Q56 — AWS SAA-C03 Ch.16

Question 56 of 100 | ← Chapter 16

Q1256. A company sends AWS CloudTrail logs from multiple AWS accounts to an Amazon S3 bucket in a centralized account. The company must store the CloudTrail logs and must be able to query the logs at any time.Which solution will meet these requirements?

• A. Store the CloudTrail logs in an Amazon S3 bucket. Create an Amazon Athena table that includes the CloudTrail logs.Query the CloudTrail logs from Athena. ✓
• B. Configure an Amazon Neptune instance to manage the CloudTrail logs. Use Neptune to query the CloudTrail logs.
• C. Configure CloudTrail to send the logs to an Amazon DynamoDB table. Create a dashboard in Amazon QuickSight to query the logs in the table
• D. Use Amazon Athena to create an Athena notebook. Configure CloudTrail to send the logs to the notebook. Use Athena to query the logs

Correct Answer: A. Store the CloudTrail logs in an Amazon S3 bucket. Create an Amazon Athena table that includes the CloudTrail logs.Query the CloudTrail logs from Athena.

Explanation

The correct answer is A. Store the CloudTrail logs in an Amazon S3 bucket. Create an Amazon Athena table that includes the CloudTrail logs. Query the CloudTrail logs from Athena.Explanation:The company needs to store CloudTrail logs (JSON files) in a centralized S3 bucket and query them efficiently at any time. The best solution should:Store logs in S3 (CloudTrail's native storage).Use a serverless query service (Athena) to analyze logs without managing infrastructure.Support ad-hoc queries on structured (JSON) data.Why Option A is Correct:Amazon Athena is a serverless interactive query service that analyzes data directly in S3 using SQL. CloudTrail logs are stored in S3 (default behavior), and Athena can query them without loading into another database.No infrastructure management--Athena scales automatically and charges only for queries run. Supports JSON parsing (CloudTrail logs are in JSON format). Low operational overhead--just create an Athena table pointing to the S3 bucket.Why the Other Options Are Incorrect:B. Configure Amazon Neptune to manage CloudTrail logsNeptune is a graph database, not suitable for querying CloudTrail logs (which are structured JSON, not graph data).High operational overhead (managing a graph database for log analysis is unnecessary). C. Configure CloudTrail to send logs to DynamoDB & use QuickSight CloudTrail does not natively support DynamoDB as a destination (only S3, CloudWatch Logs). DynamoDB is a NoSQL database, not optimized for ad-hoc log querying (would require complex scanning). QuickSight is for visualization, not direct log querying.D. Use Athena notebook & configure CloudTrail to send logs to it Athena does not receive logs directly--it queries data stored in S3. CloudTrail cannot send logs to an Athena notebook (only S3 or CloudWatch Logs). Misunderstands Athena's role (it queries existing S3 data, not ingests logs).Conclusion:Option A is the most efficient and cost-effective solution because:CloudTrail logs are already stored in S3 (no extra storage needed).Athena provides serverless SQL querying on JSON logs.No infrastructure setup (unlike Neptune or DynamoDB).Meets all requirements (storage + querying).Final Answer:A