nerdexam
Amazon

SOA-C02 · Question #250

A company has a private Amazon S3 bucket that contains sensitive information. A SysOps administrator needs to keep logs of the IP addresses from authentication failures that result from attempts to…

The correct answer is D. Turn on access logging for the S3 bucket. https://docs.aws.amazon.com/AmazonS3/latest/userguide/logging-with-S3.html

Submitted by devops_kid· Mar 30, 2026Monitoring, Logging, and Remediation

Question

A company has a private Amazon S3 bucket that contains sensitive information. A SysOps administrator needs to keep logs of the IP addresses from authentication failures that result from attempts to access objects in the bucket. The logs must be stored so that they cannot be overwritten or deleted for 90 days. Which solution will meet these requirements?

Options

  • ACreate an AWS CloudTrail trail.
  • BCreate an AWS CloudTrail trail.
  • CTurn on access logging for the S3 bucket.
  • DTurn on access logging for the S3 bucket.

How the community answered

(20 responses)
  • A
    5% (1)
  • B
    10% (2)
  • C
    5% (1)
  • D
    80% (16)

Explanation

https://docs.aws.amazon.com/AmazonS3/latest/userguide/logging-with-S3.html

Topics

#S3 access logging#S3 Object Lock#CloudTrail#audit logs

Community Discussion

No community discussion yet for this question.

Full SOA-C02 Practice