Exam AWS Certified Solutions Architect - Professional SAP-C02 topic 1 question 357 discussion

i thinks C is correct answer

C is correct. Do not get fooled by the phrase "deploy the trail for all accounts" to think that a trail is created in each account – it means that the new organisational-level trail is _configured_ to capture data for all accounts.

Option C: Create a new AWS CloudTrail trail in the organization's management account. Create a new Amazon S3 bucket with versioning turned on to store the logs. Deploy the trail for all accounts in the organization. Enable MFA delete and encryption on the S3 bucket. The management account can act as a central hub for logging and auditing. Using an existing S3 bucket in the management account reduces operational overhead compared to creating multiple buckets across different accounts. Versioning turned on ensures that old log versions are not automatically deleted, providing an additional layer of compliance.

I will go with D as the correct answer because C has versioning turned on which is not necessary in this case. You can configure a trail to use Amazon SNS topic and be notifies when cloud trail publishes new log files to the Amazon S3 bucket.

Option C

A: Should always create new bucket for cloudtrail B: When you create an organization trail, a trail with the name that you give it is created in every AWS account that belongs to your organization. C: Correct D: For several reasons, use SNS only to notify admin, not to use email as a external mgmt system

D ans :- https://docs.aws.amazon.com/awscloudtrail/latest/userguide/configure-sns-notifications-for-cloudtrail.html

Answer: C

C is correct

i thinks C is correct answer

A for sure