ExamTopics Logo
Mail Us[email protected]
Menu
Amazon Discussions
exam questions

Exam AWS Certified Solutions Architect - Associate SAA-C02 All Questions

View all questions & answers for the AWS Certified Solutions Architect - Associate SAA-C02 exam
Go to Exam

Exam AWS Certified Solutions Architect - Associate SAA-C02 topic 1 question 274 discussion

Exam question from Amazon's AWS Certified Solutions Architect - Associate SAA-C02
Question #: 274
Topic #: 1
[All AWS Certified Solutions Architect - Associate SAA-C02 Questions]

The financial application at a company stores monthly reports in an Amazon S3 bucket. The vice president of finance has mandated that all access to these reports be logged and that any modifications to the log files be detected.
Which actions can a solutions architect take to meet these requirements?

  • A. Use S3 server access logging on the bucket that houses the reports with the read and write data events and log file validation options enabled.
  • B. Use S3 server access logging on the bucket that houses the reports with the read and write management events and log file validation options enabled.
  • C. Use AWS CloudTrail to create a new trail. Configure the trail to log read and write data events on the S3 bucket that houses the reports. Log these events to a new bucket, and enable log file validation.
  • D. Use AWS CloudTrail to create a new trail. Configure the trail to log read and write management events on the S3 bucket that houses the reports. Log these events to a new bucket, and enable log file validation.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by viet1991 at Feb. 1, 2021, 11:50 p.m.
Disclaimers:
  • - ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
  • - Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
viet1991
Highly Voted 3 years, 8 months ago
C. AWS CloudTrail, configurate read and write data events on the S3 bucket (include API call) Amazon S3 Server Access is wrong. Server access logging provides detailed records for the requests that are made to a bucket. (GET, PUT, DELETE... but not include API call) https://docs.aws.amazon.com/AmazonS3/latest/dev/LogFormat.html
upvoted 38 times
DS01
3 years, 7 months ago
Answer is C. Server access logging does not have data and management events.
upvoted 5 times
...
crazyaboutazure
3 years, 7 months ago
C because CloudTrail tracks API access for infrastructure-changing events, in S3 this means creating, deleting, and modifying bucket (S3 CloudTrail docs). ... S3 Server Access Logging provides web server-style logging of access to the objects in an S3 bucket
upvoted 4 times
bluetaurianbull
3 years, 7 months ago
Not sure if the above statement is right. As per documentation https://docs.aws.amazon.com/AmazonS3/latest/userguide/logging-with-S3.html both AWS CloudTrail logging and S3 Server Access logging can log S3 API calls.
upvoted 2 times
...
...
...
NSF
Highly Voted 3 years, 8 months ago
C is the right answer because the question specifically asking logs for following events. Access, modifications and deletions which are all DATA EVENTS. Data Events: The following data types are recorded: - Amazon S3 object-level API activity (for example, GetObject, DeleteObject, and PutObject API operations) - AWS Lambda function execution activity (the Invoke API) https://docs.aws.amazon.com/awscloudtrail/latest/userguide/logging-data-events-with-cloudtrail.html In contrast the management events are as follow. Configuring security (for example, IAM AttachRolePolicy API operations) Registering devices (for example, Amazon EC2 CreateDefaultVpc API operations) Configuring rules for routing data (for example, Amazon EC2 CreateSubnet API operations) Setting up logging (for example, AWS CloudTrail CreateTrail API operations)
upvoted 27 times
...
rude7
Most Recent 2 years, 9 months ago
Selected Answer: C
Answer C. https://docs.aws.amazon.com/AmazonS3/latest/userguide/enable-cloudtrail-logging-for-s3.html
upvoted 1 times
...
archimate
2 years, 10 months ago
I think its D, Cloud Trail Management event is for logging management. Log the log change. https://aws.amazon.com/premiumsupport/knowledge-center/cloudtrail-data-management-events/
upvoted 1 times
...
archimate
2 years, 10 months ago
whats the difference bt C and D?
upvoted 1 times
Jobair
2 years, 7 months ago
C - logging data events D - logging mgmt events
upvoted 1 times
...
...
hariti_crafting
2 years, 11 months ago
Thus question was there in my exam date 22 june 2022
upvoted 10 times
...
Visi
3 years, 2 months ago
Selected Answer: C
Answer is C according to this link: https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-s3-access-logs-to-identify-requests.html "We recommend that you use AWS CloudTrail data events instead of Amazon S3 access logs. CloudTrail data events are easier to set up and contain more information. For more information, see Identifying Amazon S3 requests using CloudTrail."
upvoted 4 times
...
sayed
3 years, 4 months ago
Selected Answer: C
