AWS Certified Data Engineer Associate · Free Practice Question Medium
Question 18
A company is using AWS Config to track changes to their resources and ensure compliance. They also want to integrate Amazon CloudTrail to investigate unauthorized access attempts. How do AWS Config and CloudTrail complement each other in this scenario?
-
A
AWS Config automatically reverts any unauthorized changes, while CloudTrail blocks the API calls that trigger non-compliant changes.
-
B
AWS Config tracks changes in resource configurations, while CloudTrail logs API calls, providing insights into who made the changes.
-
C
AWS Config and CloudTrail both monitor API calls, with Config focusing on network-related calls and CloudTrail focusing on compute-related calls.
-
D
AWS Config logs all API calls made to AWS resources, and CloudTrail monitors compliance against security best practices.
Reveal correct answer
Correct answer: B
A.
AWS Config does not automatically revert changes, though it can trigger rules or Lambda functions to do so.
B.
AWS Config monitors and records changes in the configuration of AWS resources, and CloudTrail provides logs of the API calls that initiated these changes, offering insights into who made the changes.
C.
Both services complement each other by focusing on resource configurations and API activity, but not by dividing network and compute resources specifically.
D.
AWS Config does not log API calls; that is CloudTrail's responsibility.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
