Exam AWS Certified Security - Specialty topic 1 question 263 discussion

C as well for me and thanks for the link.

Security Hub requires AWS Config to be enabled to do checks. C is the correct answer.

As per AWS: AWS Security Hub generates control findings by performing security checks against controls. Some controls use AWS Config rules and have associated AWS Config resources. For Security Hub to accurately report findings for controls that have a change triggered schedule type, you must enable recording for the following resources in AWS Config. C

why are most of the answers provided by examtopics given as the correct answer and even supply a link sometimes but are usually wrong? And can one of their editors give a new version with the correct answers? And in your experience is this common on the other tests from the different vendors, like the Splunk tests?

c is correct

C for sure.

To run security checks for the enabled controls on your environment's resources, Security Hub either runs through the exact audit steps prescribed for the checks in Securing Amazon Web Services or uses specific AWS Config managed rules.

https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-cis-config-resources.html

Security Hub needs AWS Config for the security checks

Answer is C

Q: How are AWS Config and AWS Config rules related to AWS Security Hub? AWS Security Hub is a security and compliance service that provides security and compliance posture management, as a service. It uses AWS Config and Config rules as its primary mechanism to evaluate the configuration of AWS resources. AWS Config rules can also be used to evaluate resource configuration directly. They also are used by other AWS services, such AWS Control Tower and AWS Firewall Manager. https://aws.amazon.com/security-hub/faqs/

D is the answer https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-cis-controls.html

C Enable AWS Config before enabling Security Hub (Recommended)