SCS-C02 · Question #297
SCS-C02 Question #297: Real Exam Question with Answer & Explanation
The correct answer is D: Create an Amazon Athena table that tools at the S3 bucket the CloudTrail trails are being written. Ad hoc query is needed and cloud trail event history needs 90 days to load non standard data. Also Aethna has a 3 year limit if I recall but this is going back 3 years not beyond.
Question
A company has hundreds of AWS accounts, and a centralized Amazon S3 bucket used to collect AWS CloudTrail logs for all of these accounts. A Security Engineer wants to create a solution that will enable the company to run ad hoc queries against its CloudTrail logs dating back 3 years from when the trails were first enabled in the company's AWS account. How should the company accomplish this with the least amount of administrative overhead?
Options
- ARun an Amazon EMP cluster that uses a MapReduce job to be examine the CloudTrail trails.
- BUse the events history/feature of the CloudTrail console to query the CloudTrail trails.
- CWrite an AWS Lambda function to query the CloudTrail trails
- DCreate an Amazon Athena table that tools at the S3 bucket the CloudTrail trails are being written
Explanation
Ad hoc query is needed and cloud trail event history needs 90 days to load non standard data. Also Aethna has a 3 year limit if I recall but this is going back 3 years not beyond.
Community Discussion
No community discussion yet for this question.