A company's security team requests that network traffic be captured in VPC Flow Logs. The logs will be frequently accessed for 90 days and then accessed intermittently. What should a solutions architect do to meet these requirements when configuring the logs?
A) Use Amazon CloudWatch as the target. Set the CloudWatch log group with an expiration of 90 days.
B) Use Amazon Kinesis as the target. Configure the Kinesis stream to always retain the logs for 90 days.
C) Use AWS CloudTrail as the target. Configure CloudTrail to save to an Amazon S3 bucket, and enable S3 Intelligent-Tiering.
D) Use Amazon S3 as the target. Enable an S3 Lifecycle policy to transition the logs to S3 Standard-Infrequent Access (S3 Standard-IA) after 90 days.
Correct Answer:
Verified
Q564: A company wants to migrate its accounting
Q565: A company has a large Microsoft SharePoint
Q566: A company is using a VPC that
Q567: A company operates a two-tier application for
Q568: A company is developing a file-sharing application
Q570: A company needs to provide its employees
Q571: A company has several business systems that
Q572: A news company that has reporters all
Q573: A recent analysis of a company's IT
Q574: A company wants to use a custom
Unlock this Answer For Free Now!
View this answer and more for free by performing one of the following actions
Scan the QR code to install the App and get 2 free unlocks
Unlock quizzes for free by uploading documents