A SysOps Administrator must secure AWS CloudTrail logs. The Security team is concerned that an employee may modify or attempt to delete CloudTrail log files from its Amazon S3 bucket. Which practices ensure that the log files are available and unaltered? (Choose two.)
A) Enable the CloudTrail log file integrity check in AWS Config Rules.
B) Use CloudWatch Events to scan log files hourly.
C) Enable CloudTrail log file integrity validation.
D) Turn on Amazon S3 MFA Delete for the CloudTrail bucket.
E) Implement a DENY ALL bucket policy on the CloudTrail bucket.

Question

Quizplus · Accepted Answer

Enabling CloudTrail log file integrity validation ensures that any changes to the log files can be detected. Turning on Amazon S3 MFA Delete adds an additional layer of security to prevent unauthorized deletions of log files.

A SysOps Administrator Must Secure AWS CloudTrail Logs