A SysOps Administrator Must Secure AWS CloudTrail Logs

question 604

Multiple Choice

A SysOps Administrator must secure AWS CloudTrail logs. The Security team is concerned that an employee may modify or attempt to delete CloudTrail log files from its Amazon S3 bucket. Which practices ensure that the log files are available and unaltered? (Choose two.)

• A) Enable the CloudTrail log file integrity check in AWS Config Rules.
• B) Use CloudWatch Events to scan log files hourly.
• C) Enable CloudTrail log file integrity validation.
• D) Turn on Amazon S3 MFA Delete for the CloudTrail bucket.
• E) Implement a DENY ALL bucket policy on the CloudTrail bucket.

---

Definitions:

Maximum Average

A statistical measure aimed at finding the highest average level in a set of values or data points, commonly used in various fields of research and analysis.

Proof Of Age

is an official document or form of identification that verifies a person’s date of birth, often required for activities with age restrictions.

Oldest-Known

Descriptive term for the earliest recorded instance or example of something in history or archaeology.

Died

The cessation of all biological functions that sustain a living organism.