Free SCS-C02 Web TestEngine Demo

Q56 Single choice

A company has AWS accounts in an organization in AWS Organizations.

The company has enabled Amazon GuardDuty in its production, support, and test accounts.

The company runs important workloads in the production account and centrally stores logs in an Amazon
S3 bucket in the support account.

A security engineer must implement a solution to elevate security findings for the production account and the S3 bucket.

The solution must automatically elevate findings of HIGH severity to CRITICAL severity.

Which solution will meet these requirements?

A
Enable AWS Security Hub for all accounts. In the Security Hub administrator account, enable the GuardDuty integration. Create automation rules to elevate findings for the production account and the
S3 bucket.
B
Enable AWS Security Hub for all accounts. In the Security Hub administrator account, enable the GuardDuty integration. Use Amazon EventBridge to create a custom rule to elevate findings for the production account and the S3 bucket.
C
Use the GuardDuty administrator account to configure a threat list that includes the production account and the S3 bucket. Use Amazon EventBridge and Amazon Simple Notification Service (Amazon SNS) to elevate findings from the threat list.
D
Use the GuardDuty administrator account to enable S3 protection for the support account that contains the S3 bucket. Configure GuardDuty to elevate findings for the production account and the S3 bucket.

SCS-C02 Web TestEngine demo