AWS CloudTrail Quiz

What you'll be asked

1. Which AWS service is primarily used to record API calls and related events for your AWS account?
2. You need to ensure that CloudTrail log files have not been modified, deleted, or forged after they were delivered to S3. Which feature should you enable?
3. A developer wants to receive an email alert whenever a specific IAM policy is deleted. What is the most efficient way to achieve this using CloudTrail?
4. What is the difference between 'Management Events' and 'Data Events' in CloudTrail?
5. You are auditing a security incident and need to search for all actions taken by a specific IAM role across multiple AWS regions. How can you do this most effectively?

Answers and explanations come after you submit.