Examkin

Question

Difficulty: EasySecurity Logging, Monitoring, and Auditing

A startup wants to establish operational visibility and security auditing. They need to log all API calls made by users and services across their AWS account, and they also need to collect and monitor performance metrics, such as CPU utilization, from their Amazon EC2 instances.

Which of the following AWS services should the startup use to meet these requirements? (Select TWO.)

  1. AWS CloudTrailAnswer
  2. Amazon CloudWatchAnswer
  3. C
    Amazon GuardDuty
  4. D
    Amazon Inspector
  5. E
    AWS Shield

Answer

AWS CloudTrail and Amazon CloudWatch are the correct services. AWS CloudTrail is used to audit user activity and API calls, while Amazon CloudWatch monitors resource metrics and performance.
AWS CloudTrail is designed to capture and log API calls and user activity, satisfying the audit requirement. Amazon CloudWatch collects and monitors operational performance metrics such as CPU utilization, satisfying the resource monitoring requirement.

Step-by-Step Solution

1
Identify the service that records API activity and user actions for auditing.
AWS CloudTrail records API calls made within the AWS account, which satisfies the auditing requirement.
CloudTrail is the primary service dedicated to governance, compliance, and auditing of actions in an AWS account.
2
Identify the service that collects and monitors resource metrics like CPU utilization.
Amazon CloudWatch tracks and monitors performance metrics and logs from AWS resources.
CloudWatch is the core monitoring and observability service designed to track resource health and application performance.

Key Concept

AWS CloudTrail provides API auditing and user activity tracking, whereas Amazon CloudWatch provides resource performance monitoring and metrics collection.
Rate this question

Topics

Security Logging, Monitoring, and Auditing

More questions from this topic