A Security Engineer Is Defining the Logging Solution for a Newly

question 46

Multiple Choice

A Security Engineer is defining the logging solution for a newly developed product. Systems Administrators and Developers need to have appropriate access to event log files in AWS CloudTrail to support and troubleshoot the product. Which combination of controls should be used to protect against tampering with and unauthorized access to log files? (Choose two.)

• A) Ensure that the log file integrity validation mechanism is enabled.
• B) Ensure that all log files are written to at least two separate Amazon S3 buckets in the same account.
• C) Ensure that Systems Administrators and Developers can edit log files, but prevent any other access.
• D) Ensure that Systems Administrators and Developers with job-related need-to-know requirements only are capable of viewing-but not modifying-the log files.
• E) Ensure that all log files are stored on Amazon EC2 instances that allow SSH access from the internal corporate network only.

---

Definitions:

Productive Efficiency

A situation where an economy or firm produces goods or services at the lowest possible cost, often achieved by fully utilizing all available resources.

Pareto Analysis

A statistical technique used in decision making that is based on the principle that 80% of effects come from 20% of causes, often used to prioritize tasks.

80/20 Rule

A principle stating that 80% of effects come from 20% of causes, often used to highlight the importance of focusing on the most productive inputs.

Mary Parker Follett

A pioneering theorist in organizational theory and management who emphasized the importance of collective action and the role of negotiation in conflict resolution.