. Cloud Formation is great for infrastructure as code.

upvoted 0 times

...

Lanie

19 days ago

I think option A is the best. AWS Organizations and AWS Config work well together.

upvoted 0 times

...

Carma

24 days ago

Totally agree with A), it covers all bases for security!

upvoted 0 times

...

Corrie

29 days ago

Wait, can AWS Config really track all incremental changes?

upvoted 0 times

...

Raina

1 month ago

Definitely A) - AWS Organizations + Config is a solid combo!

upvoted 0 times

...

Ryan

1 month ago

I think B) is better since Cloud Formation is more flexible.

upvoted 0 times

...

Iluminada

1 month ago

I'm just here for the AWS puns. "A match made in heaven" - nice one, Sarah!

upvoted 0 times

...

Page

2 months ago

B) is the obvious choice. AWS CloudFormation and Config are a match made in heaven for this scenario.

upvoted 0 times

...

Ines

2 months ago

Hmm, I was thinking C) might work too. AWS Service Catalog could be a good way to track changes.

upvoted 0 times

...

Katheryn

2 months ago

I vaguely recall that AWS Service Catalog is more about managing resources rather than tracking changes, which makes me doubt options C and D.

upvoted 0 times

...

Jean

2 months ago

I practiced a similar question where AWS Config was crucial for auditing changes, so I’m leaning towards options that include it, like A or B.

upvoted 0 times

...

Cristina

2 months ago

I'm a bit unsure about the difference between AWS Organizations and Cloud Formation in this context. I feel like both could potentially work.

upvoted 0 times

...

Ashanti

3 months ago

B) is the correct answer. AWS CloudFormation allows you to set up the infrastructure, and AWS Config can track all the changes.

upvoted 0 times

...

Arlen

3 months ago

I agree, B) is the way to go. AWS Config is perfect for auditing infrastructure changes.

upvoted 0 times

...

Nilsa

3 months ago

A) is the best choice for tracking changes with AWS Config.

upvoted 0 times

...

Claribel

3 months ago

I remember studying AWS Config and its role in tracking changes, so I think options A and B could be relevant.

upvoted 0 times

...

Alline

4 months ago

I'm a little confused by the differences between AWS Config and AWS Service Catalog. I'll need to review those services more closely to decide which one would be better for tracking and auditing the changes. Maybe I'll start by looking at some examples of how each one works.

upvoted 0 times

...

Sharen

4 months ago

I'm feeling pretty confident about this one. Option B is the way to go. AWS CloudFormation is a great tool for setting up the infrastructure, and AWS Config can provide the detailed tracking and auditing that the company needs. Seems like a straightforward solution to me.

upvoted 0 times

...

Fletcher

4 months ago

Option D looks promising to me. Using AWS CloudFormation to set up the infrastructure and then AWS Service Catalog to track the changes seems like it would meet all the requirements. I'll have to think it through a bit more, but that's the one I'm leaning towards.

upvoted 0 times

...

Mayra

4 months ago

Hmm, I'm a bit unsure about this one. The question mentions tracking and auditing all incremental changes, so I'm not sure if AWS Config is the best option. Maybe AWS Service Catalog would be a better fit for that requirement?

upvoted 0 times

...

Edna

4 months ago

I think I'd go with option B. AWS CloudFormation seems like the best way to set up the infrastructure, and AWS Config can track all the changes, which is exactly what the question is asking for.

upvoted 0 times

Germaine

3 months ago

I agree, option B makes sense. CloudFormation is powerful.

upvoted 0 times

...