A SysOps administrator has enabled AWS CloudTrail in an AWS account. If CloudTrail is disabled, it must be re-enabled immediately. What should the SysOps administrator do to meet these requirements…

The correct answer is B. Create an AWS Config rule that is invoked when CloudTrail configuration changes. To ensure that CloudTrail remains enabled in your account, AWS Config provides the cloudtrail- enabled managed rule. If CloudTrail is turned off, the cloudtrail-enabled rule automatically re- enables it by using automatic remediation…

Submitted by carlos_mx· Mar 30, 2026Monitoring, Logging, and Remediation

Question

A SysOps administrator has enabled AWS CloudTrail in an AWS account. If CloudTrail is disabled, it must be re-enabled immediately. What should the SysOps administrator do to meet these requirements WITHOUT writing custom code?

Options

AAdd the AWS account to AWS Organizations.
BCreate an AWS Config rule that is invoked when CloudTrail configuration changes.
CCreate an AWS Config rule that is invoked when CloudTrail configuration changes.
DCreate an Amazon EventBridge (Amazon CloudWatch Event) hourly rule with a schedule pattern

How the community answered

(25 responses)

A
4% (1)
B
76% (19)
C
8% (2)
D
12% (3)

Explanation

To ensure that CloudTrail remains enabled in your account, AWS Config provides the cloudtrail- enabled managed rule. If CloudTrail is turned off, the cloudtrail-enabled rule automatically re- enables it by using automatic remediation. https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/automatically-re-enable-aws- cloudtrail-by-using-a-custom-remediation-rule-in-aws-config.html

Topics

#AWS Config#CloudTrail auto-remediation#compliance enforcement#configuration monitoring

Community Discussion

No community discussion yet for this question.

Full SOA-C02 Practice