Spring Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: simple70

Amazon Web Services AWS Certified DevOps Engineer - Professional DOP-C02 Question # 104 Topic 11 Discussion

Amazon Web Services AWS Certified DevOps Engineer - Professional DOP-C02 Question # 104 Topic 11 Discussion

DOP-C02 Exam Topic 11 Question 104 Discussion:
Question #: 104
Topic #: 11

A company uses AWS Organizations with CloudTrail trusted access. All events across accounts and Regions must be logged and retained in an audit account, and failed login attempts should trigger real-time notifications.

Which solution meets these requirements?


A.

Publish CloudTrail logs to S3 in the audit account. Create an EventBridge rule for failed login events and notify via SNS.


B.

Store logs in the management account and query using Athena + Lambda every 5 minutes.


C.

Store logs in audit S3 + CloudWatch log group in management account + metric filter for failed logins → SNS.


D.

Stream to Kinesis → Flink → SNS.


Get Premium DOP-C02 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.