A Company Requires That All Logs Are Captured for Everything

question 229

Multiple Choice

A company requires that all logs are captured for everything that runs in the company's AWS account. The account has multiple VPCs with Amazon EC2 instances, Application Load Balancers, Amazon RDS MySQL databases, and AWS WAF rules that are configured. The logs must be protected from deletion. The company also needs a daily visual analysis of log anomalies from the previous day. Which combination of actions should a DevOps engineer take to meet these requirements? (Choose three.)

• A) Configure an AWS Lambda function to send all Amazon CloudWatch logs to an Amazon S3 bucket. Create a dashboard report in Amazon QuickSight.
• B) Configure AWS CloudTrail to send all logs to Amazon Inspector. Create a dashboard report in Amazon QuickSight.
• C) Configure Amazon S3 MFA Delete on the logging S3 bucket.
• D) Configure an Amazon S3 Object Lock legal hold on the logging S3 bucket.
• E) Configure AWS Artifact to send all logs to the logging Amazon S3 bucket. Create a dashboard report in Amazon QuickSight.
• F) Deploy the Amazon CloudWatch agent to all EC2 instances.

---

Definitions:

Antitrust Laws

Legislation enacted by the government to prevent new monopolies from forming and police those that exist to protect consumers from exploitative practices.

Justice Department

A national executive department responsible for enforcing the law and administering justice, typically including courts and law enforcement entities.

Monopoly Power

The ability of a monopoly to dictate the terms and conditions of the goods or services it provides, including price.

Business Travelers

Individuals who travel for work or professional reasons, often requiring accommodations, conference facilities, and other travel-related services.