Examkin

Question

Difficulty: MediumSecurity Logging, Monitoring, and Auditing

A digital publishing company requires a solution to track changes made to its AWS infrastructure resources, specifically recording who made a configuration change and when. At the same time, the company needs to monitor application log files for specific error patterns and trigger automated alerts. Which AWS services are designed to address these requirements?

  1. A
    Amazon CloudWatch for tracking user and API activity, and AWS CloudTrail for monitoring log files and sending alerts.
  2. AWS CloudTrail for tracking user and API activity, and Amazon CloudWatch for monitoring log files and sending alerts.Answer
  3. C
    Amazon GuardDuty for tracking user and API activity, and Amazon Inspector for monitoring log files and sending alerts.
  4. D
    AWS security teams for tracking user and API activity, and AWS Shield for monitoring log files and sending alerts.

Answer

AWS CloudTrail for tracking user and API activity, and Amazon CloudWatch for monitoring log files and sending alerts.
AWS CloudTrail records user activity and API calls, allowing the company to track changes and audit who performed specific actions. Amazon CloudWatch is used to collect logs, monitor application performance, and configure alarms when specific log patterns or thresholds are met.

Step-by-Step Solution

1
Identify the service responsible for auditing API actions and user modifications to resources.
AWS CloudTrail records AWS Management Console actions and API calls.
CloudTrail provides operational and risk auditing of AWS account activity.
2
Identify the service responsible for collecting application logs, monitoring metrics, and triggering alerts.
Amazon CloudWatch monitors resource performance and collects logs to trigger alarms.
CloudWatch provides real-time monitoring and alerting for application metrics and log patterns.

Key Concept

AWS CloudTrail provides compliance auditing of API calls, while Amazon CloudWatch provides performance monitoring and log alerting.
Estimated Time:1m 5s
Rate this question

Topics

Security Logging, Monitoring, and Auditing

More questions from this topic