ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

AWS Security Hub includes built-in security standards such as the CIS AWS Foundations Benchmark and PCI DSS. When enabled across multiple accounts and Regions, it continuously runs automated configuration checks by using AWS Config rules, aggregates the results centrally, and displays each control's compliance status in a single dashboard. Security Hub can also integrate natively with Amazon EventBridge to route findings to ticketing or SOAR systems, enabling remediation workflows without extensive custom development.

AWS Config conformance packs can evaluate resources against specific rules, but they do not provide the same cross-account, multi-Region aggregation, prebuilt PCI reporting, or native finding forwarding features. AWS Trusted Advisor offers best-practice checks but does not map results directly to compliance standards or aggregate findings across accounts. AWS Artifact supplies downloadable audit reports and agreements but does not perform continuous technical checks of your environment.