A company is using AWS Organizations to create OUs for its accounts.

Question

A company is using AWS Organizations to create OUs for its accounts. The company has more than 20 accounts that are all part of the OUs. A security engineer must implement a solution to ensure that no account can stop to file delivery to AWS CloudTrail.
Which solution will meet this requirement?

Accepted Answer

B. Create an SCP that includes a Deny rule tor the cloudtrail. StopLogging action Apply the SCP to all accounts in the OUs.

Answer

A. Usethe --is-multi-region-trail option while running the create-trail command to ensure that logs are configured across all AWS Regions.

Answer

C. Create an SCP that includes an Allow rule for the cloudtrail. StopLogging action Apply the SCP to all accounts in the OUs.

Answer

D. Use AWS Systems Manager to ensure that CloudTrail is always turned on.

Summer Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: pass65

Exam SCS-C02 All Questions

Amazon Web Services AWS Certified Specialty SCS-C02 Question # 74 Topic 8 Discussion

Correct Answer:

Options Selected by Other Users:

Contribute your Thoughts: