Examkin

Soru

Zorluk: KolaySecurity Logging, Monitoring, and Auditing

A retail company needs to track and audit all user activity and API calls within their AWS account for security compliance. They want to identify which specific user modified a security group rule or deleted an Amazon S3 bucket. Which AWS service should the company use to meet this requirement?

  1. AWS CloudTrailCevap
  2. B
    Amazon CloudWatch
  3. C
    Amazon GuardDuty
  4. D
    Amazon Inspector

Cevap

AWS CloudTrail
AWS CloudTrail is the correct choice because it records actions taken by a user, role, or AWS service. It provides a detailed history of API calls, including who made the call, when it was made, and from which IP address, which meets the company's compliance requirements.

Adım Adım Çözüm

1
Identify the core requirement of the scenario: tracking and auditing all user actions and API calls (e.g., resource modification or deletion).
The requirement is for audit trails of API activity.
This helps narrow down the services that record activity versus those that monitor performance or detect threats.
2
Compare the capabilities of the options relative to logging API actions.
AWS CloudTrail is specifically designed for governance, compliance, and operational auditing of AWS account activity.
Selecting the service that logs AWS API calls ensures compliance and security visibility.

Anahtar Kavram

AWS CloudTrail provides governance, compliance, operational auditing, and risk auditing of your AWS account by logging user activity and API calls.
Tahmini Süre:45s
Bu soruyu puanla

Konular

Security Logging, Monitoring, and Auditing

Bu konudan daha fazla soru