SAP-C02 Question 355

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  S3 with Versioning: Ensures that logs cannot be overwritten or lost — important for compliance and auditing.

• 1

  Option C: Create a new AWS CloudTrail trail in the organization's management account. Create a new Amazon S3 bucket with versioning turned on to store the logs. Deploy the trail for all accounts in the organization. Enable MFA delete and encryption on the S3 bucket. The management account can act as a central hub for logging and auditing. Using an existing S3 bucket in the management account reduces operational overhead compared to creating multiple buckets across different accounts. Versioning turned on ensures that old log versions are not automatically deleted, providing an additional layer of compliance.

• 1

  I will go with D as the correct answer because C has versioning turned on which is not necessary in this case. You can configure a trail to use Amazon SNS topic and be notifies when cloud trail publishes new log files to the Amazon S3 bucket.