ANS-C01 Question 477
Single answerAn organization wants to analyze DNS query logs for their domain hosted on Amazon Route 53. They need a solution that captures logs in near real-time and enables further processing with minimal operational overhead. Which service or combination of services should they use for this requirement?
- A
Enable Route 53 Query Logging and send logs to Amazon S3 for analysis.
- B
Enable Route 53 Query Logging and send logs to Amazon Kinesis Data Firehose for delivery to an analytics destination.
- C
Enable Route 53 Resolver Query Logging and send logs to Amazon CloudWatch Logs.
- D
Enable Route 53 Resolver Query Logging and send logs to Amazon Kinesis Data Streams for custom processing.
Show answer and explanation
Correct answer: B
Explanation
To efficiently analyze DNS query logs in near real-time with minimal operational overhead, Route 53 Query Logging combined with Amazon Kinesis Data Firehose is the best option. Kinesis Data Firehose simplifies the process by automatically delivering the logs to a specified analytics destination like S3 or Redshift. Other options either lack real-time capabilities or require more operational effort to set up custom processing pipelines.
- A. Incorrect.
This option allows storing the logs in Amazon S3, but it does not provide near real-time processing capabilities. Additional tools would be required to analyze the data, leading to higher operational overhead.
- B. Correct.
This is the correct answer. Route 53 Query Logging integrated with Amazon Kinesis Data Firehose supports near real-time log delivery to destinations like Amazon S3, Amazon Redshift, or Amazon Elasticsearch Service for analysis. It minimizes operational overhead by automating delivery to the analytics destination.
- C. Incorrect.
While Route 53 Resolver Query Logging can send logs to CloudWatch Logs, it is better suited for monitoring and troubleshooting rather than near real-time analytics. Additional processing steps would be required for advanced analysis.
- D. Incorrect.
Amazon Kinesis Data Streams can enable custom processing, but it requires more manual effort to set up consumer applications for processing the logs, leading to higher operational overhead compared to Kinesis Data Firehose.