ANS-C01 Question 99
Select 3You are managing a hybrid cloud environment with AWS and on-premises data centers. Your organization requires centralized logging and monitoring for security compliance and operational visibility. Which combination of actions would best meet these requirements?
- A
Use AWS CloudWatch Logs to collect and monitor log data from AWS resources and set up an agent to forward on-premises logs to AWS CloudWatch.
- B
Enable AWS CloudTrail logging for all AWS accounts and regions, and configure it to deliver logs to an S3 bucket.
- C
Set up a VPC Flow Log for monitoring network traffic in your AWS VPC, and configure it to send logs to an Amazon S3 bucket or CloudWatch Logs.
- D
Deploy Amazon Kinesis Data Firehose to continuously stream log data from AWS and on-premises systems to an external SIEM tool.
- E
Use CloudWatch Alarms to automatically notify your team of any critical anomalies in log patterns from AWS and on-premises systems.
Show answer and explanation
Correct answers: A, B, C
Explanation
Centralized logging and monitoring in hybrid environments require collecting logs from both AWS and on-premises resources. AWS CloudWatch Logs, CloudTrail, and VPC Flow Logs are critical tools for achieving this in a compliant and operationally efficient way. While additional tools like Kinesis Firehose or CloudWatch Alarms can enhance functionality, they are not foundational to the logging and monitoring requirements in this scenario.
- A. Correct.
This is correct because AWS CloudWatch Logs can centralize log collection and monitoring for AWS resources and on-premises systems when the CloudWatch agent is installed on on-premises servers.
- B. Correct.
This is correct because AWS CloudTrail ensures comprehensive logging of API activity across all AWS accounts and regions, meeting security compliance requirements.
- C. Correct.
This is correct because VPC Flow Logs capture network traffic metadata, which is important for monitoring and troubleshooting network issues in AWS environments.
- D. Incorrect.
This is incorrect because while Kinesis Data Firehose can stream log data to external systems, it is not essential for centralizing logging and monitoring within AWS and hybrid networks for basic compliance needs.
- E. Incorrect.
This is incorrect because CloudWatch Alarms notify you of anomalies but do not contribute to centralizing or defining logging and monitoring requirements. They are a supplemental feature for monitoring.