exam questions

Exam AWS DevOps Engineer Professional All Questions

View all questions & answers for the AWS DevOps Engineer Professional exam

Exam AWS DevOps Engineer Professional topic 1 question 189 discussion

Exam question from Amazon's AWS DevOps Engineer Professional
Question #: 189
Topic #: 1
[All AWS DevOps Engineer Professional Questions]

A company is implementing an Amazon Elastic Container Service (Amazon ECS) cluster to run its workload. The company architecture will run multiple ECS services on the cluster. The architecture includes an Application Load Balancer on the front end and uses multiple target groups to route traffic.

A DevOps engineer must collect application and access logs. The DevOps engineer then needs to send the logs to an Amazon S3 bucket for near-real-time analysis.

Which combination of steps must the DevOps engineer take to meet these requirements? (Choose three.)

  • A. Download the Amazon CloudWatch Logs container instance from AWS. Configure this instance as a task. Update the application service definitions to include the logging task
  • B. Install the Amazon CloudWatch Logs agent on the ECS instances. Change the logging driver in the ECS task definition to awslogs.
  • C. Use Amazon EventBridge to schedule an AWS Lambda function that will run every 60 seconds and will run the Amazon CloudWatch Logs create-export-task command. Then point the output to the logging S3 bucket.
  • D. Activate access logging on the ALB. Then point the ALB directly to the logging S3 bucket.
  • E. Activate access logging on the target groups that the ECS services use. Then send the logs directly to the logging S3 bucket.
  • F. Create an Amazon Kinesis Data Firehose delivery stream that has a destination of the logging S3 bucket. Then create an Amazon CloudWatch Logs subscription filter for Kinesis Data Firehose.
Show Suggested Answer Hide Answer
Suggested Answer: BDF 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
bgc1
2 years, 2 months ago
Selected Answer: BDF
B - Use cloud watch logs to capture application and access logs from containers D - ALB access logs directly go to s3 F - Firehose will stream cloud watch logs to S3
upvoted 3 times
...
SHoKMaSTeR
2 years, 2 months ago
Selected Answer: BDF
C could work but F is more efficient and closer to real-time
upvoted 1 times
...
okm1997_2
2 years, 2 months ago
Selected Answer: BDF
No access logging but have dmesg, messages, docker, ecs-init logs through awslogs driver
upvoted 1 times
...
Eah1
2 years, 2 months ago
Selected Answer: BDF
https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-access-logs.html
upvoted 1 times
...
Mark1000
2 years, 2 months ago
https://stackoverflow.com/questions/55487541/enabling-access-logs-for-application-load-balancer
upvoted 1 times
...
Mark1000
2 years, 2 months ago
BDF E : there is no such thing as server logging access for target group and there is for ALB.
upvoted 1 times
...
saeidp
2 years, 2 months ago
Selected Answer: BDF
It seems B D F
upvoted 3 times
...
dangal97
2 years, 2 months ago
Selected Answer: BEF
I will go with B,E and F
upvoted 1 times
...
CloudFloater
2 years, 2 months ago
Selected Answer: BEF
BEF A - not necessary when using cloudwatch logs agent B - correct, logs will be captured C - not efficient D - does not capture ECS logs, only ALB E - correct, captures access logs F - correct, firehose to s3 is good.
upvoted 1 times
bgc1
2 years, 2 months ago
Itd BDF. ECS access logs are captured by changing the logging driver in the ECS task definition to awslogs - https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-logging-monitoring.html
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago