Examkin

Soru

Zorluk: KolaySecurity Logging, Monitoring, and Auditing

A university is hosting its student registration portal on AWS. The university's compliance department requires a complete history of all API calls and administrative actions taken within the AWS account to audit user activity. Which AWS service should the university use to meet this audit requirement?

  1. AWS CloudTrailCevap
  2. B
    Amazon CloudWatch
  3. C
    Amazon GuardDuty
  4. D
    Amazon Inspector

Cevap

AWS CloudTrail
AWS CloudTrail is specifically designed to enable governance, compliance, operational auditing, and risk auditing of an AWS account. It records API calls and user actions, allowing the university to track changes, investigate security incidents, and ensure compliance requirements are met.

Adım Adım Çözüm

1
Identify the primary requirement in the scenario, which is auditing and tracking a complete history of API calls and user administrative actions in the AWS account.
Recognized that API auditing is required.
This helps determine which service is designed for recording API activity.
2
Evaluate the available AWS services to find the one that logs and records account activity and API requests.
AWS CloudTrail is identified as the service dedicated to logging API calls, while Amazon CloudWatch is for performance metrics and Amazon GuardDuty is for threat detection.
Matching the requirements with the core purpose of each AWS service.

Anahtar Kavram

AWS CloudTrail is the primary service used for auditing API actions and logging user activity across an AWS account.
Tahmini Süre:45s
Bu soruyu puanla

Konular

Security Logging, Monitoring, and Auditing

Bu konudan daha fazla soru