Examkin

Question

Difficulty: EasySecurity Monitoring, Logging, and Compliance Auditing

A SysOps Administrator needs to implement a solution that continuously audits the configuration of AWS resources against security best practices, such as ensuring all Amazon EBS volumes are encrypted. The solution must track configuration history and report compliance status. Which AWS service is designed to meet this requirement?

  1. AWS ConfigAnswer
  2. B
    Amazon CloudWatch
  3. C
    Amazon EventBridge
  4. D
    AWS CloudTrail

Answer

AWS Config
AWS Config is the dedicated AWS service that continuously audits and assesses the configurations of your AWS resources. It records configuration changes over time and allows you to define rules (such as checking if EBS volumes are encrypted) to evaluate whether those resources are compliant.

Step-by-Step Solution

1
Analyze the requirement for continuous configuration auditing and tracking configuration history.
The requirement is for auditing compliance against specific configurations (like EBS encryption) and tracking resource state history.
This helps differentiate between services that track API calls, services that monitor metrics, and services that record configuration states.
2
Evaluate the capabilities of AWS Config.
AWS Config maintains a configuration history of supported AWS resources and uses rules to evaluate whether resource configurations match desired compliance settings.
This matches the core requirement of compliance auditing and historical tracking.

Key Concept

AWS Config provides continuous monitoring, compliance auditing, and configuration history tracking of AWS resources.
Rate this question

Topics

Security Monitoring, Logging, and Compliance Auditing

More questions from this topic