ISC2 Systems Security Certified Practitioner (SSCP) Practice Question
Your company runs a regulated web application on dozens of Amazon EC2 instances across several AWS accounts. The Change Advisory Board must 1) define an approved configuration baseline, 2) record each resource's configuration continuously, 3) receive alerts on any drift from the baseline, and 4) view a single console with the full change history. Which AWS service meets all of these needs with minimal custom development effort?
Run scheduled Amazon Inspector assessments on each instance and email the findings to the board.
Enable AWS Config in all accounts, define Config rules for the baseline, and subscribe the board to compliance change events.
Store desired settings in AWS Systems Manager Parameter Store and forward parameter change events through Amazon EventBridge.
Use AWS CloudTrail to capture API activity and publish the logs to CloudWatch Logs for review.
AWS Config continuously records configurations for supported AWS resources, stores historical versions, and exposes detailed timelines in the console. By enabling a configuration recorder and creating Config rules that express the approved baseline, the Change Advisory Board can track compliance and view drift. AWS Config emits compliance change events to Amazon EventBridge, enabling straightforward alerting with an SNS topic subscription. CloudTrail only logs API calls, Parameter Store manages individual parameters without state tracking, and Amazon Inspector focuses on vulnerability assessments. Therefore, AWS Config is the best fit.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is AWS Config?
Open an interactive chat with Bash
How do Config Rules ensure compliance?
Open an interactive chat with Bash
What is the difference between AWS Config and AWS CloudTrail?
Open an interactive chat with Bash
ISC2 Systems Security Certified Practitioner (SSCP)
Security Concepts and Practices
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99 $11.99
$11.99/mo
Billed monthly, Cancel any time.
$19.99 after promotion ends
3 Month Pass
$44.99 $26.99
$8.99/mo
One time purchase of $26.99, Does not auto-renew.
$44.99 after promotion ends
Save $18!
MOST POPULAR
Annual Pass
$119.99 $71.99
$5.99/mo
One time purchase of $71.99, Does not auto-renew.
$119.99 after promotion ends
Save $48!
BEST DEAL
Lifetime Pass
$189.99 $113.99
One time purchase, Good for life.
Save $76!
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .