フリー問題

問題文

For an AWS organization, which provider-side record is the source of the cloud events that Wiz Defend evaluates?

選択肢

1. The operating system logs of each EC2 instance, forwarded by an agent to a central location and then read by the platform as its record of account activity, with that location treated as the authoritative account of what happened.
2. The AWS CloudTrail trail, which records the API calls made against the account and is made available to the platform from the destination the trail writes to.
3. The billing and cost usage reports, because every API call that changes a resource also produces a line item there, giving the platform a full list of what happened once the daily file is delivered and parsed.
4. The configuration snapshots taken by the agentless assessment, from which the sequence of API calls is reconstructed by comparing what changed between two consecutive passes over the account.