DOP-C02 Question 400
Select 4Your organization uses a multi-account AWS environment and has recently completed an internal security review. The review identified the need for enhanced auditing and compliance monitoring across all accounts. You have been tasked with implementing a solution that provides the following capabilities:
- Tracks API and console activity across all accounts.
- Detects resource configuration changes and drifts in infrastructure as code templates.
- Monitors network traffic patterns within VPCs for suspicious activity. Which combination of AWS services would best meet these requirements?
- A
AWS CloudTrail
- B
AWS Config
- C
VPC Flow Logs
- D
Amazon GuardDuty
- E
AWS CloudFormation Drift Detection
Show answer and explanation
Correct answers: A, B, C, E
Explanation
To meet the stated requirements, you need a combination of AWS CloudTrail for API and console activity tracking, AWS Config for monitoring and compliance of resource configurations, VPC Flow Logs for network traffic analysis, and AWS CloudFormation Drift Detection for identifying template configuration drifts. While Amazon GuardDuty is valuable for security threat detection, it is not explicitly required for the auditing and compliance use case outlined in this scenario.
- A. Correct.
AWS CloudTrail is used for tracking API and console activity, meeting the requirement to monitor account actions.
- B. Correct.
AWS Config provides resource configuration monitoring and compliance checks, which is essential for detecting changes in resource configurations.
- C. Correct.
VPC Flow Logs capture network traffic patterns within VPCs, which can help identify suspicious activities.
- D. Incorrect.
Amazon GuardDuty is a threat detection service, but it is not directly used for auditing or compliance monitoring as specified in the requirements.
- E. Correct.
AWS CloudFormation Drift Detection identifies resource configuration drifts in CloudFormation stacks, which aligns with the requirement for detecting drifts in infrastructure as code templates.