CloudTrail Configuration and Analysis Quiz

What you'll be asked

1. Which AWS service is primarily used to track user activity and API usage across your AWS infrastructure?
2. You need to ensure that your CloudTrail log files have not been modified, deleted, or forged after they are delivered to S3. Which feature should you enable?
3. A security auditor requests logs for all management events across all accounts in your AWS Organization. What is the most efficient way to achieve this?
4. You want to receive an automated notification whenever an IAM policy is modified in your AWS account. Which combination of services should you use?
5. You have a multi-region CloudTrail enabled. You notice that a specific 'Data Event' is not appearing in your logs despite the trail being active. What is the most likely reason?

Answers and explanations come after you submit.