Security World 5 · Eyes Everywhere · Stage 1

Log What Matters

Every question has one log. Events as tokens landing in the right store, or nowhere.

  • Log sources
  • Organization trails
  • Management and data events
  • Log file validation
  • Flow and Resolver logs
Domain
Security
World
Security World 5: Eyes Everywhere (Specialty)
Game type
Solution board: Drop services into each row's slots, then run records through them.
Time
About 25 minutes on a first attempt (estimated)
Exam guides
  • SOA-C03Skill 1.1.1: Use AWS services (for example, Amazon CloudWatch, AWS CloudTrail, Amazon Managed Service for Prometheus) to configure monitoring and logging for workloads (for example, serverless, compute, AI)
  • DEA-C01Skill 4.4.1: Use AWS CloudTrail to track API calls
  • DOP-C02Task 6.3: Implement security monitoring and auditing solutions
  • SCS-C03Skill 1.2.1: Identify sources for log ingestion and storage based on requirements; Skill 1.2.2: Configure logging for AWS services and applications (for example, by configuring an AWS CloudTrail trail for an organization, by creating a dedicated Amazon CloudWatch logging account, by configuring the Amazon CloudWatch Logs agent); Skill 1.2.6: Determine and configure appropriate log sources based on network design, threats, and attacks
  • AIP-C01Skill 3.3.2: Implement data source tracking to maintain traceability in GenAI applications (for example, by using AWS Glue Data Catalog to register data sources, metadata tagging for source attribution in FM-generated content, CloudTrail for audit logging)