Amazon
SAP-C02 · Question #334
A company needs to create a centralized logging architecture for all of its AWS accounts. The architecture should provide near-real-time data analysis for all AWS CloudTrail logs and VPC Flow Logs…
The correct answer is B. Configure CloudTrail and VPC Flow Logs to send data to a log group in Amazon CloudWatch. https://aws.amazon.com/solutions/implementations/centralized-logging/
Submitted by alyssa_d· Mar 6, 2026Design Solutions for Organizational Complexity
Question
A company needs to create a centralized logging architecture for all of its AWS accounts. The architecture should provide near-real-time data analysis for all AWS CloudTrail logs and VPC Flow Logs across all AWS accounts. The company plans to use Amazon Elasticsearch Service (Amazon ES) to perform log analysis in the logging account. Which strategy a solutions architect use to meet these requirements?
Options
- AConfigure CloudTrail and VPC Flow Logs in each AWS account to send data to a centralized
- BConfigure CloudTrail and VPC Flow Logs to send data to a log group in Amazon CloudWatch
- CConfigure CloudTrail and VPC Flow Logs to send data to a separate Amazon S3 bucket in each
- DConfigure CloudTrail and VPC Flow Logs to send data to a log group in Amazon CloudWatch
How the community answered
(64 responses)- A3% (2)
- B75% (48)
- C8% (5)
- D14% (9)
Explanation
https://aws.amazon.com/solutions/implementations/centralized-logging/
Community Discussion
No community discussion yet for this question.