SCS-C02 · Question #76
SCS-C02 Question #76: Real Exam Question with Answer & Explanation
Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #76. The question stem and answer options stay visible for context.
Question
A company's security engineer must record when specific AWS Lambda functions are invoked. The logs must include the AWS principal that invoked the function. External sources and the company's developers deliver the Lambda function code by using a variety of languages such as Python, Node.js, and Golang. The security engineer has created an AWS CloudTrail trail with default configuration for the AWS account. Which solution will meet these requirements with the LEAST operational overhead?
Options
- AUpdate the Lambda function code to extract the AWS principal from the Lambda context and to
- BUse Amazon EventBridge (Amazon CloudWatch Events) to configure a rule and custom pattern
- CModify the existing CloudTrail trail. Configure the existing CloudTrail trail to monitor Lambda
- DCreate a Lambda layer that provides CloudTrail with a log event that includes the Lambda context
Unlock SCS-C02 to see the answer
You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.