Examkin

Soru

Zorluk: KolaySecurity Logging, Monitoring, and Auditing

A logistics company wants to track activity across its AWS infrastructure. The operations team needs to:
1. Audit all user actions and API calls to identify who deleted an Amazon S3 bucket.
2. Monitor system performance metrics, such as CPU utilization of Amazon EC2 instances, and trigger alarms if they exceed normal thresholds.

Which AWS services should the company use to satisfy these requirements? (Select TWO.)

  1. AWS CloudTrailCevap
  2. Amazon CloudWatchCevap
  3. C
    Amazon GuardDuty
  4. D
    Amazon Inspector

Cevap

AWS CloudTrail and Amazon CloudWatch
The correct services are AWS CloudTrail and Amazon CloudWatch. AWS CloudTrail tracks and logs user activity and API transactions across AWS infrastructure, which satisfies the requirement to audit S3 bucket deletions. Amazon CloudWatch collects and tracks metrics, monitors log files, and sets alarms, which satisfies the requirement to monitor EC2 CPU utilization and trigger alerts.

Adım Adım Çözüm

1
Identify the service needed to audit user actions and API activity, such as identifying who deleted an Amazon S3 bucket.
AWS CloudTrail records a history of API calls and user actions, fulfilling the auditing requirement.
CloudTrail is the primary service for tracking account activity and API usage.
2
Identify the service needed to monitor operational performance metrics (like CPU usage) and configure alarms.
Amazon CloudWatch collects performance metrics and allows the configuration of alarms when thresholds are crossed, fulfilling the monitoring requirement.
CloudWatch is the core service for application and resource monitoring on AWS.

Anahtar Kavram

Distinguishing between AWS CloudTrail for API/user auditing and Amazon CloudWatch for performance monitoring and alerting.
Tahmini Süre:1m 0s
Bu soruyu puanla

Konular

Security Logging, Monitoring, and Auditing

Bu konudan daha fazla soru