I have been doing practice test exam and need help with this quesiton

[Nauman Jamil Qazi]

<b data-stringify-type=”bold”>Category: DOP – Monitoring and Logging
A multinational company has assigned its security operations team the task of monitoring all actions and API calls across multiple AWS accounts, which are consolidated under a single AWS Organizations setup. The company requires that AWS CloudTrail records all API calls across the organization. To ensure continuous monitoring, users in any account must be prevented from disabling or deleting the CloudTrail configuration. Additionally, the security team needs to identify and address insecure web traffic configurations while maintaining a secure and comprehensive audit trail for compliance and security purposes.The right answer is marked as
“Implement a Service Control Policy (SCP) to deny the actions <code data-stringify-type=”code”>cloudtrail:StopLogging, <code data-stringify-type=”code”>cloudtrail:DeleteTrail, and related operations for all users across all Organizational Units (OUs).”
However, this answer ignore this => the security team needs to identify and address insecure web traffic configurations while maintaining a secure and comprehensive audit trail for compliance and security purposes

[Irene-TutorialsDojo]

Hi Nauman Jamil Qazi,

Thank you for reaching out.

You are correct in pointing out that the answer does not fully address identifying and addressing insecure web traffic configurations. The answer only focuses on preventing the disabling of CloudTrail via the Service Control Policy (SCP), but it misses the requirement to monitor and secure web traffic configurations.

To fully meet the requirements, the solution should also include monitoring insecure web traffic configurations, which can be done using AWS Config combined with CloudTrail. AWS Config can track and manage resource configurations, helping detect insecure settings like open ports or misconfigured security groups.

We’ve updated the question to reflect this correction and will be updating the portal shortly.

Thank you for your feedback, and we appreciate your understanding!

Best,

Irene @ Tutorials Dojo