Amazon
SCS-C02 · Question #173
A security engineer needs to build a solution to turn AWS CloudTrail back on in multiple AWS Regions in case it is ever turned off. What is the MOST efficient way to implement this solution?
The correct answer is A. Use AWS Config with a managed rule to initiate the AWS-EnableCloudTrail remediation. https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/automatically-re-enable-aws- cloudtrail-by-using-a-custom-remediation-rule-in-aws-config.html
Submitted by javi_es· Mar 6, 2026Security Logging and Monitoring
Question
A security engineer needs to build a solution to turn AWS CloudTrail back on in multiple AWS Regions in case it is ever turned off. What is the MOST efficient way to implement this solution?
Options
- AUse AWS Config with a managed rule to initiate the AWS-EnableCloudTrail remediation.
- BCreate an Amazon EventBridge event with a cloudtrail.amazonaws.com event source and a
- CCreate an Amazon CloudWatch alarm with a cloudtrail.amazonaws.com event source and a
- DMonitor AWS Trusted Advisor to ensure CloudTrail logging is enabled.
How the community answered
(44 responses)- A73% (32)
- B9% (4)
- C2% (1)
- D16% (7)
Explanation
https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/automatically-re-enable-aws- cloudtrail-by-using-a-custom-remediation-rule-in-aws-config.html
Topics
#AWS Config#CloudTrail#auto-remediation#managed rule
Community Discussion
No community discussion yet for this question.