CloudTrail Lake Queries Quiz

Quiz covering Logging and Analysis

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

1. 1

   Which query language is used to run queries in CloudTrail Lake?

2. 2

   When querying CloudTrail Lake, which specific field is most commonly used to filter events by the identity that performed the action?

3. 3

   If you need to identify all 'Delete' actions performed in your environment over the last 30 days, which SQL clause is required to efficiently narrow down the scope?

4. 4

   You want to find the top 5 IAM users who have triggered the most 'AccessDenied' errors. Which combination of SQL clauses should you use?

5. 5

   When performing a join between two CloudTrail Lake event data stores, what is the primary constraint regarding the data stores?