You currently operate a web application In the AWS US-East region. The application runs on an auto- scaled layer of EC2 instances and an RDS Multi-AZ database. Your IT security compliance officer has

Question

Options

• ACreate a new CloudTrail trail with one new S3 bucket to store the logs and with the global
• BCreate a new CloudTrail with one new S3 bucket to store the logs. Configure SNS to send log file
• CCreate a new CloudTrail trail with an existing S3 bucket to store the logs and with the global
• DCreate three new CloudTrail trails with three new S3 buckets to store the logs one for the AWS

• A
  76% (37)
• B
  4% (2)
• C
  6% (3)
• D
  14% (7)

Explanation

AWS Identity and Access Management (IAM) is integrated with AWS CloudTrail, a service that logs AWS events made by or on behalf of your AWS account. CloudTrail logs authenticated AWS API calls and also AWS sign-in events, and collects this event information in files that are delivered to Amazon S3 buckets. You need to ensure that all services are included. Hence option B is partially correct. Option B is invalid because you need to ensure that global services is select Option C is invalid because you should use bucket policies Option D is invalid because you should ideally just create one S3

No community discussion yet for this question.