Examkin

Question

Difficulty: EasySecurity Logging, Monitoring, and Auditing

A company is setting up a new application on AWS and wants to establish baseline security logging and operational monitoring. They need to track user activity and API calls for auditing purposes, as well as collect and track performance metrics for their Amazon EC2 instances. Which of the following AWS services should the company use to meet these requirements? (Select TWO).

  1. AWS CloudTrailAnswer
  2. Amazon CloudWatchAnswer
  3. C
    Amazon GuardDuty
  4. D
    Amazon Inspector
  5. E
    AWS Shield

Answer

AWS CloudTrail and Amazon CloudWatch are the services needed to track API activity and monitor EC2 performance metrics respectively.
AWS CloudTrail and Amazon CloudWatch are the appropriate services because CloudTrail records and audits all AWS API calls and user interactions, while CloudWatch tracks operational metrics such as CPU utilization and network traffic for resources like EC2 instances.

Step-by-Step Solution

1
Identify the service needed for tracking user activity and API operations.
AWS CloudTrail logs API calls, providing details on who made a call, when, and from what IP address.
This satisfies the requirement for security auditing and tracking user actions.
2
Identify the service needed for collecting and tracking performance metrics.
Amazon CloudWatch collects metric data such as CPU utilization, disk read/writes, and network traffic.
This satisfies the requirement for operational monitoring of Amazon EC2 instances.

Key Concept

Identifying the distinct use cases of AWS auditing and monitoring tools, specifically AWS CloudTrail for API logging and Amazon CloudWatch for resource metrics.
Rate this question

Topics

Security Logging, Monitoring, and Auditing

More questions from this topic