Examkin

Question

Difficulty: EasySecurity Logging, Monitoring, and Auditing

A university is hosting its student registration portal on AWS. The university's compliance department requires a complete history of all API calls and administrative actions taken within the AWS account to audit user activity. Which AWS service should the university use to meet this audit requirement?

  1. AWS CloudTrailAnswer
  2. B
    Amazon CloudWatch
  3. C
    Amazon GuardDuty
  4. D
    Amazon Inspector

Answer

AWS CloudTrail
AWS CloudTrail is specifically designed to enable governance, compliance, operational auditing, and risk auditing of an AWS account. It records API calls and user actions, allowing the university to track changes, investigate security incidents, and ensure compliance requirements are met.

Step-by-Step Solution

1
Identify the primary requirement in the scenario, which is auditing and tracking a complete history of API calls and user administrative actions in the AWS account.
Recognized that API auditing is required.
This helps determine which service is designed for recording API activity.
2
Evaluate the available AWS services to find the one that logs and records account activity and API requests.
AWS CloudTrail is identified as the service dedicated to logging API calls, while Amazon CloudWatch is for performance metrics and Amazon GuardDuty is for threat detection.
Matching the requirements with the core purpose of each AWS service.

Key Concept

AWS CloudTrail is the primary service used for auditing API actions and logging user activity across an AWS account.
Estimated Time:45s
Rate this question

Topics

Security Logging, Monitoring, and Auditing

More questions from this topic