Amazon
SCS-C02 · Question #400
You need to ensure that the cloudtrail logs which are being delivered in your AWS account is encrypted. How can this be achieved in the easiest way possible?
Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #400. The question stem and answer options stay visible for context.
Submitted by neha2k· Mar 6, 2026Security Logging and Monitoring
Question
You need to ensure that the cloudtrail logs which are being delivered in your AWS account is encrypted. How can this be achieved in the easiest way possible?
Options
- ADon't do anything since CloudTrail logs are automatically encrypted.
- BEnable S3-SSE for the underlying bucket which receives the log files
- CEnable S3-KMS for the underlying bucket which receives the log files
- DEnable KMS encryption for the logs which are sent to Cloudwatch
Unlock SCS-C02 to see the answer
You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#CloudTrail#log encryption#SSE-S3#default encryption