Examkin

Question

Difficulty: MediumSecurity Logging, Monitoring, and Auditing

A smart agriculture startup is deploying IoT soil sensors that upload environmental telemetry data to AWS. The startup's compliance team requires a detailed ledger of who accessed or modified the AWS resources hosting this telemetry, while their operations team needs real-time alerts if telemetry ingestion metrics drop below a certain threshold. Which AWS services should the startup implement to meet both the auditing and operational alerting requirements?

  1. A
    AWS CloudTrail to audit the resource access history, and Amazon Inspector to scan metrics and trigger alerts.
  2. AWS CloudTrail to audit the resource access history, and Amazon CloudWatch to monitor metrics and trigger alerts when ingestion drops.Answer
  3. C
    Amazon CloudWatch to record the history of resource access, and Amazon GuardDuty to monitor metrics and configure the alerts.
  4. D
    AWS CloudTrail to track resource access, and the AWS Shared Responsibility Model to automate the operational alerting.

Answer

AWS CloudTrail to audit the resource access history, and Amazon CloudWatch to monitor metrics and trigger alerts when ingestion drops.
The correct answer properly pairs AWS CloudTrail (the primary audit logging service for recording user access and API activity) with Amazon CloudWatch (the monitoring service used to collect metrics and configure real-time alarms).

Step-by-Step Solution

1
Identify the AWS service required for compliance auditing and tracking user and API activities.
AWS CloudTrail is chosen because it logs, continuously monitors, and retains account activity related to actions across your AWS infrastructure.
Compliance teams require a chronological audit ledger of API activity and resource access.
2
Identify the AWS service required for monitoring performance telemetry and triggering alarms based on metric thresholds.
Amazon CloudWatch is chosen because it monitors operational metrics, displays dashboards, and configures alarms.
Operations teams need real-time alerts when metric values drop below defined ingestion thresholds.

Key Concept

Distinguishing between AWS CloudTrail for user activity auditing and Amazon CloudWatch for resource metric monitoring and alerting.
Rate this question

Topics

Security Logging, Monitoring, and Auditing

More questions from this topic