Exam AWS Certified Security - Specialty SCS-C02 topic 1 question 116 discussion

Exam question from Amazon's AWS Certified Security - Specialty SCS-C02

Question #: 116
Topic #: 1

[All AWS Certified Security - Specialty SCS-C02 Questions]

An international company wants to combine AWS Security Hub findings across all the company's AWS Regions and from multiple accounts. In addition, the company wants to create a centralized custom dashboard to correlate these findings with operational data for deeper analysis and insights. The company needs an analytics tool to search and visualize Security Hub findings.

Which combination of steps will meet these requirements? (Chose three.)

A. Designate an AWS account as a delegated administrator for Security Hub. Publish events to Amazon CloudWatch from the delegated administrator account, all member accounts, and required Regions that are enabled for Security Hub findings.
B. Designate an AWS account in an organization in AWS Organizations as a delegated administrator for Security Hub. Publish events to Amazon EventBridge from the delegated administrator account, all member accounts, and required Regions that are enabled for Security Hub findings.
C. In each Region, create an Amazon EventBridge rule to deliver findings to an Amazon Kinesis data stream. Configure the Kinesis data streams to output the logs to a single Amazon S3 bucket.
D. In each Region, create an Amazon EventBridge rule to deliver findings to an Amazon Kinesis Data Firehose delivery stream. Configure the Kinesis Data Firehose delivery streams to deliver the logs to a single Amazon S3 bucket.
E. Use AWS Glue DataBrew to crawl the Amazon S3 bucket and build the schema. Use AWS Glue Data Catalog to query the data and create views to flatten nested attributes. Build Amazon QuickSight dashboards by using Amazon Athena.
F. Partition the Amazon S3 data. Use AWS Glue to crawl the S3 bucket and build the schema. Use Amazon Athena to query the data and create views to flatten nested attributes. Build Amazon QuickSight dashboards that use the Athena views.

Show Suggested Answer

Suggested Answer: BDF 🗳️

by MikeRach at Feb. 13, 2024, 1:50 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

ion_gee

10 months, 2 weeks ago

Selected Answer: BDF

Not A, do not need cloud watch. Not C, Kinesis Data firehose(Now Amazon Data Firehose) is what we need here, not Kinesis Data Streams. Not E . Rather use Athena to query S3 See Ref https://aws.amazon.com/blogs/architecture/visualize-aws-security-hub-findings-using-analytics-and-business-intelligence-tools/

upvoted 2 times

...

ale_brd_111

10 months, 3 weeks ago

Selected Answer: BDF

BDF probably

upvoted 1 times

...

nublit

12 months ago

Selected Answer: BDF

BDF are the best options

upvoted 1 times

...

awssecuritynewbie

1 year ago

Selected Answer: BDF

BDF for sure,

upvoted 1 times

...

sarcactus

1 year ago

Selected Answer: BDF

BDF Also agree with previous comment.

upvoted 1 times

...

MikeRach

1 year ago

BDF The steps are literally provided in this Doc https://aws.amazon.com/blogs/architecture/visualize-aws-security-hub-findings-using-analytics-and-business-intelligence-tools/

upvoted 2 times

...