A company has customers located across the world. The company wants to use automation to secure its systems and network infrastructure. The company's security team must be able to track and audit all incremental changes to the infrastructure.
Which solution will meet these requirements?
To meet the requirements of the company, two key solutions are optimal: AWS CloudFormation and AWS Config. AWS CloudFormation enables the company to define and automate the provisioning of infrastructure as code, which helps in securing and consistently deploying the systems and network infrastructure. AWS Config, on the other hand, tracks and records all configuration changes to the infrastructure, thereby providing the ability to audit and monitor all incremental changes. Together, these services ensure that the infrastructure is both securely deployed and continuously monitored for changes, making this combination an ideal solution for the company's needs.
use automation to secure its systems and network infrastructure = AWS CloudFormation track and audit all incremental changes to the infrastructure = AWS Config
Option B is the most suitable because it combines the benefits of infrastructure as code (CloudFormation) with tracking and auditing capabilities (AWS Config). With CloudFormation, the company can define and deploy its infrastructure in a repeatable and automated way, ensuring consistency and adherence to security standards. AWS Config then complements this by providing visibility into changes and configuration details.
I will go for B
Organisations is not really related to this AWS Service Catalog is like a IaaC source control so D is a close option. However B looks more logical.
The difference is in wording: "The company's security team must be able to track and audit all incremental changes to the infrastructure" If this has to be done BEFORE the deployment then D is the option If this is AFTER the deployment then B is the option Hopefully exam will have better language. Good luck!