SCS-C02 · Question #297
A company has hundreds of AWS accounts, and a centralized Amazon S3 bucket used to collect AWS CloudTrail logs for all of these accounts. A Security Engineer wants to create a solution that will enabl
Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #297. The question stem and answer options stay visible for context.
Question
A company has hundreds of AWS accounts, and a centralized Amazon S3 bucket used to collect AWS CloudTrail logs for all of these accounts. A Security Engineer wants to create a solution that will enable the company to run ad hoc queries against its CloudTrail logs dating back 3 years from when the trails were first enabled in the company's AWS account. How should the company accomplish this with the least amount of administrative overhead?
Options
- ARun an Amazon EMP cluster that uses a MapReduce job to be examine the CloudTrail trails.
- BUse the events history/feature of the CloudTrail console to query the CloudTrail trails.
- CWrite an AWS Lambda function to query the CloudTrail trails
- DCreate an Amazon Athena table that tools at the S3 bucket the CloudTrail trails are being written
Unlock SCS-C02 to see the answer
You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.