A Recent Security Audit Found That AWS CloudTrail Logs Are

question 85

Multiple Choice

A recent security audit found that AWS CloudTrail logs are insufficiently protected from tampering and unauthorized access. Which actions must the Security Engineer take to access these audit findings? (Choose three.)

• A) Ensure CloudTrail log file validation is turned on.
• B) Configure an S3 lifecycle rule to periodically archive CloudTrail logs into Glacier for long-term storage.
• C) Use an S3 bucket with tight access controls that exists in a separate account.
• D) Use Amazon Inspector to monitor the file integrity of CloudTrail log files.
• E) Request a certificate through ACM and use a generated certificate private key to encrypt CloudTrail log files.
• F) Encrypt the CloudTrail log files with server-side encryption AWS KMS-managed keys (SSE-KMS).

---

Definitions:

Pattern Formation

The biological process by which cells in an organism acquire different identities, leading to the emergence of patterns such as stripes or spots during development.

Maternal Effect Gene

A gene whose expression in a mother affects the phenotype of her offspring, independent of the offspring's genotype.

Post-Translational Modification

The chemical modification of proteins after they have been synthesized, altering their function and activity within the cell.

DNA Binding Sites

Specific sequences in the DNA to which proteins such as transcription factors can bind, influencing the regulation of genes.