SCS-C02 · Question #232
SCS-C02 Question #232: Real Exam Question with Answer & Explanation
Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #232. The question stem and answer options stay visible for context.
Question
A company wants to start processing sensitive data on Amazon EC2 instances. The company will use Amazon CloudWatch Logs to monitor, store, and access log files from the EC2 instances. The company's developers use CloudWatch Logs for troubleshooting. A security engineer must implement a solution that prevents the developers from viewing the sensitive data The solution must automatically apply to any new log groups that are created in the account in the future. Which solution will meet these requirements?
Options
- ACreate a CloudWatch Logs account-wide data protection policy. Specify the appropriate data
- BExport the CloudWatch Logs data to an Amazon S3 bucket. Set up automated discovery by using
- CExport the CloudWatch Logs data to an Amazon S3 bucket. Set up automated discovery by using
- DCreate a CloudWatch Logs data protection policy for each log group. Specify the appropriate data
Unlock SCS-C02 to see the answer
You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.