CloudGuild · Blog · Cheat sheets · Lessons · Certifications
AWS Certified Security - Specialty (SCS-C02): Exam Question Walkthrough
Explore the intricacies of AWS CloudTrail's log file integrity validation in this detailed exam question breakdown.
Decisions regarding security features often trip candidates. Many confuse general security practices with specific AWS functionalities. Understanding the role of log file integrity validation is key to answering questions accurately.
The question
Which of the following features of AWS CloudTrail enhances the security of log data?
- A. Log file integrity validation
- B. Encryption of data in transit
- C. Automatic log file rotation
- D. Real-time log stream processing
Think before you scroll
Before selecting an answer, consider which feature specifically addresses the integrity and security of log data stored by AWS CloudTrail. This requires a solid understanding of what each option actually entails and its relevance to log data security.
The answer
The correct option is A. Log file integrity validation. This feature ensures that log files have not been altered after their creation. It enhances the security and reliability of the logs, making it crucial for maintaining the integrity of log data.
Why the other options lose
- B. Encryption of data in transit: While encryption is vital for protecting data as it moves across networks, it does not directly address the integrity of log files once they are created. This option focuses on data protection during transmission rather than on log file integrity.
- C. Automatic log file rotation: This feature manages the lifecycle of log files but does not ensure their integrity. Automatic rotation helps manage storage but does not prevent tampering with log files.
- D. Real-time log stream processing: Processing logs in real-time can provide immediate insights but does not inherently guarantee the integrity of the log files themselves. This option emphasizes analysis over security of the logs.
The concept behind it
Log file integrity validation is a crucial security measure. It assures that data remains untampered from its creation to its retrieval, which is essential for compliance and audit purposes. Understanding this concept can help you recognize similar features in other AWS services.
Exam trap to remember
Remember: Log file integrity validation is about ensuring logs remain unchanged. Options that focus on data in transit or processing do not fulfill this critical role.