Soru

Zorluk: OrtaSecurity Logging, Monitoring, and Auditing

A gaming studio needs to implement a security logging and monitoring strategy for its multiplayer game backend. The studio has two primary requirements: first, it must track and audit all administrative API operations and configuration changes across its AWS account for compliance purposes; second, it must monitor compute instance performance metrics (such as CPU usage) and trigger real-time alerts when threshold limits are exceeded. Which of the following AWS services should the gaming studio use to meet these requirements? (Select TWO.)

  1. AWS CloudTrail to record and audit API activity and resource configuration modificationsCevap
  2. Amazon CloudWatch to monitor resource performance metrics and configure alarm notificationsCevap
  3. C
    Amazon GuardDuty to scan operating system packages for software vulnerabilities and install updates
  4. D
    Amazon Inspector to analyze network flow logs and identify active malicious attacks using intelligent threat detection
  5. E
    AWS Artifact to log and manage the physical security credentials of AWS data center personnel

Cevap

AWS CloudTrail to audit API activity and Amazon CloudWatch to monitor resource performance metrics and alarms.
AWS CloudTrail records administrative API actions and modifications, which satisfies the audit requirement. Amazon CloudWatch collects and tracks resource metrics like CPU utilization and can trigger alarm alerts when custom thresholds are crossed, satisfying the monitoring requirement.

Adım Adım Çözüm

1
Identify the AWS service responsible for capturing and recording administrative API operations.
AWS CloudTrail is identified as the service that logs AWS API calls and resource modifications for auditing.
Auditing API calls and configuration changes is a native capability of AWS CloudTrail.
2
Identify the AWS service responsible for gathering resource metrics and triggering notifications based on thresholds.
Amazon CloudWatch is identified as the service that monitors performance metrics and manages alarms.
CloudWatch is the standard service for collecting compute metrics and sending real-time alerts.

Anahtar Kavram

AWS CloudTrail is utilized for auditing user actions and administrative API calls, while Amazon CloudWatch is used to monitor performance metrics and configure real-time alerts.
Bu soruyu puanla