ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Solutions Architect - Associate SAA-C03 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Associate SAA-C03 exam
Go to Exam

Exam AWS Certified Solutions Architect - Associate SAA-C03 topic 1 question 553 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C03
Question #: 553
Topic #: 1
[All AWS Certified Solutions Architect - Associate SAA-C03 Questions]

A solutions architect needs to review a company's Amazon S3 buckets to discover personally identifiable information (PII). The company stores the PII data in the us-east-1 Region and us-west-2 Region.

Which solution will meet these requirements with the LEAST operational overhead?

  • A. Configure Amazon Macie in each Region. Create a job to analyze the data that is in Amazon S3.
  • B. Configure AWS Security Hub for all Regions. Create an AWS Config rule to analyze the data that is in Amazon S3.
  • C. Configure Amazon Inspector to analyze the data that is in Amazon S3.
  • D. Configure Amazon GuardDuty to analyze the data that is in Amazon S3.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by Deepakin96 at Aug. 3, 2023, 11 a.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Guru4Cloud
Highly Voted 1 year, 2 months ago
Selected Answer: A
The key reasons are: Amazon Macie is designed specifically for discovering and classifying sensitive data like PII in S3. This makes it the optimal service to use. Macie can be enabled directly in the required Regions rather than enabling it across all Regions which is unnecessary. This minimizes overhead. Macie can be set up to automatically scan the specified S3 buckets on a schedule. No need to create separate jobs. Security Hub is for security monitoring across AWS accounts, not specific for PII discovery. More overhead than needed. Inspector and GuardDuty are not built for PII discovery in S3 buckets. They provide broader security capabilities.
upvoted 6 times
...
awsgeek75
Most Recent 9 months, 2 weeks ago
Selected Answer: A
PII = Macie Security Hub: Organisation security and logging not for PII Inspector: Infra vulnerability management GuardDuty: Network protection
upvoted 4 times
...
TariqKipkemei
11 months, 1 week ago
Selected Answer: A
Amazon Macie = PII
upvoted 2 times
...
mrsoa
1 year, 2 months ago
Selected Answer: A
AWS Macie = PII detection
upvoted 4 times
...
Deepakin96
1 year, 2 months ago
Selected Answer: A
Amazon Macie will identify all PII
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago