Examkin

Question

Difficulty: MediumSecurity Logging, Monitoring, and Auditing

A financial company needs to implement a security and monitoring solution for its AWS environment. The security team must be able to audit all API actions taken by users and services across the account. Additionally, the operations team needs to collect and track performance metrics for their Amazon EC2 instances to configure automated alerts for high CPU utilization. Which of the following AWS services should be used to meet these requirements? (Select TWO.)

  1. AWS CloudTrailAnswer
  2. Amazon CloudWatchAnswer
  3. C
    Amazon GuardDuty
  4. D
    Amazon Inspector
  5. E
    AWS Shield

Answer

AWS CloudTrail and Amazon CloudWatch
AWS CloudTrail and Amazon CloudWatch are the correct services. CloudTrail logs all API activity and user changes, satisfying the requirement to audit actions. CloudWatch collects resource metrics and supports alarm creation, satisfying the requirement to monitor EC2 CPU utilization and trigger alarms.

Step-by-Step Solution

1
Identify the service required to log and audit user and service API actions within the AWS account.
AWS CloudTrail is selected.
CloudTrail maintains an event history of actions, which is essential for security auditing, governance, and operational analysis.
2
Identify the service required to collect performance metrics and set up alarms for EC2 CPU utilization.
Amazon CloudWatch is selected.
CloudWatch is the primary monitoring service for tracking resource utilization and triggering notifications or automated responses based on metrics.

Key Concept

AWS CloudTrail tracks API activity and user actions for auditing, while Amazon CloudWatch monitors resource performance metrics and configures alerts.
Rate this question

Topics

Security Logging, Monitoring, and Auditing

More questions from this topic