ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 177 - SAP-C02 discussion

Report
Export

A company is storing sensitive data in an Amazon S3 bucket. The company must log all activities for objects in the S3 bucket and must keep the logs for 5 years. The company's security team also must receive an email notification every time there is an attempt to delete data in the S3 bucket.

Which combination of steps will meet these requirements MOST cost-effectively? (Select THREE.)

A.
Configure AWS CloudTrail to log S3 data events.
Answers
A.
Configure AWS CloudTrail to log S3 data events.
B.
Configure S3 server access logging for the S3 bucket.
Answers
B.
Configure S3 server access logging for the S3 bucket.
C.
Configure Amazon S3 to send object deletion events to Amazon Simple Email Service (Amazon SES).
Answers
C.
Configure Amazon S3 to send object deletion events to Amazon Simple Email Service (Amazon SES).
D.
Configure Amazon S3 to send object deletion events to an Amazon EventBridge event bus that publishes to an Amazon Simple Notification Service (Amazon SNS) topic.
Answers
D.
Configure Amazon S3 to send object deletion events to an Amazon EventBridge event bus that publishes to an Amazon Simple Notification Service (Amazon SNS) topic.
E.
Configure Amazon S3 to send the logs to Amazon Timestream with data storage tiering.
Answers
E.
Configure Amazon S3 to send the logs to Amazon Timestream with data storage tiering.
F.
Configure a new S3 bucket to store the logs with an S3 Lifecycle policy.
Answers
F.
Configure a new S3 bucket to store the logs with an S3 Lifecycle policy.
Suggested answer: A, D, F

Explanation:

Configuring AWS CloudTrail to log S3 data events will enable logging all activities for objects in the S3 bucket1. Data events are object-level API operations such as GetObject, DeleteObject, and PutObject1. Configuring Amazon S3 to send object deletion events to an Amazon EventBridge event bus that publishes to an Amazon Simple Notification Service (Amazon SNS) topic will enable sending email notifications every time there is an attempt to delete data in the S3 bucket2. EventBridge can route events from S3 to SNS, which can send emails to subscribers2. Configuring a new S3 bucket to store the logs with an S3 Lifecycle policy will enable keeping the logs for 5 years in a cost-effective way3. A lifecycle policy can transition the logs to a cheaper storage class such as Glacier or delete them after a specified period of time3.

asked 16/09/2024
Linda Müller
38 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first