Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
AWS Certified Solutions Architect - Professional · AWS
Select 3 answers.
This question asks for 3 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
For org-wide WAF baseline: Enable AWS Config (prereq for compliance enforcement). Enable all features in AWS Organizations (prereq for Firewall Manager). Use AWS Firewall Manager to centrally deploy/manage AWS WAF rules (including OWASP Top 10). Not GuardDuty, Shield, or Security Hub — they serve different purposes (threat detection, DDoS, posture management).
AWS Firewall Manager has the following prerequisites: AWS Organizations: Your organization must be using AWS Organizations to manage your accounts, and All Features must be enabled. A firewall administrator AWS Account: You must designate one of the AWS accounts in your organization as the administrator for AWS Firewall Manager. AWS Config: You must enable AWS Config for all of the accounts in your organization so that AWS Firewall Manager can detect newly created resources. Reference: https://aws.amazon.com/blogs/security/using-aws-firewall-manager-and-waf-to-protect-your-web-applications-with-master-rules-and-application-specific-rules/
ACD is the correct combination to establish a base line security when deploying within the organization in AWS Organization.