Courseiva
← ANS-C01
Full test
Network Security, Compliance and Governance →easyMultiple ChoiceObjective-mapped

ANS-C01 Network Security, Compliance and Governance Practice Question

A security engineer needs to audit all API calls that modify security group rules in a VPC. Which AWS service should be used to record these API calls?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

AWS CloudTrail

AWS CloudTrail records all API calls made to the AWS API, including modifications to security group rules. Option A is correct. AWS Config records resource configuration changes but not API calls. VPC Flow Logs capture network traffic logs, not API calls. Amazon Inspector is for vulnerability assessment.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✓

    AWS CloudTrail

    Why this is correct

    AWS CloudTrail records API calls for security group modifications, including the caller identity and timestamp.

  • ✗

    Amazon Inspector

    Why it's wrong here

    Amazon Inspector assesses application vulnerabilities and network exposure, not API auditing.

  • ✗

    AWS Config

    Why it's wrong here

    AWS Config records resource configuration changes but not the API calls that made them.

  • ✗

    VPC Flow Logs

    Why it's wrong here

    VPC Flow Logs capture IP traffic information, not API activity.

About these practice questions

Courseiva writes every ANS-C01 question from scratch — 1,621 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This ANS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the ANS-C01 exam.