Examkin

Question

Difficulty: MediumAWS Management, Governance, and Developer Tools

A company needs to implement a solution on AWS that satisfies two operational requirements:

1. Track user activity and API operations across the AWS infrastructure for security auditing and compliance.
2. Monitor application and resource performance, collect log files, and trigger automated alerts when usage thresholds are exceeded.

Which AWS services should the company use to meet these requirements? (Select TWO.)

  1. AWS CloudTrailAnswer
  2. Amazon CloudWatchAnswer
  3. C
    AWS CloudFormation
  4. D
    AWS Elastic Beanstalk
  5. E
    Amazon Inspector

Answer

AWS CloudTrail and Amazon CloudWatch
AWS CloudTrail and Amazon CloudWatch are the correct selections. AWS CloudTrail records API calls, console activities, and user events to support governance and compliance audits. Amazon CloudWatch collects performance metrics and logs, and triggers alarms based on defined thresholds.

Step-by-Step Solution

1
Analyze the first requirement: tracking user activity and API operations across the infrastructure.
Identify AWS CloudTrail as the service designed specifically for auditing, logging, and monitoring API requests and console interactions.
AWS CloudTrail maintains a history of API events to enable operational auditing and security analysis.
2
Analyze the second requirement: monitoring resource performance, collecting logs, and triggering alerts.
Identify Amazon CloudWatch as the management service that handles real-time resource performance metrics, dashboard visualization, log collection, and metric alarms.
Amazon CloudWatch is the primary monitoring tool for gathering operational metrics and establishing automated threshold alerts.

Key Concept

Distinguishing between AWS auditing (CloudTrail) and performance monitoring/alerting (CloudWatch) services.
Estimated Time:1m 30s
Rate this question

Topics

AWS Management, Governance, and Developer Tools

More questions from this topic