Exam AWS Certified Security - Specialty All Questions

View all questions & answers for the AWS Certified Security - Specialty exam

Exam AWS Certified Security - Specialty topic 1 question 39 discussion

Exam question from Amazon's AWS Certified Security - Specialty

Question #: 39
Topic #: 1

[All AWS Certified Security - Specialty Questions]

A Software Engineer wrote a customized reporting service that will run on a fleet of Amazon EC2 instances. The company security policy states that application logs for the reporting service must be centrally collected.
What is the MOST efficient way to meet these requirements?

A. Write an AWS Lambda function that logs into the EC2 instance to pull the application logs from the EC2 instance and persists them into an Amazon S3 bucket.
B. Enable AWS CloudTrail logging for the AWS account, create a new Amazon S3 bucket, and then configure Amazon CloudWatch Logs to receive the application logs from CloudTrail.
C. Create a simple cron job on the EC2 instances that synchronizes the application logs to an Amazon S3 bucket by using rsync.
D. Install the Amazon CloudWatch Logs Agent on the EC2 instances, and configure it to send the application logs to CloudWatch Logs.

Show Suggested Answer

Suggested Answer: D 🗳️
Reference:
https://aws.amazon.com/blogs/devops/new-how-to-better-monitor-your-custom-application-metrics-using-amazon-cloudwatch-agent/

by BillyC at Aug. 25, 2019, 5:44 p.m.

Disclaimers:

- ExamTopics website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.

Comments

Submit Cancel

BillyC

Highly Voted 3 years, 11 months ago

D is Correct

upvoted 32 times

...

josellama2000

Highly Voted 3 years, 10 months ago

D is correct You can set your application to send logs and cloudwatch to receive them using the cloudwatrch agent. A Lambda is not necessary https://aws.amazon.com/blogs/devops/new-how-to-better-monitor-your-custom-application-metrics-using-amazon-cloudwatch-agent/

upvoted 5 times

...

dzidis

Most Recent 2 years, 1 month ago

D is correct

upvoted 1 times

...

sapien45

2 years, 11 months ago

Selected Answer: D

Did it for SAP connection logs

upvoted 2 times

...

acloudguru

3 years, 9 months ago

wish I can get this question in my exam, more such simple ones in exam

upvoted 4 times

...

kiev

3 years, 9 months ago

Just what CloudWatch log is meant for.D

upvoted 2 times

...

hk436

3 years, 9 months ago

D is my answer.!

upvoted 2 times

...

ShakthiVinu

3 years, 9 months ago

D 100%

upvoted 2 times

...

refuz

3 years, 9 months ago

D 100%

upvoted 1 times

...

sanjaym

3 years, 9 months ago

Ans: D 100%

upvoted 1 times

...

shooricg

3 years, 9 months ago

I'm confused why D is not correct? This article supports the answer A, but why? https://aws.amazon.com/blogs/developer/build-infrastructure-for-centralized-logging-using-aws-cdk/

upvoted 1 times

examtaker12

3 years, 9 months ago

No it doesn't. It shows you a case which processes logs from CloudWatch Logs

upvoted 1 times

...

devjava

3 years, 9 months ago

Ans > D

upvoted 3 times

...

AfricanCloudGuru

3 years, 9 months ago

Ans (D) https://aws.amazon.com/blogs/devops/new-how-to-better-monitor-your-custom-application-metrics-using-amazon-cloudwatch-agent/

upvoted 3 times

...

kmaiti

3 years, 10 months ago

While C and D are both correct but D will be efficient because cloudwatch does monitoring as well as stores logs using log group.

upvoted 2 times

...

Priya20

3 years, 10 months ago

why B is incorrect?

upvoted 2 times

dnd1000

3 years, 9 months ago

CloudTrail only receives logs from API calls to AWS services. It doesn't send logs from custom applications within an EC2 instance. You need a CloudWatch agent for this.

upvoted 1 times

...

gfhbox0083

3 years, 10 months ago

D, for sure. 'MOST efficient way'

upvoted 1 times

...

RaySmith

3 years, 10 months ago

D is correct

upvoted 2 times

...

Load full discussion...