Examkin

Soru

Zorluk: OrtaSecurity Logging, Monitoring, and Auditing

A multiplayer gaming startup needs to establish a security and operational monitoring strategy on AWS. The security team wants to audit all API actions and configuration changes made by developers across their AWS account. Concurrently, the operations team needs to track performance metrics of their Amazon EC2 instances and receive automated alerts if CPU utilization exceeds 80%. Which combination of AWS services should the startup implement to meet these requirements?

  1. AWS CloudTrail to audit all API activity and configuration changes, and Amazon CloudWatch to monitor instance metrics and send utilization alertsCevap
  2. B
    Amazon CloudWatch to audit all API activity and configuration changes, and AWS CloudTrail to monitor instance metrics and send utilization alerts
  3. C
    Amazon GuardDuty to audit all API activity and configuration changes, and Amazon Inspector to monitor instance metrics and send utilization alerts
  4. D
    AWS Artifact to audit all API activity and configuration changes, and AWS Shield to monitor instance metrics and send utilization alerts

Cevap

AWS CloudTrail to audit all API activity and configuration changes, and Amazon CloudWatch to monitor instance metrics and send utilization alerts
The correct option is the combination of AWS CloudTrail and Amazon CloudWatch. AWS CloudTrail is designed to record and audit API calls and user activity across your AWS infrastructure, providing a complete log of who did what and when. Amazon CloudWatch is the monitoring and observability service that tracks operational and performance metrics, such as CPU utilization, and allows you to set alarms that notify you or take action when a metric threshold is crossed.

Adım Adım Çözüm

1
Identify the service responsible for logging and auditing API activity and configuration changes across the AWS account.
AWS CloudTrail is determined to be the service that records API calls, user actions, and resource changes.
CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, and command line tools.
2
Identify the service responsible for monitoring performance metrics (such as CPU utilization) and triggering automated alerts.
Amazon CloudWatch is determined to be the service that tracks metrics, collects log files, and sets alarms.
CloudWatch is the primary monitoring and observability service on AWS, allowing users to configure alarms when resource metrics cross defined thresholds.
3
Combine the identified services to find the correct matching option.
The combination of AWS CloudTrail and Amazon CloudWatch is selected.
This combination successfully satisfies both the auditing requirements of the security team and the performance monitoring/alerting requirements of the operations team.

Anahtar Kavram

AWS CloudTrail vs Amazon CloudWatch for Security and Operations
Bu soruyu puanla

Konular

Security Logging, Monitoring, and Auditing

Bu konudan daha fazla soru