nerdexam
Amazon

DOP-C02 · Question #124

The security team depends on AWS CloudTrail to detect sensitive security issues in the company's AWS account. The DevOps engineer needs a solution to auto-remediate CloudTrail being turned off in an A

The correct answer is A. Create an Amazon EventBridge rule for the CloudTrail StopLogging event. Create an AWS Lambda. https://aws.amazon.com/blogs/mt/monitor-changes-and-auto-enable-logging-in-aws-cloudtrail/

Submitted by yuriko_h· Mar 6, 2026Incident & Event Response

Question

The security team depends on AWS CloudTrail to detect sensitive security issues in the company's AWS account. The DevOps engineer needs a solution to auto-remediate CloudTrail being turned off in an AWS account. What solution ensures the LEAST amount of downtime for the CloudTrail log deliveries?

Options

  • ACreate an Amazon EventBridge rule for the CloudTrail StopLogging event. Create an AWS Lambda
  • BDeploy the AWS-managed CloudTrail-enabled AWS Config rule, set with a periodic interval of 1 hour.
  • CCreate an Amazon EventBridge rule for a scheduled event every 5 minutes. Create an AWS Lambda
  • DLaunch a t2.nano instance with a script running every 5 minutes that uses the AWS SDK to query

How the community answered

(32 responses)
  • A
    75% (24)
  • B
    13% (4)
  • C
    3% (1)
  • D
    9% (3)

Explanation

https://aws.amazon.com/blogs/mt/monitor-changes-and-auto-enable-logging-in-aws-cloudtrail/

Topics

#CloudTrail#EventBridge#AWS Lambda#Security Remediation

Community Discussion

No community discussion yet for this question.

Full DOP-C02 Practice