Automation can improve the speed and reliability of control assessments by automating repetitive checks and standardizing evidence collection. This is the correct choice because automation accelerates repetitive verification tasks and produces consistent, machine readable evidence that supports NIST RMF control assessment activities.

Automation enables continuous monitoring and automated evidence capture for technical controls and it reduces human error while improving repeatability. For a mid sized financial services company automation helps scale assessment efforts, provides time stamped and standardized logs for auditors, and allows assessors to focus manual effort on exceptions and complex controls.

Automation is not a complete replacement for human assessment. Automated checks handle measurable attributes well but they do not replace interview based validation, policy interpretation, and contextual analysis that require human judgment. A blended approach combines automated evidence collection with targeted manual testing to meet RMF assessment objectives.

Automation must be applied to every control assessment and should replace manual testing entirely. This is incorrect because some controls require human observation or judgment and cannot be fully validated by automation alone. Relying only on automation would leave gaps in assurance.

Automation is appropriate only for administrative and operational controls and is not suitable for technical controls. This is incorrect because many technical controls such as configurations, patch status, and access controls are well suited to automated and continuous checks and are often more reliable when monitored by tools.

Rely exclusively on Cloud Security Command Center for evidence collection and assessment of controls. This is incorrect because Cloud Security Command Center is a useful tool but it does not cover every control domain or evidence type. Exclusive reliance on a single tool can create coverage gaps and does not satisfy the full set of RMF assessment procedures.

Full AWS Practitioner Certification Question