Home › AWS Security › cloudcomputing › scsloggingmon › Which AWS service captures DNS resolution events…
Which AWS service captures DNS resolution events from VPCs using Route 53 Resolver — useful for detecting C2 (command-and-control) domains and exfiltration channels?
AAmazon RDS
BRoute 53 Resolver query logs
CAWS Snowball
DAmazon EBS
Answer & Solution
Correct answer: B. Route 53 Resolver query logs
Route 53 Resolver query logs capture DNS resolution (per SCS-C02 §2.3). The others aren't DNS logs.
Related questions
Which AWS feature lets a security engineer aggregate AWS Config findings across all accounA security engineer notices CloudWatch alarms aren't firing for an application metric. WhiWhich AWS service streams logs in near-real-time to OpenSearch / S3 / Redshift / Splunk foWhich AWS service is BEST suited for monitoring Application Load Balancer access logs at pAn architect needs a CENTRALISED, immutable, write-once log archive across all AWS accountWhich CloudTrail feature lets a security engineer DETECT unusual API-call patterns (e.g. sWhich AWS service lets a security engineer query CloudWatch Logs with a purpose-built querWhich CloudWatch feature converts a regex pattern in log events into a metric — used to al