Amazon Exam SOA-C02 Topic 9 Question 108 Discussion

Actual exam question for Amazon's SOA-C02 exam

Question #: 108
Topic #: 9

To configure central configuration for Security Hub in an AWS Organization, the SysOps administrator must ensure it's set up centrally.

Options:

AEnable Security Hub in the organization's management account. Configure Security Hub central configuration.

BEnable Security Hub in the organization's management account. Configure and integrate AWS Trusted Advisor. Configure Security Hub from an opt-in Region.

CDelegate an AWS account that is not the organization's management account as the Security Hub administrator. Configure Security Hub central configuration.

DDelegate an AWS account that is not the organization's management account as the Security Hub administrator. Configure and integrate AWS Trusted Advisor. Configure Security Hub from an opt-in Region.

Show Suggested Answer

Suggested Answer: C

To centrally manage Security Hub across an organization, AWS allows you to delegate a member account as the Security Hub administrator. This enables centralized configuration and security insights without directly using the management account, which is a best practice.

Delegating a Non-Management Account: AWS recommends using a designated Security Hub administrator account (different from the management account) for central security configurations.

Security Hub Central Configuration: Configuring Security Hub in this manner ensures that security findings from all member accounts are consolidated and manageable from the designated administrator account.

by Zack at Dec 07, 2024, 08:39 PM

Limited Time Offer

25%

Off

Get Premium SOA-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Carolynn

3 days ago

Wait, we can integrate Trusted Advisor with Security Hub? That's a neat trick, but I still think A is the best choice here.

upvoted 0 times

...

Sharen

7 days ago

Hmm, I'm not sure I'd want to rely on an opt-in Region for my Security Hub configuration. Better stick with A to keep it all centralized.

upvoted 0 times

...

Florinda

14 days ago

Haha, good luck trying to get the non-management account to play nicely as the Security Hub admin. Option A is the way forward.

upvoted 0 times

Melissa

6 days ago

A) Enable Security Hub in the organization's management account. Configure Security Hub central configuration.

upvoted 0 times

...

30 days ago

Option A seems like the most straightforward approach to centrally configure Security Hub in an AWS Organization. Keeping it all within the management account makes sense.

upvoted 0 times

Xenia

5 days ago

B) Enable Security Hub in the organization's management account. Configure and integrate AWS Trusted Advisor. Configure Security Hub from an opt-in Region.

upvoted 0 times

...

Craig

25 days ago

A) Enable Security Hub in the organization's management account. Configure Security Hub central configuration.

upvoted 0 times

...

Mari

1 months ago

I think the answer is A. Enabling Security Hub in the organization's management account and configuring central configuration makes sense.

upvoted 0 times

...