A company requires that all activity in its AWS account be logged using AWS CloudTrail. Additionally, a SysOps administrator must know when CloudTrail log files are modified or deleted. How should…

The correct answer is A. Enable log file integrity validation. Use the AWS CLI to validate the log files. The CloudTrail Processing Library is a Java library that provides an easy way to process AWS CloudTrail logs. You provide configuration details about your CloudTrail SQS queue and write code to process events. The CloudTrail Processing Library does the rest. It polls your…

Submitted by lucia.co· Mar 30, 2026Monitoring, Logging, and Remediation

Question

A company requires that all activity in its AWS account be logged using AWS CloudTrail. Additionally, a SysOps administrator must know when CloudTrail log files are modified or deleted. How should the SysOps administrator meet these requirements?

Options

AEnable log file integrity validation. Use the AWS CLI to validate the log files.
BEnable log file integrity validation. Use the AWS CloudTrail Processing Library to validate the log
CUse CloudTrail Insights to monitor the log files for modifications.
DUse Amazon CloudWatch Logs to monitor the log files for modifications.

How the community answered

(28 responses)

A
75% (21)
B
7% (2)
C
4% (1)
D
14% (4)

Explanation

The CloudTrail Processing Library is a Java library that provides an easy way to process AWS CloudTrail logs. You provide configuration details about your CloudTrail SQS queue and write code to process events. The CloudTrail Processing Library does the rest. It polls your Amazon SQS queue, reads and parses queue messages, downloads CloudTrail log files, parses events in the log files, and passes the events to your code as Java objects. https://docs.aws.amazon.com/awscloudtrail/latest/userguide/use-the-cloudtrail-processing-

Topics

#CloudTrail#log integrity validation#audit logs#log file protection

Community Discussion

No community discussion yet for this question.

Full SOA-C02 Practice