A Recent Security Audit Found That AWS CloudTrail Logs Are

question 85

Multiple Choice

A recent security audit found that AWS CloudTrail logs are insufficiently protected from tampering and unauthorized access. Which actions must the Security Engineer take to access these audit findings? (Choose three.)

• A) Ensure CloudTrail log file validation is turned on.
• B) Configure an S3 lifecycle rule to periodically archive CloudTrail logs into Glacier for long-term storage.
• C) Use an S3 bucket with tight access controls that exists in a separate account.
• D) Use Amazon Inspector to monitor the file integrity of CloudTrail log files.
• E) Request a certificate through ACM and use a generated certificate private key to encrypt CloudTrail log files.
• F) Encrypt the CloudTrail log files with server-side encryption AWS KMS-managed keys (SSE-KMS).

---

Definitions:

Surgical Incision

The act of making a cut in the body with a sharp instrument, especially during surgery to access or remove an internal part of the body.

Antiembolism Compression Stockings

Specially designed stockings that apply pressure to legs to prevent blood clots and improve blood flow, commonly used post-surgery.

Discomfort

A mild form of physical or emotional distress.

Postanesthesia Care Unit (PACU)

A hospital area where patients recover and are closely monitored after undergoing anesthesia and surgery.