A company's security policy requires the company to keep a record of all changes that are made to Amazon EC2 security groups. The record must include information about who made the change and when the

The correct answer is D. AWS CloudTrail. AWS CloudTrail records all API calls made in an AWS account, including changes to Amazon EC2 security groups. It captures details such as who made the change, what change was made, and when the change occurred, fulfilling the requirement for security auditing and compliance.

Submitted by ricky.ec· Mar 6, 2026Security and Compliance

Question

A company's security policy requires the company to keep a record of all changes that are made to Amazon EC2 security groups. The record must include information about who made the change and when the change was made. Which AWS service will provide this information?

Options

AAWS Lambda
BAmazon CloudWatch
CAWS WAF
DAWS CloudTrail

How the community answered

(21 responses)

A
5% (1)
C
10% (2)
D
86% (18)

Explanation

AWS CloudTrail records all API calls made in an AWS account, including changes to Amazon EC2 security groups. It captures details such as who made the change, what change was made, and when the change occurred, fulfilling the requirement for security auditing and compliance.

Community Discussion

No community discussion yet for this question.

Full CLF-C02 Practice