DOP-C02 · Question #379
A company hosts an application in its AWS account. The application uses an Amazon S3 bucket to store objects that contain sensitive information. The company needs to capture object-level S3 API calls,
Sign in or unlock DOP-C02 to reveal the answer and full explanation for question #379. The question stem and answer options stay visible for context.
Question
A company hosts an application in its AWS account. The application uses an Amazon S3 bucket to store objects that contain sensitive information. The company needs to capture object-level S3 API calls, including calls that are rejected because the calls were made by using credentials that are not valid. Which solution will meet these requirements?
Options
- ACreate an AWS CloudTrail trail in the account. Enable S3 data events logging. Configure the trail
- BCreate a new S3 bucket. Configure access logging on the application's S3 bucket. Deliver the
- CConfigure Amazon GuardDuty with S3 protection enabled for the account. Create an Amazon
- DCreate an AWS CloudTrail trail and a new S3 bucket in the account. Configure the trail to log to
Unlock DOP-C02 to see the answer
You've previewed enough free DOP-C02 questions. Unlock DOP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.