DOP-C02 Security and Compliance Practice Question
Network Topology
Refer to the exhibit. A CloudTrail trail named ManagementTrail is configured as shown. Which events will be logged?
⚠ Common exam trap
AWS often tests the misconception that a trail named 'ManagementTrail' only logs management events of a specific type (read or write), but the default behavior is to log all management events unless an explicit event selector is configured to filter them.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
All management events for the account.
The CloudTrail trail named ManagementTrail is configured to log management events, and by default, when you create a trail in the CloudTrail console, it logs both read and write management events unless you specifically choose to log only one type. The exhibit shows no filtering for read-only or write-only events, so all management events (both read and write) for the account will be logged. This is the standard behavior for a trail that does not have an event selector restricting the event type.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Only read management events.
Why it's wrong here
This trail is mischaracterized as read-only event capture. CloudTrail's ReadWriteType parameter explicitly controls whether read-only actions (e.g., Describe, List, Get) or write actions (e.g., Create, Delete, Update) are logged. The configuration in the exhibit sets ReadWriteType:All, which means the trail records both read and write management events, not solely read operations. Therefore, stating that only read management events are logged is incorrect because the trail's settings explicitly include write events as well.
- ✗
Only write management events.
Why it's wrong here
The claim that only write management events are captured overlooks the ReadWriteType value in the trail configuration. A trail configured with ReadWriteType:WriteOnly would restrict logging to write operations, but this trail uses ReadWriteType:All. As a result, read operations like Get, List, and Describe are also recorded alongside write operations. Since the trail does not use the WriteOnly filter, the assertion that it logs only write management events is false.
- ✗
Only S3 data events.
Why it's wrong here
This option confuses management events with data events. The trail's DataResources field is empty, which means no S3 data-event selectors have been defined. Without DataResources, CloudTrail does not log bucket- or object-level activity such as GetObject, PutObject, or DeleteObject. Instead, the trail is configured solely for management events (via IncludeManagementEvents:true), so it captures none of the S3 data events that this option claims.
- ✓
All management events for the account.
Why this is correct
The trail configuration is set to capture all management events for the AWS account. ReadWriteType:All ensures both read and write management operations are logged, while IncludeManagementEvents:true explicitly enables this type of logging. Because the DataResources array is empty, the trail is not configured for data events and focuses entirely on the control plane across all services. This matches the described behavior: the trail logs every management event, making this the correct answer.
Go deeper
Related to this question
About these practice questions
One of 1,013 original DOP-C02 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DOP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DOP-C02 exam.