A SysOps Administrator Must Secure AWS CloudTrail Logs

question 168

Multiple Choice

A SysOps Administrator must secure AWS CloudTrail logs. The Security team is concerned that an employee may modify or attempt to delete CloudTrail log files from its Amazon S3 bucket. Which practices will ensure that the log files are available and unaltered? (Choose two.)

• A) Enable the CloudTrail log file integrity check in AWS Config Rules.
• B) Use CloudWatch Events to scan log files hourly.
• C) Enable CloudTrail log file integrity validation.
• D) Turn on Amazon S3 MFA Delete for the CloudTrail bucket.
• E) Implement a DENY ALL bucket policy on the CloudTrail bucket.

---

Definitions:

Parathyroid Hormone

A substance secreted by the parathyroid glands that controls the amount of calcium in the bloodstream.

Bone Resorption

The process by which osteoclasts break down bone tissue, releasing minerals into the blood and leading to a decrease in bone density.

Inferior Good

A good that has a negative income effect.

Goods

Physical items that satisfy human wants or needs and can be transferred or sold.