AWS Certified Security - Specialty SCS-C02 — Topic 1 Question 39

Question

A company manages multiple AWS accounts using AWS Organizations. The company’s security team notices that some member accounts are not sending AWS CloudTrail logs to a centralized Amazon S3 logging bucket. The security team wants to ensure there is at least one trail configured for all existing accounts and for any account that is created in the future. Which set of actions should the security team implement to accomplish this?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Edit the existing trail in the Organizations management account and apply it to the organization. AWS Organizations centrally governs and secures multiple AWS accounts.

AWS Certified Security - Specialty SCS-C02 — Question 39