A Company Monitors Its Account Activity Using AWS CloudTrail, and Is

question 441

Multiple Choice

A company monitors its account activity using AWS CloudTrail, and is concerned that some log files are being tampered with after the logs have been delivered to the account's Amazon S3 bucket. Moving forward, how can the SysOps Administrator confirm that the log files have not been modified after being delivered to the S3 bucket.

• A) Stream the CloudTrail logs to Amazon CloudWatch to store logs at a secondary location.
• B) Enable log file integrity validation and use digest files to verify the hash value of the log file.
• C) Replicate the S3 log bucket across regions, and encrypt log files with S3 managed keys.
• D) Enable S3 server access logging to track requests made to the log bucket for security audits.

---

Definitions:

Somatosensory Senses

The body's sensations, including touch, temperature, pain, and proprioception, allowing us to perceive our environment and body position.

Hyperopia

A vision condition also known as farsightedness, where distant objects can be seen more clearly than objects that are near.

Myopia

A common vision condition also known as "nearsightedness," where distant objects appear blurry while close ones are clear.

Trichromatic Theory

A theory of color vision stating that the human eye has three types of receptors with differing sensitivities to different light wavelengths, corresponding to red, green, and blue.