nerdexam
Amazon

SAP-C02 · Question #778

A company has multiple AWS accounts that are in an organization in AWS Organizations. The company needs to store AWS account activity and query the data from a central location by using SQL. Which sol

The correct answer is B. Use a delegated administrator account to create an AWS CloudTrail Lake data store. Specify. The company needs to centralize and query AWS account activity across multiple accounts in an AWS Organizations setup using SQL.

Submitted by hans_de· Mar 6, 2026Design Solutions for Organizational Complexity

Question

A company has multiple AWS accounts that are in an organization in AWS Organizations. The company needs to store AWS account activity and query the data from a central location by using SQL. Which solution will meet these requirements?

Options

  • ACreate an AWS CloudTraii trail in each account. Specify CloudTrail management events for the
  • BUse a delegated administrator account to create an AWS CloudTrail Lake data store. Specify
  • CUse a delegated administrator account to create an AWS CloudTral trail. Specify CloudTrail
  • DUse AWS CloudFormation StackSets to deploy AWS CloudTrail Lake data stores in each

How the community answered

(38 responses)
  • A
    3% (1)
  • B
    95% (36)
  • C
    3% (1)

Why each option

The company needs to centralize and query AWS account activity across multiple accounts in an AWS Organizations setup using SQL.

ACreate an AWS CloudTraii trail in each account. Specify CloudTrail management events for the

Creating individual CloudTrail trails in each account does not inherently provide a centralized storage solution for querying, requiring additional services to aggregate and enable SQL queries.

BUse a delegated administrator account to create an AWS CloudTrail Lake data store. SpecifyCorrect

Option B directly meets all requirements by using a delegated administrator account to create a single AWS CloudTrail Lake data store, which natively aggregates CloudTrail events from across the entire organization and allows querying of this data directly using SQL.

CUse a delegated administrator account to create an AWS CloudTral trail. Specify CloudTrail

This option suggests creating a CloudTrail trail, which stores logs in S3, requiring Amazon Athena or another service for SQL querying, rather than the integrated SQL query capabilities of CloudTrail Lake.

DUse AWS CloudFormation StackSets to deploy AWS CloudTrail Lake data stores in each

Deploying separate CloudTrail Lake data stores in each account defeats the purpose of centralizing event data for querying from a single location.

Concept tested: Centralized AWS CloudTrail logging, CloudTrail Lake, AWS Organizations delegated administrator

Source: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-lake-organizations.html

Community Discussion

No community discussion yet for this question.

Full SAP-C02 Practice