Amazon
DOP-C02 · Question #141
A highly regulated company has a policy that DevOps engineers should not log in to their Amazon EC2 instances except in emergencies. If a DevOps engineer does log in, the security team must be notifie
The correct answer is B. Install the Amazon CloudWatch agent on each EC2 instance. Configure the agent to push all logs to. https://aws.amazon.com/blogs/security/how-to-monitor-and-visualize-failed-ssh-access-attempts- to-amazon-ec2-linux-instances/
Submitted by manish99· Mar 6, 2026Security & Compliance
Question
A highly regulated company has a policy that DevOps engineers should not log in to their Amazon EC2 instances except in emergencies. If a DevOps engineer does log in, the security team must be notified within 15 minutes of the occurrence. Which solution will meet these requirements?
Options
- AInstall the Amazon Inspector agent on each EC2 instance. Subscribe to Amazon EventBridge
- BInstall the Amazon CloudWatch agent on each EC2 instance. Configure the agent to push all logs to
- CSet up AWS CloudTrail with Amazon CloudWatch Logs. Subscribe CloudWatch Logs to Amazon
- DSet up a script on each Amazon EC2 instance to push all logs to Amazon S3. Set up an S3 event to
How the community answered
(27 responses)- A11% (3)
- B81% (22)
- D7% (2)
Explanation
https://aws.amazon.com/blogs/security/how-to-monitor-and-visualize-failed-ssh-access-attempts- to-amazon-ec2-linux-instances/
Topics
#Amazon EC2#CloudWatch Logs#CloudWatch Agent#Login Monitoring
Community Discussion
No community discussion yet for this question.