Exam AWS Certified DevOps Engineer - Professional DOP-C02 All Questions

View all questions & answers for the AWS Certified DevOps Engineer - Professional DOP-C02 exam

Exam AWS Certified DevOps Engineer - Professional DOP-C02 topic 1 question 81 discussion

Exam question from Amazon's AWS Certified DevOps Engineer - Professional DOP-C02

Question #: 81
Topic #: 1

[All AWS Certified DevOps Engineer - Professional DOP-C02 Questions]

A company manages an application that stores logs in Amazon CloudWatch Logs. The company wants to archive the logs to an Amazon S3 bucket. Logs are rarely accessed after 90 days and must be retained for 10 years.

Which combination of steps should a DevOps engineer take to meet these requirements? (Choose two.)

A. Configure a CloudWatch Logs subscription filter to use AWS Glue to transfer all logs to an S3 bucket.
B. Configure a CloudWatch Logs subscription filter to use Amazon Kinesis Data Firehose to stream all logs to an S3 bucket.
C. Configure a CloudWatch Logs subscription filter to stream all logs to an S3 bucket.
D. Configure the S3 bucket lifecycle policy to transition logs to S3 Glacier after 90 days and to expire logs after 3.650 days.
E. Configure the S3 bucket lifecycle policy to transition logs to Reduced Redundancy after 90 days and to expire logs after 3.650 days.

Show Suggested Answer

Suggested Answer: BD 🗳️

by 2pk at May 15, 2023, 9:07 a.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

2pk

Highly Voted 2 years, 3 months ago

Selected Answer: BD

Amazon Kinesis Data Firehose simplifies the process of loading streaming data into S3 and provides automatic scaling, buffering, and retries.

upvoted 6 times

...

xxxdolorxxx

Most Recent 1 month, 1 week ago

Selected Answer: BD

I vote B/D

upvoted 1 times

...

jamesf

1 year ago

Selected Answer: BD

B - keywords: continue stream but not one time task D - keywords: S3 Glacier

upvoted 1 times

...

ericphl

1 year ago

Selected Answer: BD

vote B and D. I initially thought the C is better than B, because Amazon Kinesis Data Firehose is primarily used for time-sensitive tasks, which is not suitable for this case, But when I read the C. I found the Directly streaming logs from cloudwatch log to s3 is not a feature provided by Cloudwatch. So, I will go with B and D.

upvoted 3 times

...

Gomer

1 year, 2 months ago

Selected Answer: BD

You can absolutly directly "export log data from your log groups to an Amazon S3 bucket" However, this is a one time export, and NOT an ongoing stream. If you want to steam continuously you have to use "subscription filter with Kinesis Data Streams, Lambda, or Firehose." https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/S3Export.html https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/SubscriptionFilters.html https://dev.to/aws-builders/automate-export-of-cloudwatch-logs-to-s3-bucket-using-lambda-with-eventbridge-trigger-2ieg

upvoted 3 times

...

zijo

1 year, 3 months ago

Looks like creating subscription filters in AWS cloudwatch logs, there are only limited destination options. There is no S3 as a direct destination. You have to either create Elasticsearch or Kinesis or Kinesis Firehose or Lambda subscription filters. Given the choices we have, we need to pick B & D

upvoted 1 times

...

Jay_2pt0_1

1 year, 3 months ago

Selected Answer: CD

C & D for the reasons that thanhnv142 mentioned.

upvoted 1 times

vn_thanhtung

1 year, 3 months ago

https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/SubscriptionFilters.html Pls check link. You can use a subscription filter with Kinesis Data Streams, Lambda, or Firehose. Logs that are sent to a receiving service through a subscription filter are base64 encoded and compressed with the gzip format. correct is B and D

upvoted 2 times

...

Heyang

1 year, 5 months ago

CD，The question does not mention trying to switch to S3 in real time. C is more cost-effective. https://docs.aws.amazon.com/zh_cn/AmazonCloudWatch/latest/logs/S3ExportTasksConsole.html

upvoted 2 times

...

dzn

1 year, 5 months ago

Selected Answer: BD

Amazon S3 Glacier is a secure, durable, and very low-cost cloud storage service that can be used for data archiving and long-term backup.

upvoted 3 times

...

jojom19980

1 year, 6 months ago

Selected Answer: BD

You can use a subscription filter with Kinesis Data Streams, Lambda, or Firehose. https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/SubscriptionFilters.html

upvoted 2 times

...

thanhnv142

1 year, 6 months ago

Selected Answer: CD

C and D is correct: <archive the logs to an Amazon S3 bucket> means we need to transport logs from CloudWatch Logs to S3. CloudWatch Logs can directly transport log data to S3. Logs are rarely accessed after 90 days means we need S3 bucket lifecycle policy

upvoted 4 times

thanhnv142

1 year, 6 months ago

A: AWS Glue is used primarily to integrate data from multiple data sources (up to 70) for data analysis. Of course it works well with one data source only (CW logs in this case). But it costs a lot of money and using it with only one data source is a waste of corporate budget. Should not use this. B: Amazon Kinesis Data Firehose is primarily used for time-sensitive tasks, such as video streaming. It is very powerful that it can handle data in near realtime. However, this premium feature comes with a big expense. We only need to archive data, not video streaming it. E: we need to transition it to S3 Glacier not Reduced Redundancy after 90 days

upvoted 1 times

...

habros

2 years, 1 month ago

Selected Answer: BD

B to shift logs out using Kinesis Firehose to S3. Then D to set S3 bucket storage class to Glacier Flexible.

upvoted 4 times

...

YXXt55

2 years, 1 month ago

Selected Answer: BD

C would make sense, but subscription filters don't go to S3 directly https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/SubscriptionFilters.html

upvoted 4 times