🔥 40% Off Crucial Exams Memberships — This Week Only

2 days, 11 hours remaining!
Crucial Exams

ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

An organization runs several critical workloads on AWS. The CISO mandates ability to trace every API call and correlate it to the specific IAM identity that performed it, including cross-account access, to satisfy accountability requirements. Logs must be protected against tampering and retained for at least one year. Which solution BEST meets these requirements with minimal operational overhead?

  • Create an organization-wide AWS CloudTrail trail that delivers logs to an S3 bucket with Object Lock in compliance mode and enable CloudTrail log file integrity validation.

  • Use EventBridge to capture CloudWatch API events, stream them to Kinesis Data Firehose, and archive the data in S3.

  • Enable VPC Flow Logs for all VPCs and store the logs in CloudWatch Logs with a one-year retention policy.

  • Turn on AWS Config across all accounts and store configuration snapshots in an S3 bucket using default settings.

ISC2 Systems Security Certified Practitioner (SSCP)
Security Concepts and Practices
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot