Amazon
DOP-C02 · Question #124
The security team depends on AWS CloudTrail to detect sensitive security issues in the company's AWS account. The DevOps engineer needs a solution to auto-remediate CloudTrail being turned off in an A
The correct answer is A. Create an Amazon EventBridge rule for the CloudTrail StopLogging event. Create an AWS Lambda. https://aws.amazon.com/blogs/mt/monitor-changes-and-auto-enable-logging-in-aws-cloudtrail/
Submitted by yuriko_h· Mar 6, 2026Incident & Event Response
Question
The security team depends on AWS CloudTrail to detect sensitive security issues in the company's AWS account. The DevOps engineer needs a solution to auto-remediate CloudTrail being turned off in an AWS account. What solution ensures the LEAST amount of downtime for the CloudTrail log deliveries?
Options
- ACreate an Amazon EventBridge rule for the CloudTrail StopLogging event. Create an AWS Lambda
- BDeploy the AWS-managed CloudTrail-enabled AWS Config rule, set with a periodic interval of 1 hour.
- CCreate an Amazon EventBridge rule for a scheduled event every 5 minutes. Create an AWS Lambda
- DLaunch a t2.nano instance with a script running every 5 minutes that uses the AWS SDK to query
How the community answered
(32 responses)- A75% (24)
- B13% (4)
- C3% (1)
- D9% (3)
Explanation
https://aws.amazon.com/blogs/mt/monitor-changes-and-auto-enable-logging-in-aws-cloudtrail/
Topics
#CloudTrail#EventBridge#AWS Lambda#Security Remediation
Community Discussion
No community discussion yet for this question.