Exam Bundle

AWS CloudTrail records API requests and account management events. This does not address the need for An auditor asks for AWS third-party compliance reports and certifications relevant to cloud services. The appropriate AWS Artifact applies because AWS Artifact provides on-demand AWS compliance reports and select agreements, unlike event or configuration monitoring tools.

Amazon GuardDuty: Detects suspicious activity through supported telemetry. This does not address the need for An auditor asks for AWS third-party compliance reports and certifications relevant to cloud services. The appropriate AWS Artifact applies because AWS Artifact provides on-demand AWS compliance reports and select agreements, unlike event or configuration monitoring tools.

AWS Config: Tracks and evaluates configurations of AWS resources. This does not address the need for An auditor asks for AWS third-party compliance reports and certifications relevant to cloud services. The appropriate AWS Artifact applies because AWS Artifact provides on-demand AWS compliance reports and select agreements, unlike event or configuration monitoring tools.

AWS CloudTrail records API requests and account management events. That does not meet the requirement: A procurement team needs to download AWS compliance documentation for an assessment.

AWS Config: Tracks and evaluates configurations of AWS resources. That does not meet the requirement: A procurement team needs to download AWS compliance documentation for an assessment.

Amazon GuardDuty: Detects suspicious activity through supported telemetry. That does not meet the requirement: A procurement team needs to download AWS compliance documentation for an assessment.

Amazon GuardDuty: Detects suspicious activity through supported telemetry. This does not address the need for A procurement team needs to download AWS compliance documentation for an assessment. The appropriate AWS Artifact applies because AWS Artifact provides on-demand AWS compliance reports and select agreements, unlike event or configuration monitoring tools.

AWS CloudTrail records API requests and account management events. This does not address the need for A procurement team needs to download AWS compliance documentation for an assessment. The appropriate AWS Artifact applies because AWS Artifact provides on-demand AWS compliance reports and select agreements, unlike event or configuration monitoring tools.

AWS Config: Tracks and evaluates configurations of AWS resources. This does not address the need for A procurement team needs to download AWS compliance documentation for an assessment. The appropriate AWS Artifact applies because AWS Artifact provides on-demand AWS compliance reports and select agreements, unlike event or configuration monitoring tools.

AWS Artifact supplies compliance reports and agreements. That does not meet the requirement: Consider this AWS requirement: A security analyst needs records of who called AWS APIs and when.

AWS Config: Tracks and evaluates configurations of AWS resources. That does not meet the requirement: Consider this AWS requirement: A security analyst needs records of who called AWS APIs and when.

Amazon CloudWatch: CloudWatch collects operational metrics and logs and supports alarms and dashboards. That does not meet the requirement: Consider this AWS requirement: A security analyst needs records of who called AWS APIs and when.

Amazon CloudWatch: CloudWatch collects operational metrics and logs and supports alarms and dashboards. This does not address the need for A security analyst needs records of who called AWS APIs and when. The appropriate AWS CloudTrail applies because CloudTrail records account API and service events with identity and activity context.

AWS Config: Tracks and evaluates configurations of AWS resources. This does not address the need for A security analyst needs records of who called AWS APIs and when. The appropriate AWS CloudTrail applies because CloudTrail records account API and service events with identity and activity context.

AWS Artifact supplies compliance reports and agreements. This does not address the need for A security analyst needs records of who called AWS APIs and when. The appropriate AWS CloudTrail applies because CloudTrail records account API and service events with identity and activity context.

AWS Config: Tracks and evaluates configurations of AWS resources. That does not meet the requirement: A compliance team is investigating a configuration change and wants the associated management event.

Amazon CloudWatch: CloudWatch collects operational metrics and logs and supports alarms and dashboards. That does not meet the requirement: A compliance team is investigating a configuration change and wants the associated management event.

AWS Artifact supplies compliance reports and agreements. That does not meet the requirement: A compliance team is investigating a configuration change and wants the associated management event.

AWS Config: Tracks and evaluates configurations of AWS resources. This does not address the need for A compliance team is investigating a configuration change and wants the associated management event. The appropriate AWS CloudTrail applies because CloudTrail records account API and service events with identity and activity context.

Amazon CloudWatch: CloudWatch collects operational metrics and logs and supports alarms and dashboards. This does not address the need for A compliance team is investigating a configuration change and wants the associated management event. The appropriate AWS CloudTrail applies because CloudTrail records account API and service events with identity and activity context.

AWS Artifact supplies compliance reports and agreements. This does not address the need for A compliance team is investigating a configuration change and wants the associated management event. The appropriate AWS CloudTrail applies because CloudTrail records account API and service events with identity and activity context.

AWS CloudTrail records API requests and account management events. That does not meet the requirement: A technical reviewer evaluates this need: An auditor wants a history of how resource configurations changed and rules evaluating compliance.

Amazon CloudWatch: CloudWatch collects operational metrics and logs and supports alarms and dashboards. That does not meet the requirement: A technical reviewer evaluates this need: An auditor wants a history of how resource configurations changed and rules evaluating compliance.

AWS Artifact supplies compliance reports and agreements. That does not meet the requirement: A technical reviewer evaluates this need: An auditor wants a history of how resource configurations changed and rules evaluating compliance.

AWS CloudTrail records API requests and account management events. This does not address the need for An auditor wants a history of how resource configurations changed and rules evaluating compliance. The appropriate AWS Config applies because AWS Config tracks supported resource configuration and evaluates it against configured rules.

Amazon CloudWatch: CloudWatch collects operational metrics and logs and supports alarms and dashboards. This does not address the need for An auditor wants a history of how resource configurations changed and rules evaluating compliance. The appropriate AWS Config applies because AWS Config tracks supported resource configuration and evaluates it against configured rules.

AWS Artifact supplies compliance reports and agreements. This does not address the need for An auditor wants a history of how resource configurations changed and rules evaluating compliance. The appropriate AWS Config applies because AWS Config tracks supported resource configuration and evaluates it against configured rules.

AWS CloudTrail records API requests and account management events. That does not meet the requirement: An infrastructure team needs to compare current AWS resource settings with approved configuration policies.

AWS Artifact supplies compliance reports and agreements. That does not meet the requirement: An infrastructure team needs to compare current AWS resource settings with approved configuration policies.

Amazon CloudWatch: CloudWatch collects operational metrics and logs and supports alarms and dashboards. That does not meet the requirement: An infrastructure team needs to compare current AWS resource settings with approved configuration policies.

AWS Artifact supplies compliance reports and agreements. This does not address the need for An infrastructure team needs to compare current AWS resource settings with approved configuration policies. The appropriate AWS Config applies because AWS Config tracks supported resource configuration and evaluates it against configured rules.

Amazon CloudWatch: CloudWatch collects operational metrics and logs and supports alarms and dashboards. This does not address the need for An infrastructure team needs to compare current AWS resource settings with approved configuration policies. The appropriate AWS Config applies because AWS Config tracks supported resource configuration and evaluates it against configured rules.

AWS CloudTrail records API requests and account management events. This does not address the need for An infrastructure team needs to compare current AWS resource settings with approved configuration policies. The appropriate AWS Config applies because AWS Config tracks supported resource configuration and evaluates it against configured rules.