Examkin

Soru

Zorluk: KolaySecurity Logging, Monitoring, and Auditing

A company wants to establish baseline visibility for its new AWS account. The company has two requirements: first, it must record a history of all API calls and user activity for security compliance auditing; second, it must track infrastructure performance metrics (such as CPU utilization) and send alerts when resource limits are exceeded. Which of the following AWS services should the company use to meet these requirements? (Select TWO.)

  1. AWS CloudTrailCevap
  2. Amazon CloudWatchCevap
  3. C
    Amazon GuardDuty
  4. D
    AWS Artifact

Cevap

The company should use AWS CloudTrail and Amazon CloudWatch.
AWS CloudTrail tracks and logs all API calls and user changes in the AWS account, which satisfies auditing needs. Amazon CloudWatch gathers performance data and can trigger notifications when metrics go past set thresholds, satisfying the performance monitoring needs.

Adım Adım Çözüm

1
Determine which service records and logs AWS API events and user actions.
AWS CloudTrail is identified as the service that logs all account management actions.
This meets the compliance requirement of recording all user API activity.
2
Determine which service collects operational metrics and sends alerts on threshold violations.
Amazon CloudWatch is identified as the monitoring and alerting service.
This satisfies the requirement to track CPU utilization and set up alerts.

Anahtar Kavram

Distinguishing between CloudTrail (API history and auditing) and CloudWatch (metrics, performance monitoring, and alerting).
Bu soruyu puanla

Konular

Security Logging, Monitoring, and Auditing

Bu konudan daha fazla soru