SCS-C02 Question #159: Real Exam Question with Answer & Explanation

Question

A company has decided to move its fleet of Linux-based web server instances to an Amazon EC2 Auto Scaling group. Currently, the instances are static and are launched manually. When an administrator needs to view log files, the administrator uses SSH to establish a connection to the instances and retrieves the logs manually. The company often needs to query the logs to produce results about application sessions and user issues. The company does not want its new automatically scaling architecture to result in the loss of any log files when instances are scaled in. Which combination of steps should a security engineer take to meet these requirements MOST cost-effectively? (Choose two.)

Options

• AConfigure a cron job on the instances to forward the log files to Amazon S3 periodically.
• BConfigure AWS Glue and Amazon Athena to query the log files.
• CConfigure the Amazon CloudWatch agent on the instances to forward the logs to Amazon
• DConfigure Amazon CloudWatch Logs Insights to query the log files.
• EConfigure the instances to write the logs to an Amazon Elastic File System (Amazon EFS)

Explanation

CloudWatch Agent for Centralized Logging: The CloudWatch agent provides a reliable and efficient way to collect logs from the EC2 instances and send them to a central location, CloudWatch Logs. This eliminates the need for manual log retrieval via SSH and ensures logs are collected even during scaling events. CloudWatch Logs Insights for Cost-Effective Analysis: CloudWatch Logs Insights is a serverless log query service built on top of CloudWatch Logs. It allows you to analyze log data at scale without the need for additional infrastructure or complex data warehousing solutions. This offers a cost-effective approach for querying and analyzing the log data stored in CloudWatch Logs.

No community discussion yet for this question.