Examkin

Soru

Zorluk: OrtaSecurity Logging, Monitoring, and Auditing

A financial company needs to implement a security and monitoring solution for its AWS environment. The security team must be able to audit all API actions taken by users and services across the account. Additionally, the operations team needs to collect and track performance metrics for their Amazon EC2 instances to configure automated alerts for high CPU utilization. Which of the following AWS services should be used to meet these requirements? (Select TWO.)

  1. AWS CloudTrailCevap
  2. Amazon CloudWatchCevap
  3. C
    Amazon GuardDuty
  4. D
    Amazon Inspector
  5. E
    AWS Shield

Cevap

AWS CloudTrail and Amazon CloudWatch
AWS CloudTrail and Amazon CloudWatch are the correct services. CloudTrail logs all API activity and user changes, satisfying the requirement to audit actions. CloudWatch collects resource metrics and supports alarm creation, satisfying the requirement to monitor EC2 CPU utilization and trigger alarms.

Adım Adım Çözüm

1
Identify the service required to log and audit user and service API actions within the AWS account.
AWS CloudTrail is selected.
CloudTrail maintains an event history of actions, which is essential for security auditing, governance, and operational analysis.
2
Identify the service required to collect performance metrics and set up alarms for EC2 CPU utilization.
Amazon CloudWatch is selected.
CloudWatch is the primary monitoring service for tracking resource utilization and triggering notifications or automated responses based on metrics.

Anahtar Kavram

AWS CloudTrail tracks API activity and user actions for auditing, while Amazon CloudWatch monitors resource performance metrics and configures alerts.
Bu soruyu puanla

Konular

Security Logging, Monitoring, and Auditing

Bu konudan daha fazla soru