Exam AWS Certified Security - Specialty topic 1 question 76 discussion

Agreed, the First "B" is correct: "B. Verify that a metric filter was created and then mapped to an alarm. Check the alarm notification action." https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudwatch-alarms-for-cloudtrail.html

A. Ensure that CloudTrail and S3 bucket access logging is enabled for the Analyst's AWS accoun B. Verify that a metric filter was created and then mapped to an alarm. Check the alarm notification action. C. Check the CloudWatch dashboards to ensure that there is a metric configured with an appropriate dimension for security group changes. D. Verify that the Analyst's account is mapped to an IAM policy that includes permissions for cloudwatch: GetMetricStatistics and Cloudwatch: ListMetrics.

Real B! B. Verify that a metric filter was created and then mapped to an alarm. Check the alarm notification action.

Correct Answer: "B. Verify that a metric filter was created and then mapped to an alarm. Check the alarm notification action." If you check this link: https://docs.fugue.co/FG_R00056.html You will see that in order to have Alarms configured you also need to set "Metric filters"

It is recommended that users establish a metric filter and alarm for changes to Security Groups. Monitoring changes to security groups helps to ensure that resources and services are not unintentionally exposed. B

the answer is in B clearly but i still went for C stupidly

Option B is Correct Check the CloudWatch dashboards to ensure that there is a metric configured with an appropriate dimension for security group changes.

C is DASHBOARD! and we dont have anything to do with it. B is only one considering the alarms. so.

Lol why are two of the answers mixed together... But yeah I think its either the first B or the actual B showing in the answers...

Ans : B. Verify that a metric filter was created and then mapped to an alarm. Check the alarm notification action.

B is Correct

Ans > B https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudwatch-alarms-for-cloudtrail.html

Ans(B) Verify that a metric filter was created and then mapped to an alarm. Check the alarm notification action. https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudwatch-alarms-for-cloudtrail.html

B is the right answer.

First B is correct

B, Since the problem is with notification one has to see again how it is configured

Answer is B: Verify that a metric filter was created and then mapped to an alarm. Check the alarm notification action. We need to check two things: metric data, and alarm A: No need to check the access permission to S3 C: We need check metric is configure correctly in CloudWatch alarm, not in Dashboard D: Not relate to IAM