Examkin

Question

Difficulty: EasySecurity Logging, Monitoring, and Auditing

A logistics company wants to track activity across its AWS infrastructure. The operations team needs to:
1. Audit all user actions and API calls to identify who deleted an Amazon S3 bucket.
2. Monitor system performance metrics, such as CPU utilization of Amazon EC2 instances, and trigger alarms if they exceed normal thresholds.

Which AWS services should the company use to satisfy these requirements? (Select TWO.)

  1. AWS CloudTrailAnswer
  2. Amazon CloudWatchAnswer
  3. C
    Amazon GuardDuty
  4. D
    Amazon Inspector

Answer

AWS CloudTrail and Amazon CloudWatch
The correct services are AWS CloudTrail and Amazon CloudWatch. AWS CloudTrail tracks and logs user activity and API transactions across AWS infrastructure, which satisfies the requirement to audit S3 bucket deletions. Amazon CloudWatch collects and tracks metrics, monitors log files, and sets alarms, which satisfies the requirement to monitor EC2 CPU utilization and trigger alerts.

Step-by-Step Solution

1
Identify the service needed to audit user actions and API activity, such as identifying who deleted an Amazon S3 bucket.
AWS CloudTrail records a history of API calls and user actions, fulfilling the auditing requirement.
CloudTrail is the primary service for tracking account activity and API usage.
2
Identify the service needed to monitor operational performance metrics (like CPU usage) and configure alarms.
Amazon CloudWatch collects performance metrics and allows the configuration of alarms when thresholds are crossed, fulfilling the monitoring requirement.
CloudWatch is the core service for application and resource monitoring on AWS.

Key Concept

Distinguishing between AWS CloudTrail for API/user auditing and Amazon CloudWatch for performance monitoring and alerting.
Estimated Time:1m 0s
Rate this question

Topics

Security Logging, Monitoring, and Auditing

More questions from this topic