CloudTrail Auditing Quiz

Quiz covering Security Monitoring

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

1. 1

   Which AWS service is primarily used to record API calls and related events for auditing, security analysis, and compliance in your AWS account?

2. 2

   You want to ensure that your CloudTrail log files have not been modified, deleted, or forged after they were delivered to S3. Which feature should you enable?

3. 3

   A security auditor requires a centralized view of all API activities across multiple accounts in an AWS Organization. What is the most efficient way to achieve this?

4. 4

   You have configured a CloudTrail trail to deliver logs to an S3 bucket. You notice that the logs are not appearing in the bucket. Which of the following is a common misconfiguration?

5. 5

   You are auditing a security incident and need to identify if a specific IAM user performed an unauthorized action, but the event does not appear in the standard CloudTrail management events. What is the most likely reason?