Examtopics

AWS Certified Security - Specialty

  • Topic 1 Question 194

    A security team is responsible for reviewing AWS API call activity in the cloud environment for security violations. These events must be recorded and retained in a centralized location for both current and future AWS regions.

    What is the SIMPLEST way to meet these requirements?

    • Enable AWS Trusted Advisor security checks in the AWS Console, and report all security incidents for all regions.

    • Enable AWS CloudTrail by creating individual trails for each region, and specify a single Amazon S3 bucket to receive log files for later analysis.

    • Enable AWS CloudTrail by creating a new trail and applying the trail to all regions. Specify a single Amazon S3 bucket as the storage location.

    • Enable Amazon CloudWatch logging for all AWS services across all regions, and aggregate them to a single Amazon S3 bucket for later analysis.

    シャッフルモード