DOP-C02 Question 236
Select 3Your organization runs a distributed microservices architecture on AWS. Recently, users have reported intermittent failures when accessing certain services. As a DevOps engineer, your goal is to identify the root cause of these issues. You use Amazon CloudWatch and AWS CloudTrail to monitor and analyze logs and metrics. Which combination of actions would best help you detect and investigate the issues?
- A
Set up CloudWatch Alarms on key application metrics, such as latency and error rates, to identify anomalies.
- B
Enable detailed monitoring for Amazon EC2 instances and analyze CloudWatch metrics for CPU, memory, and network utilization.
- C
Filter CloudTrail logs for API activity related to the affected services and review recent deployments or changes.
- D
Create a VPC Flow Logs stream to analyze network traffic between microservices for unusual patterns.
- E
Use CloudWatch Logs Insights to query application logs for errors or exceptions logged by the affected services.
Show answer and explanation
Correct answers: A, C, E
Explanation
Identifying the root cause of intermittent failures in a distributed microservices architecture requires a combination of metric monitoring, log analysis, and API activity tracing. CloudWatch Alarms and Logs Insights help detect anomalies and errors, while CloudTrail logs provide additional context related to API calls or configuration changes. Together, these tools enable a comprehensive approach to detecting and investigating the issues.
- A. Correct.
Correct: CloudWatch Alarms can help you proactively detect anomalies in metrics like latency and error rates, which are critical to understanding intermittent failures.
- B. Incorrect.
Partially correct but not sufficient on its own: While detailed EC2 monitoring provides insights into instance-level metrics, it may not directly correlate to service-level issues in a microservices architecture.
- C. Correct.
Correct: CloudTrail logs can reveal changes or API activity that might have triggered the failures, such as unauthorized access or misconfigured deployments.
- D. Incorrect.
Not correct: VPC Flow Logs are useful for analyzing network traffic but are less relevant for detecting application-level errors in this scenario.
- E. Correct.
Correct: CloudWatch Logs Insights is a powerful tool for querying logs and detecting patterns of errors or exceptions that could be causing the reported issues.