DOP-C02 · Question #81
A company mandates the creation of capture logs for everything running in its AWS account. The account has multiple VPCs with Amazon EC2 instances, Application Load Balancers, Amazon RDS MySQL databas
The correct answer is A. Configure an AWS Lambda function to send all CloudWatch logs to an Amazon S3 bucket. D. Configure an Amazon S3 object lock legal hold on the logging Amazon S3 bucket. F. Deploy an Amazon CloudWatch agent to all Amazon EC2 instances.. CloudWatch agent to send logs to CloudWatch -> Lambda function to send the logs in S3 -> S3 Object Lock to avoid deletion -> QuickSight for report. https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lock.html
Question
A company mandates the creation of capture logs for everything running in its AWS account. The account has multiple VPCs with Amazon EC2 instances, Application Load Balancers, Amazon RDS MySQL databases, and AWS WAF rules configured. The logs must be protected from deletion. A daily visual analysis of log anomalies from the previous day is required. Which combination of actions should a DevOps Engineer take to accomplish this? (Choose three.)
Options
- AConfigure an AWS Lambda function to send all CloudWatch logs to an Amazon S3 bucket.
- BConfigure AWS CloudTrail to send all logs to Amazon Inspector. Create a dashboard report in
- CConfigure Amazon S3 MFA Delete on the logging Amazon S3 bucket.
- DConfigure an Amazon S3 object lock legal hold on the logging Amazon S3 bucket.
- EConfigure AWS Artifact to send all logs to the logging Amazon S3 bucket. Create a dashboard
- FDeploy an Amazon CloudWatch agent to all Amazon EC2 instances.
How the community answered
(26 responses)- A46% (12)
- B8% (2)
- C15% (4)
- E31% (8)
Explanation
CloudWatch agent to send logs to CloudWatch -> Lambda function to send the logs in S3 -> S3 Object Lock to avoid deletion -> QuickSight for report. https://docs.aws.amazon.com/AmazonS3/latest/dev/object-lock.html
Topics
Community Discussion
No community discussion yet for this question.