A Security Engineer Is Setting Up an AWS CloudTrail Trail

question 174

Multiple Choice

A Security Engineer is setting up an AWS CloudTrail trail for all regions in an AWS account. For added security, the logs are stored using server-side encryption with AWS KMS-managed keys (SSE-KMS) and have log integrity validation enabled. While testing the solution, the Security Engineer discovers that the digest files are readable, but the log files are not. What is the MOST likely cause?

• A) The log files fail integrity validation and automatically are marked as unavailable.
• B) The KMS key policy does not grant the Security Engineer's IAM user or role permissions to decrypt with it.
• C) The bucket is set up to use server-side encryption with Amazon S3-managed keys (SSE-S3) as the default and does not allow SSE-KMS-encrypted files.
• D) An IAM policy applicable to the Security Engineer's IAM user or role denies access to the "CloudTrail/" prefix in the Amazon S3 bucket

Acknowledge how job size and organizational structure may influence commitment levels.

Determine the role of satisfying work in promoting organizational commitment.

Examine the potential conflicts between high levels of commitment and employees' personal life.

Understand the dynamics and reduction of prejudice and discrimination in society.

---

Definitions:

Offshoring

The relocation of a business process or operation from one country to another, typically to leverage lower labor costs.

Specialization

The process by which individuals, businesses, or countries focus on producing a limited range of goods or services to gain greater efficiency and productivity.

Trade Barriers

Measures such as tariffs, quotas, and regulations implemented by governments to control international trade and protect domestic industries.

NAFTA

The North American Free Trade Agreement, a treaty between the United States, Canada, and Mexico that eliminated most tariffs and trade barriers between the countries.