AWS Cloud Practitioner CLF-C02 Practice Question

AWS Security Hub offers a single, integrated dashboard that aggregates security findings from multiple AWS services and partner tools and runs automated, continuous compliance checks against standards such as CIS AWS Foundations Benchmark and PCI-DSS. This makes it the best fit for organizations that need ongoing visibility into security alerts and proof of regulatory compliance.

AWS Firewall Manager helps centrally configure and enforce network firewall and AWS WAF policies, but it does not run broad security or compliance checks. AWS Config records and evaluates resource configurations, yet it does not aggregate security findings from other services. Amazon CloudWatch collects metrics and logs for operational monitoring, not consolidated security findings or automated compliance reporting.