A Company's AWS CloudTrail Logs Are All Centrally Stored in an Amazon

question 120

Multiple Choice

A company's AWS CloudTrail logs are all centrally stored in an Amazon S3 bucket. The security team controls the company's AWS account. The security team must prevent unauthorized access and tampering of the CloudTrail logs. Which combination of steps should the security team take? (Choose three.)

• A) Configure server-side encryption with AWS KMS managed encryption keys (SSE-KMS)
• B) Compress log file with secure gzip.
• C) Create an Amazon EventBridge (Amazon CloudWatch Events) rule to notify the security team of any modifications on CloudTrail log files.
• D) Implement least privilege access to the S3 bucket by configuring a bucket policy.
• E) Configure CloudTrail log file integrity validation.
• F) Configure Access Analyzer for S3.

---

Definitions:

Crimes

Actions or omissions that violate laws and are subject to punishment.

Acute Phase

Refers to the initial stage of a disease or condition, which is usually characterized by severe and rapidly developing symptoms.

Disorganization

A lack of structure and order within a system or environment.

Child Molesters

Individuals who sexually abuse minors, typically referring to the perpetrator being significantly older than the victim.