AWS Certified SysOps Administrator - Associate SOA-C02 — Topic 1 Question 62

Question

A company asks a SysOps administrator to ensure that AWS CloudTrail files are not tampered with after they are created. Currently, the company uses AWS Identity and Access Management (IAM) to restrict access to specific trails. The company's security team needs the ability to trace the integrity of each file. What is the MOST operationally efficient solution that meets these requirements?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Enable the CloudTrail file integrity feature on the trail. The security team can use the digest file that is created by CloudTrail to verify the integrity of the delivered files. AWS CloudTrail records API activity for auditing and governance.

AWS Certified SysOps Administrator - Associate SOA-C02 — Question 62