DOP-C02 · Question #501
A company's applications run on Amazon EC2 instances and use AWS Lambda functions in multiple AWS accounts. All EC2 instances have the Amazon CloudWatch agent installed. All accounts belong to the sam
Sign in or unlock DOP-C02 to reveal the answer and full explanation for question #501. The question stem and answer options stay visible for context.
Question
A company's applications run on Amazon EC2 instances and use AWS Lambda functions in multiple AWS accounts. All EC2 instances have the Amazon CloudWatch agent installed. All accounts belong to the same organization in AWS Organizations. The company has created a dedicated central log account. All logs that the applications produce must be sent to a central location. The logs must be encrypted with keys that the company manages. Which solution meets these requirements with the LEAST operational overhead?
Options
- AIn the central log account, enable logs as the data source in CloudWatch. Add the organization ID
- BCreate an Amazon S3 bucket in the central log account. Create an Amazon Data Firehose stream
- CCreate an Amazon S3 bucket in each account. Create an Amazon OpenSearch Service cluster in
- DCreate an Amazon S3 bucket in the central log account. Create an Amazon Data Firehose stream
Unlock DOP-C02 to see the answer
You've previewed enough free DOP-C02 questions. Unlock DOP-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.