Amazon
SCS-C03 · Question #86
A company needs to retain data that is stored in Amazon CloudWatch Logs log groups. The company must retain this data for 90 days. The company must receive notification in AWS Security Hub when log gr
Sign in or unlock SCS-C03 to reveal the answer and full explanation for question #86. The question stem and answer options stay visible for context.
Submitted by rachelw· Mar 6, 2026Logging and Monitoring
Question
A company needs to retain data that is stored in Amazon CloudWatch Logs log groups. The company must retain this data for 90 days. The company must receive notification in AWS Security Hub when log group retention is not compliant with this requirement. Which solution will provide the appropriate notification?
Options
- ACreate a Security Hub custom action to assess the log group retention period.
- BCreate a data protection policy in CloudWatch Logs to assess the log group retention period.
- CCreate a Security Hub automation rule. Configure the automation rule to assess the log group
- DUse the AWS Config managed rule that assesses the log group retention period. Ensure that
Unlock SCS-C03 to see the answer
You've previewed enough free SCS-C03 questions. Unlock SCS-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#AWS Security Hub#AWS Config#CloudWatch Logs retention#compliance monitoring