# AWS-Certified-DevOps-Engineer---Professional-DOP-C02 — Question 427

**Type:** multiple_response
**Topics:** topic_1

## Question

A company recently created a new AWS Control Tower landing zone in a new organization in AWS Organizations. The landing zone must be able to demonstrate compliance with the Center for Internet Security (CIS) Benchmarks for AWS Foundations.

The company’s security team wants to use AWS Security Hub to view compliance across all accounts. Only the security team can be allowed to view aggregated Security Hub findings. In addition, specific users must be able to view findings from their own accounts within the organization. All accounts must be enrolled in Security Hub after the accounts are created.

Which combination of steps will meet these requirements in the MOST automated way? (Choose three.)

## Correct Answer

_See scenario._

## Explanation

The answer is ACE because:
A few hours ago, I just finished the DOP-C02 exam.
My score is 1000 points.
This question has come up, I choose ACE.

**Reference:** examtopics_top_comment

---
Source: https://hiexam.net/q/amazon/AWS-Certified-DevOps-Engineer---Professional-DOP-C02/427  
Practice (tracked): https://hiexam.net/study/AWS-Certified-DevOps-Engineer---Professional-DOP-C02/practice