A Company Recently Performed an Annual Security Assessment of Its

question 190

Multiple Choice

A company recently performed an annual security assessment of its AWS environment. The assessment showed the audit logs are not available beyond 90 days and that unauthorized changes to IAM policies are made without detection. How should a Security Engineer resolve these issues?

• A) Create an Amazon S3 lifecycle policy that archives AWS CloudTrail trail logs to Amazon S3 Glacier after 90 days. Configure Amazon Inspector to provide a notification when a policy change is made to resources.
• B) Configure AWS Artifact to archive AWS CloudTrail logs. Configure AWS Trusted Advisor to provide a notification when a policy change is made to resources.
• C) Configure Amazon CloudWatch to export log groups to Amazon S3. Configure AWS CloudTrail to provide a notification when a policy change is made to resources.
• D) Create an AWS CloudTrail trail that stores audit logs in Amazon S3. Configure an AWS Config rule to provide a notification when a policy change is made to resources.

---

Definitions:

Visual Illusion

A misperception of visual stimuli in which something appears different from reality, often due to the brain's interpretation of visual information.

Retinal Disparity

The slight difference in visual perspective between the two eyes, contributing to depth perception.

Hue

The aspect of color that is determined by the wavelength of light and is perceived as the color itself, such as red, blue, or green.

Pitch

The perception of how high or low a sound is, determined by the frequency of sound waves.