Q55 — AWS SAA-C03 Ch.11

Question 55 of 100 | ← Chapter 11

Q755. A company has customers located across the world. The company wants to use automation to secure its systems and network infrastructure. The company's security team must be able to track and audit all incremental changes to the infrastructure.Which solution will meet these requirements?

• A. Use AWS Organizations to set up the infrastructure. Use AWS Config to track changes.
• B. Use AWS CloudFormation to set up the infrastructure. Use AWS Config to track changes. ✓
• C. Use AWS Organizations to set up the infrastructure. Use AWS Service Catalog to track changes.
• D. Use AWS CloudFormation to set up the infrastructure. Use AWS Service Catalog to track changes.

Correct Answer: B. Use AWS CloudFormation to set up the infrastructure. Use AWS Config to track changes.

Explanation

To meet the requirements of automating system and network infrastructure security, as well as tracking and auditing incremental changes, the most suitable solution is:B. Use AWS CloudFormation to set up the infrastructure. Use AWS Config to track changes.Option B provides the necessary components to achieve the desired outcome:\1. Use AWS CloudFormation: AWS CloudFormation allows you to define and provision infrastructure resources in a declarative manner using templates. By using CloudFormation, the company can automate the setup and configuration of its systems and network infrastructure. This ensures consistency, repeatability, and reduces manual effort.\2. Use AWS Config: AWS Config is a service that enables you to assess, audit, and evaluate the configuration of AWS resources. It tracks changes to resources and provides detailed configuration history, allowing the security team to track and audit all incremental changes made to the infrastructure. AWS Config records configuration changes and can send notifications when changes occur, providing visibility and control over the infrastructure.Options A, C, and D are not the most suitable choices in this scenario:Option A suggests using AWS Organizations to set up the infrastructure. While AWS Organizations is primarily used for managing multiple AWS accounts, it does not directly address the automation of infrastructure setup or the tracking of incremental changes. AWS Config would still need to be utilized separately for tracking changes.Option C suggests using AWS Organizations to set up the infrastructure and AWS Service Catalog to track changes. AWS Service Catalog is a service that allows organizations to create and manage catalogs of IT services. While it can help with standardizing and managing the deployment of approved resources, it does not specifically address the tracking and auditing of incremental changes.Option D suggests using AWS CloudFormation to set up the infrastructure and AWS Service Catalog to track changes. While AWS Service Catalog can help with managing approved resources, it is not designed to track and audit incremental changes made to the infrastructure.Therefore, the most appropriate solution to meet the requirements of automating system and network infrastructure security, as well as tracking and auditing incremental changes, is B: Use AWS CloudFormation to set up the infrastructure and use AWS Config to track changes.