ANS-C01 Question 480
Select 2Your organization uses Amazon Route 53 as a DNS service and wants to collect detailed query logs for analysis. The logs should be processed in near real-time and stored in Amazon S3 for further analysis. Which combination of services can you use to achieve this?
- A
Enable Route 53 query logging and configure logs to be delivered to an Amazon Kinesis Data Firehose stream.
- B
Enable Route 53 query logging and configure logs to be delivered directly to Amazon S3.
- C
Configure an Amazon Kinesis Data Firehose stream to send the logs to an Amazon S3 bucket.
- D
Use Amazon CloudWatch Logs to collect Route 53 query logs and send them to Amazon Kinesis Data Streams for processing.
- E
Set up AWS Lambda to process Route 53 query logs and write them to Amazon S3.
Show answer and explanation
Correct answers: A, C
Explanation
Route 53 query logging allows you to log DNS queries to an Amazon Kinesis Data Firehose stream for processing. Kinesis Data Firehose can then deliver the processed logs to Amazon S3 for storage. You cannot configure Route 53 to deliver logs directly to S3, nor is CloudWatch Logs or AWS Lambda needed for this specific requirement.
- A. Correct.
Correct: Route 53 query logs can be delivered to an Amazon Kinesis Data Firehose stream, which can then send the processed logs to a storage destination like Amazon S3.
- B. Incorrect.
Incorrect: Route 53 query logs cannot be delivered directly to Amazon S3. They must go through an intermediary service like Amazon Kinesis Data Firehose.
- C. Correct.
Correct: Kinesis Data Firehose can be configured to collect logs and deliver them to Amazon S3 for long-term storage.
- D. Incorrect.
Incorrect: CloudWatch Logs is not used to collect Route 53 query logs. Query logs must be sent to Amazon Kinesis Data Firehose for processing.
- E. Incorrect.
Incorrect: AWS Lambda is not necessary in this scenario as Kinesis Data Firehose can directly deliver logs to Amazon S3 without additional processing.