SAA-C03 Q624 · Security

Question

A company needs to create a compliance management solution. The company wants to use a combination of AWS services to achieve the fine-grained visibility that the solution requires. The compliance management solution must provide a centralized method for company employees to review security findings and out-of-compliance findings. Which solution will meet these requirements with the LEAST ongoing maintenance?

Accepted Answer

**Option C: AWS Security Hub + AWS Config conformance packs** meets every requirement:

1. **Centralized method to review findings**: AWS Security Hub is purpose-built as a **single pane of glass** for security and compliance findings. It aggregates findings from multiple AWS services (Config, GuardDuty, Inspector, Macie, Firewall Manager, etc.) and third-party tools into a standardized format called **AWS Security Finding Format (ASFF)**.

2. **Fine-grained visibility**: Security Hub provides dashboards, filtering, and insight capabilities that let employees drill down into specific findings by severity, resource type, account, or compliance standard.

3. **Compliance framework checking**: AWS Config **conformance packs** are collections of AWS Config rules and remediation actions assembl

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips