Config

Question 1

Which AWS service provides an inventory of AWS resources and their configurations, including their relationships and how they’ve changed over time?

Answer 1

AWS Config

Question 2

What AWS Config feature allows to aggregate configuration and compliance data from multiple accounts and regions into a single account?

Answer 2

Multi-Account Multi-Region Data Aggregation

Question 2

Do source accounts that are part of an AWS Organization require additional authorization for an AWS Config Aggregator to collect their data?

Answer 2

No

Question 3

Which AWS Config resource must be created to collect configuration and compliance data from multiple source accounts and regions?

Answer 3

Aggregator

Question 4

In which AWS region AWS Config Aggregator must be created?

Answer 4

The region where data must be aggregated

Question 5

What must source accounts not in an AWS Organization provide to allow an AWS Config Aggregator to collect their data?

Answer 5

Explicit authorization

Question 6

Can AWS Config block configuration changes to resources?

Answer 6

No, it detects, records, evaluates changes and can trigger remediation actions, but does not prevent changes from happening

Question 7

What are the core functions of AWS Config?

Answer 7

• Record and monitor resource configuration changes over time
• Evaluate compliance with organizational standards

Question 8

Can AWS Config monitor and aggregate resource configurations across regions and accounts?

Answer 8

Yes, AWS Config is regional service, but supports cross-region and cross-account aggregation

Question 8

What types of features does AWS Config support?

Answer 8

Standard and Optional features

Question 8

What integrations does AWS Config support for near-real-time responses to configuration changes?

Answer 8

EventBridge or SNS to deliver events/notifications, which can trigger AWS Lambda for processing or remediation

Question 9

What is the optional feature of AWS Config?

Answer 9

Config Rules: evaluates resources against defined standards using AWS Lambda and supports automatic remediation for non-compliant resources

Question 9

What is the standard feature of AWS Config? A:

Answer 9

Configuration recorder: once enabled, collects resources and configuration history in an S3 bucket

Question 10

What types of Config Rules are available in AWS Config?

Answer 10

• AWS-managed rules
• Customer-managed rules