C S3 Server Access logging doesn't have management or data events it used for logging access to the bucket only plus log file validation is on cloudtrail only
upvoted 1 times
...
jc966
3 years, 6 months ago
Selected Answer: C
CCCC AWS CloudTrail logs provide a record of actions taken by a user, role, or an AWS service in Amazon S3, while Amazon S3 server access logs provide detailed records for the requests that are made to an S3 bucket. https://docs.aws.amazon.com/AmazonS3/latest/userguide/cloudtrail-logging.html
upvoted 2 times
...
gargaditya
3 years, 6 months ago
https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-s3-access-logs-to-identify-requests.html You can identify Amazon S3 requests using 'Amazon S3 access logs'. NOTE: We recommend that you use AWS CloudTrail data events instead of Amazon S3 access logs. CloudTrail data events are easier to set up and contain more information. ============= The above is different from S3 Server Access Logs: https://docs.aws.amazon.com/AmazonS3/latest/userguide/enable-server-access-logging.html Server access logging provides detailed records for the requests that are made to an Amazon S3 bucket. ================ Cloudtrail https://www.youtube.com/watch?v=qelcK5xRB0Y Management Events - Tracks management operations. T -Turned on by default. -Can't be turned off Data Events. -Tracks Specific operations for specific AWS Services. -Tuned off by default. -The two services that can be tracked are S3 and Lambda.
upvoted 4 times
gargaditya
3 years, 6 months ago
S3 Server Log does not support log validation!! So A eliminated Also events(data and mgmt) are specific to Cloudtrail not S3 Server Access logs. Answer is C
upvoted 3 times
...
...
KyleZheng
3 years, 7 months ago
S3 Server Log does not support log validation
upvoted 4 times
...
bluetaurianbull
3 years, 7 months ago
Confused between A and C. The two possible reasons (C) could be an answer is because 1. Server access logs don't record information about wrong-region redirect errors for Regions that launched after March 20, 2019. Wrong-region redirect errors occur when a request for an object or bucket is made outside the Region in which the bucket exists. URL:- https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerLogs.html 2. We recommend that you use AWS CloudTrail for logging bucket and object-level actions for your Amazon S3 resources. URL :- https://docs.aws.amazon.com/AmazonS3/latest/userguide/logging-with-S3.html
upvoted 3 times
...
syu31svc
3 years, 8 months ago
This is C 100%
upvoted 4 times
...
waqas
3 years, 8 months ago
NEW QUESTION A company is deploying an application that processes large quantities of data in batches as needed. The company plans to use Amazon EC2 instances for the workload. The network architecture must support a highly scalable solution and prevent groups of nodes from sharing the same underlying hardware. Which combination of network solutions will meet these requirements? (Select TWO.) A. Create Capacity Reservations for the EC2 instances to run in a placement group. B. Run the EC2 instances in a spread placement group. C. Run the EC2 instances in a cluster placement group. D. Place the EC2 instances in an EC2 Auto Scaling group. E. Run the EC2 instances in a partition placement group. I have got this Question.....Can anyone tell the answer? Spread or Partition?
upvoted 7 times
mahdeo01
3 years, 7 months ago
yes, the answer is - Partition and Spread ... Both are Correct. ( they said Select Two answers ) , so what is the confusion??
upvoted 1 times
...
Stud
3 years, 8 months ago
i think B and D
upvoted 2 times
waqas
3 years, 7 months ago
Why Spread group?
upvoted 1 times
sarah_t
3 years, 7 months ago
because partitions can contain more than one instance (which would make them a group of nodes sharing hardware)
upvoted 1 times
...
...
...
Abdullah777
3 years, 8 months ago
"groups of instance from sharing same harder layer, processes large quantities of data in batches as needed " DE
upvoted 1 times
waqas
3 years, 7 months ago
Why partition group?
upvoted 1 times
...
...
SilentJay
3 years, 7 months ago
Answer: D, E Keywords to look for are "groups of nodes" vs "single node" "groups" = partition "single" = spread
upvoted 4 times
...
Load full discussion...
...
dmscountera
3 years, 8 months ago
C data events are not enabled by default.
upvoted 2 times
...
Yogi
3 years, 8 months ago
Ans=C. ....CT.....data events... .
upvoted 2 times
TheBengiDog
2 years, 9 months ago
Why do Indians put "..." everywhere?
upvoted 1 times
...
...
Bonjaski0989
3 years, 8 months ago
Management Events - Tracks management operations. Turned on by default. Can't be turned off Data Events. Tracks Specific operations for specific AWS Services. Tuned off by default. The two services that can be tracked in S3 and Lambda. Due to Tracking Specific Services (S3) I would go C
upvoted 5 times
johnny_arun
3 years, 6 months ago
dynamo db can also be tracked in data events
upvoted 1 times
...
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel