SAP-C02 Q516 · Monitoring

Question

A company has multiple AWS accounts that are in an organization in AWS Organizations. The company needs to store AWS account activity and query the data from a central location by using SQL. Which solution will meet these requirements?

Accepted Answer

**Option B** meets every requirement precisely:

1. **Store AWS account activity**: CloudTrail Lake is a managed **event data store** that ingests and retains CloudTrail events (management events, data events, etc.) for up to 7 years (configurable retention).

2. **Central location**: By using a **delegated administrator account** in AWS Organizations, you can create an organization-level event data store. When you enable it for all accounts in the organization, events from every member account automatically flow into that single data store—no per-account configuration needed.

3. **Query with SQL**: CloudTrail Lake natively supports **SQL-based queries** against the stored events. You write standard SQL to search, filter, and aggregate event data directly in the CloudTrail Lake console or

📖 Explanation

✅ Correct Answer

❌ Wrong Answers

📘 Key Concepts

🏗️ Architecture

⚙️ Operations

💰 Cost

🔒 Security

🎯 Exam Tips