CloudTrail Lake and Athena Queries Quiz

What you'll be asked

1. Which AWS service is primarily used to run interactive SQL queries directly against data stored in S3, such as CloudTrail logs?
2. When using CloudTrail Lake, what is the primary benefit of using a 'CloudTrail Lake event data store' compared to standard S3-based CloudTrail logs?
3. You are writing an Athena query to analyze CloudTrail logs. Which clause is essential to minimize the amount of data scanned and reduce query costs?
4. In an Athena query for CloudTrail logs, why might you use the 'UNNEST' function?
5. You need to perform a security audit across multiple AWS accounts using CloudTrail Lake. Which configuration is required to aggregate logs from these accounts into a single queryable store?

Answers and explanations come after you submit.