DOP-C02 Question 238
Select 2Your company has recently migrated to AWS and uses Amazon CloudWatch for monitoring logs and metrics. You have been tasked with detecting issues in near real-time and ensuring compliance with your organization’s security policies. To achieve this, you need to set up an automated system that monitors critical application logs for specific error patterns and notifies the operations team. Which combination of steps should you take to meet this requirement?
- A
Create a CloudWatch Log Group, configure Metric Filters for the error patterns, and set up a CloudWatch Alarm to trigger notifications via an SNS topic.
- B
Enable VPC Flow Logs and use Amazon Athena to query the logs for error patterns in near real-time.
- C
Deploy AWS Config to monitor changes in log files and send notifications when error patterns are detected.
- D
Integrate CloudWatch Logs with AWS Lambda to analyze log streams and send notifications when specific error patterns are identified.
- E
Use Amazon CloudTrail to track API activity and configure EventBridge rules to detect and notify on error patterns in logs.
Show answer and explanation
Correct answers: A, D
Explanation
To detect issues in near real-time, you can use CloudWatch Metric Filters to analyze logs for specific error patterns and trigger alarms for notifications. Alternatively, you can integrate CloudWatch Logs with AWS Lambda for real-time log stream analysis and notifications. Other options, such as using VPC Flow Logs, AWS Config, or CloudTrail, do not provide the required functionality for detecting error patterns in application logs.
- A. Correct.
This option is correct because CloudWatch Log Groups can store application logs, and Metric Filters can analyze those logs for specific error patterns. A CloudWatch Alarm can then be set up to notify the operations team via an SNS topic.
- B. Incorrect.
This option is incorrect because VPC Flow Logs are used to capture network traffic information, not application logs, and querying logs using Athena does not provide near real-time detection capabilities.
- C. Incorrect.
This option is incorrect because AWS Config is used for tracking configuration changes and compliance, not for monitoring logs or detecting error patterns.
- D. Correct.
This option is correct because integrating CloudWatch Logs with AWS Lambda allows for real-time analysis of log streams. AWS Lambda can be configured to detect specific error patterns and send notifications as needed.
- E. Incorrect.
This option is incorrect because while CloudTrail tracks API activity, it does not analyze application logs for specific error patterns. EventBridge rules can notify on certain API events but are not suitable for application log analysis.