Design a log analysis solution.
7 practice questions under this official exam objective (SCS-C02, SCS-C03), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
7 total · page 1 of 1How Can the Security Team Trace a Former Employee's Access Key Activity in AWS?
Investigating what an identified access key did over the past three months maps directly to the CloudTrail console's 90-day event history, which is se
Use Amazon Security Lake to aggregate and normalize organization, Marketplace, and on-prem
A company needs one place to aggregate and normalize logs from its entire Organizations organization, AWS Marketplace offerings, and on-premises syste
Centralize Security Hub findings via delegated admin, EventBridge to Firehose/S3, and Athe
The company needs Security Hub findings combined across all accounts and Regions and visualized on a custom dashboard with operational data. The solut
Forward logs with the CloudWatch agent to CloudWatch Logs and query with Logs Insights
Auto-scaled Linux web servers must not lose logs on scale-in, and logs must be queryable for sessions/user issues, cost-effectively. Install the Cloud
Stream on-prem logs via Kinesis Agent to Firehose, process with Managed Flink, store in Op
On-premises device logs must be analyzed in near real time on AWS and retained 365 days for pattern/substring search. Install the Kinesis Agent on pre
How Do You Disable a Compromised IAM Identity Center User and Audit Activity?
This SCS-C03 question tests immediate containment of a compromised workforce identity in IAM Identity Center and retrospective analysis of seven days
Use Kinesis for real-time forensic log streaming and OpenSearch Service for persistent log
Hundreds of Docker-on-EC2 apps need forensic logging with real-time analytics, message replay, and persistence. Amazon Kinesis ingests the log stream