ANS-C01 Question 479
Select 2Your company is using Amazon Route 53 for DNS management and wants to monitor DNS query logs for security and operational purposes. The logs need to be delivered to a centralized location where they can be analyzed in near real-time. Which combination of services can achieve this?
- A
Enable Route 53 query logging and configure delivery to an Amazon S3 bucket
- B
Enable Route 53 query logging and configure delivery to Amazon Kinesis Data Firehose
- C
Enable Route 53 query logging and configure delivery to Amazon CloudWatch Logs
- D
Use Route 53 Resolver Query Logging to send logs to Amazon Kinesis Data Streams for analysis
- E
Use Route 53 Resolver Query Logging to send logs to Amazon CloudWatch Logs
Show answer and explanation
Correct answers: B, E
Explanation
To monitor and analyze DNS query logs in near real-time, you can use Route 53 query logging with Amazon Kinesis Data Firehose, which streams logs to a centralized location for analysis. Alternatively, Route 53 Resolver Query Logging can deliver logs to Amazon CloudWatch Logs, where they can be analyzed in near real-time. These options provide the required functionality for centralized and real-time log monitoring.
- A. Incorrect.
This option is incorrect because, while you can enable Route 53 query logging to an S3 bucket, it does not support real-time analysis. The logs are delivered as files, which are suitable for batch processing rather than near real-time analysis.
- B. Correct.
This option is correct because Amazon Kinesis Data Firehose can be used to stream Route 53 query logs to destinations like Amazon S3, Amazon Redshift, or a third-party service in near real-time, enabling centralized monitoring and analysis.
- C. Incorrect.
This option is incorrect because Route 53 query logging does not natively support delivery to Amazon CloudWatch Logs. CloudWatch Logs can be used with other services like Route 53 Resolver Query Logging, but not directly with Route 53 query logging.
- D. Incorrect.
This option is incorrect because Route 53 Resolver Query Logging does not support delivery to Amazon Kinesis Data Streams. Instead, it supports streaming logs to S3, CloudWatch Logs, or Kinesis Data Firehose.
- E. Correct.
This option is correct because Route 53 Resolver Query Logging can deliver logs to Amazon CloudWatch Logs, where they can be monitored and analyzed in near real-time.