Examkin

Question

Difficulty: MediumSecurity Logging, Monitoring, and Auditing

A healthcare technology company is hosting its web application on Amazon EC2. The company's compliance team requires a continuous audit trail of all API operations and configuration changes made to AWS resources by users and services. Simultaneously, the operations team needs to monitor the CPU utilization of the EC2 instances and receive automated notifications if utilization exceeds 80%. Which of the following AWS services should the company implement to meet these requirements? (Select TWO.)

  1. AWS CloudTrailAnswer
  2. Amazon CloudWatchAnswer
  3. C
    Amazon GuardDuty
  4. D
    AWS Physical Infrastructure Logs

Answer

AWS CloudTrail and Amazon CloudWatch should be used to record API activity and monitor performance metrics, respectively.
AWS CloudTrail meets the first requirement by tracking and recording user API history and configuration changes for auditing and compliance. Amazon CloudWatch meets the second requirement by gathering performance metrics such as EC2 CPU utilization and generating alarms when thresholds are crossed.

Step-by-Step Solution

1
Identify the service required for compliance auditing and tracking user API activities.
AWS CloudTrail is selected because it records a history of API calls, user logins, and configuration changes within the AWS account.
The compliance team needs a continuous audit trail of all API operations and resource changes.
2
Identify the service required to track performance metrics (CPU utilization) and send alerts.
Amazon CloudWatch is selected because it monitors metrics and allows users to set up alarms and notifications when threshold limits are exceeded.
The operations team needs to monitor CPU utilization on EC2 instances and receive alerts if it exceeds 80%.

Key Concept

Understanding the distinct roles of AWS logging and monitoring services, specifically distinguishing between API auditing (CloudTrail) and operational metric monitoring (CloudWatch).
Estimated Time:1m 0s
Rate this question

Topics

Security Logging, Monitoring, and Auditing

More questions from this topic