Q16 — AWS SAA-C03 Ch.13

Question 16 of 100 | ← Chapter 13

Q916. A company runs workloads in the AWS Cloud. The company wants to centrally collect security data to assess security across the entire company and to improve workload protection.Which solution will meet these requirements with the LEAST development effort?

Correct Answer: C. Configure a data lake in Amazon Security Lake to collect the security data. Upload the data to an Amazon S3 bucket.

Explanation

To meet the company's requirements of centrally collecting security data with the least development effort, the most suitable solution is:C. Configure a data lake in Amazon Security Lake to collect the security data. Upload the data to an Amazon S3 bucket.Amazon Security Lake is a purpose-built service for collecting, storing, and analyzing security data. It simplifies the process of collecting and centralizing security logs and data from various sources.By configuring a data lake in Amazon Security Lake, the company can easily collect and organize security data from different workloads and sources across the entire company. This includes logs from AWS services, third-party tools, and custom applications.The collected security data can be uploaded to an Amazon S3 bucket, which provides highly scalable and durable object storage. S3 is a natural choice for storing large amounts of security data and allows for easy integration with other AWS services for analysis and processing.Option A suggests configuring a data lake in AWS Lake Formation and using AWS Glue crawlers to ingest the security data. While this option provides similar capabilities, AWS Security Lake is specifically tailored for security data collection and analysis, reducing the development effort required.Option B suggests configuring an AWS Lambda function to collect security data in .csv format and upload it to an S3 bucket. This approach would require more custom development effort compared to using a purpose-built service like Amazon Security Lake.Option D suggests using AWS Database Migration Service (AWS DMS) to load the security data into an Amazon RDS cluster. However, DMS is primarily designed for database migration and replication, and may not be the most suitable solution for centrally collecting and analyzing security data.In summary, option C, configuring a data lake in Amazon Security Lake to collect security data and uploading it to an S3 bucket, provides the most straightforward and least development-intensive solution for centrally collecting security data across the company's workloads and improving workload protection.