Amazon Exam SOA-C02 Topic 9 Question 108 Discussion

Actual exam question for Amazon's SOA-C02 exam

Question #: 108
Topic #: 9

To configure central configuration for Security Hub in an AWS Organization, the SysOps administrator must ensure it's set up centrally.

Options:

AEnable Security Hub in the organization's management account. Configure Security Hub central configuration.

BEnable Security Hub in the organization's management account. Configure and integrate AWS Trusted Advisor. Configure Security Hub from an opt-in Region.

CDelegate an AWS account that is not the organization's management account as the Security Hub administrator. Configure Security Hub central configuration.

DDelegate an AWS account that is not the organization's management account as the Security Hub administrator. Configure and integrate AWS Trusted Advisor. Configure Security Hub from an opt-in Region.

Show Suggested Answer

Suggested Answer: C

To centrally manage Security Hub across an organization, AWS allows you to delegate a member account as the Security Hub administrator. This enables centralized configuration and security insights without directly using the management account, which is a best practice.

Delegating a Non-Management Account: AWS recommends using a designated Security Hub administrator account (different from the management account) for central security configurations.

Security Hub Central Configuration: Configuring Security Hub in this manner ensures that security findings from all member accounts are consolidated and manageable from the designated administrator account.

by Zack at Dec 07, 2024, 08:39 PM

Limited Time Offer

25%

Off

Get Premium SOA-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Carolynn

5 months ago

Wait, we can integrate Trusted Advisor with Security Hub? That's a neat trick, but I still think A is the best choice here.

upvoted 0 times

...

5 months ago

Haha, good luck trying to get the non-management account to play nicely as the Security Hub admin. Option A is the way forward.

upvoted 0 times

Galen

4 months ago

C) Delegate an AWS account that is not the organization's management account as the Security Hub administrator. Configure Security Hub central configuration.

upvoted 0 times

...

Levi

5 months ago

B) Enable Security Hub in the organization's management account. Configure and integrate AWS Trusted Advisor. Configure Security Hub from an opt-in Region.

upvoted 0 times

...

Melissa

5 months ago

A) Enable Security Hub in the organization's management account. Configure Security Hub central configuration.

upvoted 0 times

...

6 months ago

Option A seems like the most straightforward approach to centrally configure Security Hub in an AWS Organization. Keeping it all within the management account makes sense.

upvoted 0 times

Remedios

5 months ago

A) Option A seems like the most straightforward approach to centrally configure Security Hub in an AWS Organization. Keeping it all within the management account makes sense.

upvoted 0 times

...

Xenia

5 months ago

B) Enable Security Hub in the organization's management account. Configure and integrate AWS Trusted Advisor. Configure Security Hub from an opt-in Region.

upvoted 0 times

...

Craig

6 months ago

A) Enable Security Hub in the organization's management account. Configure Security Hub central configuration.

upvoted 0 times

...

Mari

6 months ago

I think the answer is A. Enabling Security Hub in the organization's management account and configuring central configuration makes sense.

upvoted 0 times

...