CloudTrail tells you about API calls, but many attacks show up first in network, DNS or request logs. Knowing which log answers which question is a core exam skill, because answers often differ only in the log source they name.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 3 more sections, 4 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.