ISC Practice Question: Systems Security Implementation Verification And Validation
A security engineer is validating an AWS environment using AWS Config. Which action should be taken to ensure continuous compliance monitoring against a custom security policy?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Deploy an AWS Config custom rule using an AWS Lambda function to evaluate resource configurations.
AWS Config rules allow for the definition of custom policies that trigger evaluations based on resource configuration changes.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure Amazon GuardDuty to alert on unauthorized resource modifications.
Why it's wrong here
GuardDuty is a threat detection service, not a configuration compliance verification tool.
- ✓
Deploy an AWS Config custom rule using an AWS Lambda function to evaluate resource configurations.
Why this is correct
Custom rules in AWS Config require a Lambda function to execute the logic for evaluating resource compliance.
- ✗
Use AWS Trusted Advisor to scan for unencrypted S3 buckets.
Why it's wrong here
Trusted Advisor provides best practice recommendations but lacks the granular custom rule definition required for specific policy verification.
- ✗
Enable AWS CloudTrail to log all API calls and review the logs for policy violations.
Why it's wrong here
CloudTrail records history but does not perform real-time compliance evaluation against policy.
About these practice questions
This ISC question is part of Courseiva's 209-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official (ISC)² exam blueprint
This ISC practice question is part of Courseiva's free (ISC)² certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ISC exam.