DOP-C02 Question 237
Select 3Your organization has deployed a critical customer-facing application on AWS. You are tasked with ensuring that any anomalies, performance degradations, or security issues are detected and addressed promptly. The solution must provide centralized log and metric analysis while supporting automated notifications and remediation actions. Which combination of services and configurations would best meet this requirement?
- A
Use Amazon CloudWatch to collect and analyze application metrics, configure alarms, and integrate with Amazon SNS for automated notifications.
- B
Enable AWS CloudTrail to capture API activity logs and integrate with Amazon EventBridge for automated remediation workflows.
- C
Use AWS Config to monitor resource configurations and automatically remediate non-compliant resources through AWS Systems Manager.
- D
Deploy Amazon OpenSearch Service (formerly Elasticsearch) for centralized log analysis and visualization, and integrate it with CloudWatch Logs.
- E
Enable VPC Flow Logs to capture network traffic and directly stream logs to Amazon S3 for real-time anomaly detection.
Show answer and explanation
Correct answers: A, B, D
Explanation
The combination of Amazon CloudWatch, AWS CloudTrail, and Amazon OpenSearch Service addresses the need for centralized log and metric analysis, anomaly detection, and automated remediation. CloudWatch oversees metrics and log insights, CloudTrail ensures API activity is audited and integrated with automated workflows, and OpenSearch provides powerful log visualization and analysis capabilities. VPC Flow Logs and AWS Config, while useful in specific scenarios, do not fully address the requirements in this case.
- A. Correct.
Correct. Amazon CloudWatch provides monitoring for metrics and log analysis. Alarms can trigger Amazon SNS notifications for automated responses to anomalies or performance issues.
- B. Correct.
Correct. AWS CloudTrail records API-level activity, which is essential for auditing and detecting unauthorized access or unusual API usage. Integration with EventBridge enables automated remediation workflows.
- C. Incorrect.
Incorrect. Although AWS Config is useful for compliance and configuration monitoring, it is not optimized for centralized log and metric analysis or real-time anomaly detection.
- D. Correct.
Correct. Amazon OpenSearch Service allows centralized log analysis and visualization, especially when integrated with CloudWatch Logs for seamless data ingestion.
- E. Incorrect.
Incorrect. While VPC Flow Logs capture network traffic, directly streaming them to Amazon S3 does not provide real-time anomaly detection or centralized analysis capabilities.