Exam ANS-C00 topic 1 question 339 discussion

Exam question from Amazon's ANS-C00

Question #: 339
Topic #: 1

You are architecting your e-business application for PCI compliance. To meet the compliance requirements, you need to monitor web application logs to identify any malicious activity. You also need to monitor for remote attempts to change the network interface of web instances.
Which two AWS services will be helpful to achieve this goal?

A. Amazon CloudWatch Logs and VPC Flow Logs
B. AWS CloudTrail and VPC Flow Logs
C. AWS CloudTrail and CloudWatch Logs
D. AWS CloudTrail and AWS Config

Show Suggested Answer

Suggested Answer: C 🗳️
Web application logs are internal to the operating system, so the only way to monitor them with an AWS service is to export them using CloudWatch Logs. AWS
CloudTrail monitors the API activity and can be used to watch for particular API calls. The correct answer is the only one that references both these services.

by roturotu88 at May 6, 2021, 7:05 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

ErnstVonPappen

2 years, 6 months ago

I meant just C, sorry.

upvoted 1 times

...

ErnstVonPappen

2 years, 6 months ago

requirement to monitor web application logs - so then "CloudWatch Logs enables you to centralize the logs from all of your systems, applications" https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/WhatIsCloudWatchLogs.html answer is A and C

upvoted 1 times

...