ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam ANS-C00 All Questions

View all questions & answers for the ANS-C00 exam
Go to Exam

Exam ANS-C00 topic 1 question 147 discussion

Exam question from Amazon's ANS-C00
Question #: 147
Topic #: 1
[All ANS-C00 Questions]

You are auditing an AWS infrastructure after you noticed some abnormal charges on the bill. You use AWS Config to monitor your changes. What else is required to find out who made the change?

  • A. There is no information to find this. You will need to sign up for Config Premium.
  • B. Use the eventID of the change and reference it with your Flow Logs.
  • C. Use the eventId of the change and reference it with CloudTrail to find the culprit.
  • D. Use the eventID of the change and reference it with CloudWatch to find the culprit.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
CloudTrail is for finding "who" performed an action.
by doski at Jan. 1, 2021, 11:08 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
doski
Highly Voted 3 years, 8 months ago
C is correct
upvoted 10 times
...
ErnstVonPappen
Most Recent 2 years, 7 months ago
Culprit is a cute word.
upvoted 2 times
...
sapien45
3 years, 3 months ago
That is why I love Control Tower : AWS Cloud combined with CloudTrail Answer : C
upvoted 1 times
...
khchan123
3 years, 3 months ago
C. Use the eventId of the change and reference it with CloudTrail to find the culprit.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel