Câu 84: AWS Certified SysOps Administrator - Associate (SOA-C02)(New)

A SysOps administrator must manage the security of an AWS account. Recently, an IAM user's access key was mistakenly uploaded to a public code repository. The SysOps administrator must identify anything that was changed by using this access key. How should the SysOps administrator meet these requirements?

1. A. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to send all IAM events to an AWS Lambda function for analysis.
2. B. Query Amazon EC2 logs by using Amazon CloudWatch Logs Insights for all events initiated with the compromised access key within the suspected timeframe.
3. C. Search AWS CloudTrail event history for all events initiated with the compromised access key within the suspected timeframe. — đáp án hiện tại
4. D. Search VPC Flow Logs for all events initiated with the compromised access key within the suspected timeframe.