A security team must record and centrally retain AWS API call activity for all current and future Regions. What is the simplest way to meet these requirements?
Choose an answer
Tap an option to check your answer.
Correct answer: Create a single AWS CloudTrail trail that applies to all Regions and specify one Amazon S3 bucket as the log destination..
Why this is the answer
Creating a single AWS CloudTrail trail that applies to all Regions is the simplest and most effective way to record and centrally retain AWS API call activity across all current and future Regions. This "multi-Region trail" automatically collects logs from all existing and new Regions into a specified Amazon S3 bucket. Separate CloudTrail trails per Region would require manual setup for each Region and wouldn't automatically cover future Regions. AWS Trusted Advisor provides security checks but does not record API call activity. Amazon CloudWatch logs various metrics and events, but CloudTrail is specifically designed for API call logging and auditing.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed