A Company Is Collecting AWS CloudTrail Log Data from Multiple

question 232

Multiple Choice

A company is collecting AWS CloudTrail log data from multiple AWS accounts by managing individual trails in each account and forwarding log data to a centralized Amazon S3 bucket residing in a log archive account. After CloudTrail introduced support for AWS Organizations trails, the company decided to further centralize management and automate deployment of the CloudTrail logging capability across all of its AWS accounts. The company's security engineer created an AWS Organizations trail in the master account, enabled server-side encryption with AWS KMS managed keys (SSE-KMS) for the log files, and specified the same bucket as the storage location. However, the engineer noticed that logs recorded by the new trail were not delivered to the bucket. Which factors could cause this issue? (Choose two.)

• A) The CMK key policy does not allow CloudTrail to make encrypt and decrypt API calls against the key.
• B) The CMK key policy does not allow CloudTrail to make GenerateDatakey API calls against the key.
• C) The IAM role used by the CloudTrail trail does not have permissions to make PutObject API calls against a folder created for the Organizations trail.
• D) The S3 bucket policy does not allow CloudTrail to make PutObject API calls against a folder created for the Organizations trail.
• E) The CMK key policy does not allow the IAM role used by the CloudTrail trail to use the key for cryptographical operations.

---

Definitions:

Industry Group

A classification involving businesses that operate in the same sector or industry and share similar product lines or services.

NAICS

The North American Industry Classification System, a standard used by federal statistical agencies for classifying business establishments for statistical analysis.

Derived Demand

Demand for a factor of production or intermediate good that occurs as a result of the demand for another good or service.

Wood Pallets

Wood pallets are flat transport structures made of wood that support goods in a stable fashion while being lifted by a forklift, pallet jack, front loader, or other jacking device.