nerdexam
Amazon

SCS-C02 · Question #297

A company has hundreds of AWS accounts, and a centralized Amazon S3 bucket used to collect AWS CloudTrail logs for all of these accounts. A Security Engineer wants to create a solution that will enabl

Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #297. The question stem and answer options stay visible for context.

Submitted by diego_uy· Mar 6, 2026Security Logging and Monitoring

Question

A company has hundreds of AWS accounts, and a centralized Amazon S3 bucket used to collect AWS CloudTrail logs for all of these accounts. A Security Engineer wants to create a solution that will enable the company to run ad hoc queries against its CloudTrail logs dating back 3 years from when the trails were first enabled in the company's AWS account. How should the company accomplish this with the least amount of administrative overhead?

Options

  • ARun an Amazon EMP cluster that uses a MapReduce job to be examine the CloudTrail trails.
  • BUse the events history/feature of the CloudTrail console to query the CloudTrail trails.
  • CWrite an AWS Lambda function to query the CloudTrail trails
  • DCreate an Amazon Athena table that tools at the S3 bucket the CloudTrail trails are being written

Unlock SCS-C02 to see the answer

You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#CloudTrail#Amazon Athena#S3 log analysis#ad hoc queries
Full SCS-C02 Practice