Question 58 of 80
Single answerHow should the SysOps administrator meet these requirements?
ACreate an Amazon EventBridge (Amazon CloudWatch Events) rule to send all IAM events to an AWS Lambda function for analysis.
BQuery Amazon EC2 logs by using Amazon CloudWatch Logs Insights for all events initiated with the compromised access key within the suspected timeframe.
✓CSearch AWS CloudTrail event history for all events initiated with the compromised access key within the suspected timeframe.
DSearch VPC Flow Logs for all events initiated with the compromised access key within the suspected timeframe.
✓
Correct Answer: C
Search AWS CloudTrail event history for all events initiated with the compromised access key within the suspected timeframe.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of AWS certification topics.