Examkin

Question

Difficulty: HardAWS Management, Governance, and Developer Tools

An operations team is investigating unauthorized configuration changes in their production environment. They need to determine: (1) what the exact rules of an Amazon EC2 security group were 48 hours ago compared to its current configuration, and (2) which IAM user executed the API call to modify the security group rules. Which combination of AWS services should the operations team use to investigate these two aspects of the change?

  1. AWS Config to compare the configuration states, and AWS CloudTrail to identify the user who made the API call.Answer
  2. B
    Amazon CloudWatch to compare the configuration states, and AWS CloudTrail to identify the user who made the API call.
  3. C
    AWS Config to compare the configuration states, and Amazon CloudWatch to identify the user who made the API call.
  4. D
    AWS CloudFormation to compare the configuration states, and AWS Systems Manager to identify the user who made the API call.

Answer

AWS Config to compare the configuration states, and AWS CloudTrail to identify the user who made the API call.
AWS Config is designed to record resource configuration histories and compare changes over time, while AWS CloudTrail records API calls and user activity, making them the correct combination to address both requirements.

Step-by-Step Solution

1
Identify the service needed to track and compare configuration history.
AWS Config is selected because it continuously monitors and records AWS resource configurations, enabling comparison of historical states.
The requirement asks to determine the configuration of a security group 48 hours ago compared to its current state.
2
Identify the service needed to audit user identity and API activity.
AWS CloudTrail is selected because it records API calls, including the identity of the user who made the request.
The requirement asks to determine who made the API call to modify the security group rules.

Key Concept

Understanding the distinct roles of AWS Config (configuration history) and AWS CloudTrail (API auditing).
Estimated Time:2m 0s
Rate this question

Topics

AWS Management, Governance, and Developer Tools

More questions from this topic