alleryStart learning →Which AWS service lets a responder query large volumes of CloudTrail / VPC Flow / WAF logs stored in S3 using SQL — used for incident investigation?
AAmazon Athena
BAmazon EBS
CAWS Snowball
DAmazon RDS
Answer & Solution
Correct answer: A. Amazon Athena
Athena queries S3-resident logs with SQL (per SCS-C02 §1.2, §1.3).
The others can't query S3 with SQL.
Keep practising Scsthreatresponse
Browse all Scsthreatresponse questions for AWS Security, or explore more Cloudcomputing topics.