Practice Test 4 | AWS Certified Solutions Architect Associate | SAA-C03 | Dumps | Mock Test
You are working as an AWS Architect for a global insurance firm. For web application you are using S3 buckets & have configured CloudFront to cache image files. For audit purpose, you have created a CloudTrail trail in each region & events logs files are logged in S3 bucket in us-west-1 region.
There has been changes in CloudFront which has caused all traffic being routed to origin, resulting in increased latency for users in other continents. After scrutinising CloudTrail logs, you found that there are duplicate CloudFront events being logged. What configuration changes will you perform to eliminate duplicate CloudFront logs?
A. Using AWS CLI, update CloudTrail trail to disable global service events which are delivered in all regions except US-West.
B. Using AWS CLI, change the configuration of a trail to logging a single region instead of logging all regions.
C. Using AWS console, update CloudTrail trail to disable global service events to be delivered in all regions except US-West.
D. Using AWS console, change the configuration of a trail to logging a single region instead of logging all regions.
Explanation:
Correct Answer – A
Amazon CloudFront is a global service for which events are delivered to CloudTrail trails which include global services. To avoid duplicate Amazon CloudFront events, you can disable these events from delivering to CloudTrail trails in all regions & enable in only one region.
- Option B & D is incorrect as if CloudTrail trail is changed to logging a single region, global service event logging is off automatically, this will disable CloudFront events being logged instead of avoiding duplicate logs.
- Option C is incorrect as Changes to Global service event logs can be done only via AWS CLI & not via AWS console.
For more information on Global Service Events with CloudTrail, refer to following URL,
Comments are closed, but trackbacks and pingbacks are open.