Question 37
Domain 6: Management and Security GovernanceAn organization wants a single approach to control how AWS services are configured and rolled out across multiple environments while also tracking changes over time. Which capability best aligns with centralized management, deployment, and versioning of AWS services?
Correct answer: B
Explanation
A secure and consistent deployment strategy should use a centralized mechanism that manages service configuration, controls deployments, and preserves version history across environments. — AWS Certified Security Specialty Exam Guide — Domain 6, Task Statement 6.2: Centralized management, deployment, and versioning of AWS services.
Why each option is right or wrong
A. Use separate manual setup processes for each environment to maintain independent service configurations.
Centralized management requires a single approach rather than separate manual processes per environment.
B. Use a centralized process that manages service configuration, deployment, and version tracking across environments.
The source material explicitly identifies centralized management, deployment, and versioning of AWS services as the relevant capability for controlling configurations, rolling out services, and tracking changes over time across environments.
C. Rely on ad hoc service updates in each account as long as administrators document the final state.
Versioning involves tracking changes through a managed process, not only documenting the end state after ad hoc updates.
D. Allow each team to choose its own deployment method if all teams use AWS services.
The objective is consistent deployment through centralization, not team-specific deployment methods.