nerdexam
Amazon

SCS-C02 · Question #173

A security engineer needs to build a solution to turn AWS CloudTrail back on in multiple AWS Regions in case it is ever turned off. What is the MOST efficient way to implement this solution?

The correct answer is A. Use AWS Config with a managed rule to initiate the AWS-EnableCloudTrail remediation. https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/automatically-re-enable-aws- cloudtrail-by-using-a-custom-remediation-rule-in-aws-config.html

Submitted by javi_es· Mar 6, 2026Security Logging and Monitoring

Question

A security engineer needs to build a solution to turn AWS CloudTrail back on in multiple AWS Regions in case it is ever turned off. What is the MOST efficient way to implement this solution?

Options

  • AUse AWS Config with a managed rule to initiate the AWS-EnableCloudTrail remediation.
  • BCreate an Amazon EventBridge event with a cloudtrail.amazonaws.com event source and a
  • CCreate an Amazon CloudWatch alarm with a cloudtrail.amazonaws.com event source and a
  • DMonitor AWS Trusted Advisor to ensure CloudTrail logging is enabled.

How the community answered

(44 responses)
  • A
    73% (32)
  • B
    9% (4)
  • C
    2% (1)
  • D
    16% (7)

Explanation

https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/automatically-re-enable-aws- cloudtrail-by-using-a-custom-remediation-rule-in-aws-config.html

Topics

#AWS Config#CloudTrail#auto-remediation#managed rule

Community Discussion

No community discussion yet for this question.

Full SCS-C02 Practice