Examkin

Question

Difficulty: EasySecurity Logging, Monitoring, and Auditing

A company wants to establish baseline visibility for its new AWS account. The company has two requirements: first, it must record a history of all API calls and user activity for security compliance auditing; second, it must track infrastructure performance metrics (such as CPU utilization) and send alerts when resource limits are exceeded. Which of the following AWS services should the company use to meet these requirements? (Select TWO.)

  1. AWS CloudTrailAnswer
  2. Amazon CloudWatchAnswer
  3. C
    Amazon GuardDuty
  4. D
    AWS Artifact

Answer

The company should use AWS CloudTrail and Amazon CloudWatch.
AWS CloudTrail tracks and logs all API calls and user changes in the AWS account, which satisfies auditing needs. Amazon CloudWatch gathers performance data and can trigger notifications when metrics go past set thresholds, satisfying the performance monitoring needs.

Step-by-Step Solution

1
Determine which service records and logs AWS API events and user actions.
AWS CloudTrail is identified as the service that logs all account management actions.
This meets the compliance requirement of recording all user API activity.
2
Determine which service collects operational metrics and sends alerts on threshold violations.
Amazon CloudWatch is identified as the monitoring and alerting service.
This satisfies the requirement to track CPU utilization and set up alerts.

Key Concept

Distinguishing between CloudTrail (API history and auditing) and CloudWatch (metrics, performance monitoring, and alerting).
Rate this question

Topics

Security Logging, Monitoring, and Auditing

More questions from this topic