AWS Certified SysOps Administrator SOA-C01 – Question707

A SysOps Administrator must generate a report that provides a breakdown of all API activity by a specific user the course of a year.
Given that AWS Cloud Trail was enabled, how can this report be generated?

A.
Using the AWS management Console, search for the user name in the CloudTrail history. Then filter by API and download the report in CSV format.
B. Use the CloudTrail digest files stored in the company’s Amazon S3 bucket. then send the logs to Amazon QuickSight to create the report.
C. Locate the monthly reports that CloudTrail sends that are emailed to the account’s root user. Then forward the reports to the auditor using a secure channel.
D. Access the CloudTrail logs stored in the Amazon S3 bucket tied to Cloud Trail. Use Amazon Athena to extract the information needed to generate the report.