SAP-C02 Question 384
Select 4A company is running a multi-tier application on AWS. The application uses Amazon EC2 instances in an Auto Scaling group for the web layer, a private Amazon RDS database for the data layer, and is fronted by an Application Load Balancer (ALB). The company wants to implement a logging and monitoring solution to detect anomalies, monitor performance, and set up alarms for critical events. Which combination of services and configurations should you implement to meet the requirements?
- A
Enable detailed monitoring for Amazon EC2 instances and configure Amazon CloudWatch Alarms based on CPU utilization.
- B
Configure Access Logs on the Application Load Balancer and send them to an Amazon S3 bucket for storage and analysis.
- C
Set up Enhanced Monitoring for Amazon RDS and use Amazon CloudWatch to monitor RDS metrics.
- D
Use AWS CloudTrail to monitor and log all API calls from the application and configure alarms for unauthorized API activities.
- E
Install custom CloudWatch Agent on the EC2 instances to collect application-specific logs and send them to CloudWatch Logs.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
To implement a comprehensive logging and monitoring solution for a multi-tier application on AWS, you need to leverage services like Amazon CloudWatch for metric monitoring, alarms, and log collection. Detailed monitoring for EC2, ALB access logs, Enhanced Monitoring for RDS, and the installation of the CloudWatch Agent on EC2 instances are all essential components. AWS CloudTrail, while valuable for security and compliance auditing, is not a direct requirement for performance monitoring or anomaly detection in this scenario.
- A. Correct.
Correct. Enabling detailed monitoring for EC2 and setting up CloudWatch Alarms helps monitor critical metrics like CPU utilization and ensures timely notifications for anomalies.
- B. Correct.
Correct. Configuring ALB Access Logs and storing them in S3 provides visibility into incoming traffic and allows for further analysis or troubleshooting.
- C. Correct.
Correct. Enhanced Monitoring for Amazon RDS provides granular metrics for database performance, which can be monitored through CloudWatch.
- D. Incorrect.
Incorrect. While AWS CloudTrail is useful for auditing API activity, it is not primarily designed for performance monitoring or anomaly detection in this scenario.
- E. Correct.
Correct. Installing the CloudWatch Agent on EC2 instances enables the collection of custom application logs and system-level metrics, which can be critical for performance monitoring and troubleshooting.