exam questions

Exam AWS Certified Security - Specialty All Questions

View all questions & answers for the AWS Certified Security - Specialty exam

Exam AWS Certified Security - Specialty topic 1 question 57 discussion

Exam question from Amazon's AWS Certified Security - Specialty
Question #: 57
Topic #: 1
[All AWS Certified Security - Specialty Questions]

Amazon CloudWatch Logs agent is successfully delivering logs to the CloudWatch Logs service. However, logs stop being delivered after the associated log stream has been active for a specific number of hours.
What steps are necessary to identify the cause of this phenomenon? (Choose two.)

  • A. Ensure that file permissions for monitored files that allow the CloudWatch Logs agent to read the file have not been modified.
  • B. Verify that the OS Log rotation rules are compatible with the configuration requirements for agent streaming.
  • C. Configure an Amazon Kinesis producer to first put the logs into Amazon Kinesis Streams.
  • D. Create a CloudWatch Logs metric to isolate a value that changes at least once during the period before logging stops.
  • E. Use AWS CloudFormation to dynamically create and maintain the configuration file for the CloudWatch Logs agent.
Show Suggested Answer Hide Answer
Suggested Answer: AB 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
cloudguy365
Highly Voted 3 years, 7 months ago
A and B
upvoted 31 times
...
aws_Tamilan
Highly Voted 3 years, 7 months ago
AB is answer https://acloud.guru/forums/aws-certified-security-specialty/discussion/-Lm5A3w6_NybQPhh6tRP/Cloudwatch%20Log%20question
upvoted 20 times
EA_Practice
3 years, 6 months ago
in this article (docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Agent-Configuration-File-Details.html), logfile – specifies the location where the CloudWatch agent writes log messages. There is nothing about any OS logs rotation. So, how does B fit into this ?
upvoted 1 times
EA_Practice
3 years, 6 months ago
as to the A, exactly what "file permissions" for what "monitored files" is it referring to ?
upvoted 1 times
...
...
...
Raphaello
Most Recent 1 year, 3 months ago
Selected Answer: AB
AB are the best answers to identify the cause of the "phenomenon"!
upvoted 1 times
...
sprial02
1 year, 9 months ago
B,D is correct. not remediation but identify the cause of phenomenon!!!
upvoted 1 times
...
skillz2investor
2 years, 5 months ago
Selected Answer: AB
A&B is the correct answer.
upvoted 2 times
...
janvandermerwer
2 years, 6 months ago
Selected Answer: AB
A & B make the most sense. Likely OS level issues if the configuration has already been delivering for a few hours.
upvoted 3 times
...
sapien45
2 years, 8 months ago
Selected Answer: AB
Why A and B. Because C,D,E responses are from another world.
upvoted 7 times
...
mongiam
3 years ago
Selected Answer: AB
A. Ensure that file permissions for monitored files that allow the CloudWatch Logs agent to read the file have not been modified. B. Verify that the OS Log rotation rules are compatible with the configuration requirements for agent streaming.
upvoted 1 times
...
Radhaghosh
3 years, 3 months ago
A & B, Other makes no sense
upvoted 1 times
...
sanjaym
3 years, 6 months ago
Ans: AB 100%
upvoted 2 times
...
Sitender
3 years, 6 months ago
A is incorrect because if permission issue, logs will not pushed at all. like on or off, cant be intermittent
upvoted 1 times
rhinozD
3 years, 6 months ago
the permission can be changed after that. so it is possible.
upvoted 3 times
...
...
NANDY666
3 years, 6 months ago
AB is Correct
upvoted 3 times
...
khos77
3 years, 6 months ago
A,B is the answer
upvoted 2 times
...
shooricg
3 years, 6 months ago
It's B & D, at first I thought it was A. but if you read the question carefully, it says that logs are successfully delivered, only after a running number of hours it stops. it highly unlikely that policies would change and change back every time.
upvoted 6 times
Ayusef
3 years, 6 months ago
Their could be a number of reasons the policy could have been changed. 1# A person changed them, 2# an automated process changed them. Of all the answers A...is the one that seems more probable. So A.. and B...
upvoted 1 times
...
touryard
3 years, 6 months ago
They are asking to Identify the cause not talk about any action. D is speaking of isolation. Ans is A and B
upvoted 1 times
...
boooliyooo
2 years, 5 months ago
We can say ABD is correct, however, A, and B are more straightforward. and if all fails, D will take place.
upvoted 1 times
...
...
devjava
3 years, 6 months ago
Ans> A,B
upvoted 1 times
...
AfricanCloudGuru
3 years, 6 months ago
Ans(B,D) https://aws.amazon.com/premiumsupport/knowledge-center/push-log-data-cloudwatch-awslogs/
upvoted 2 times
...
Ayusef
3 years, 6 months ago
Read the question carefully it's A.. and B..
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago