A DevOps team is setting up a CloudWatch Logs subscription to stream logs to a Kinesis Data Stream. The team wants to ensure that the subscription has the necessary permissions to write to the Kinesis Data Stream. What is the correct way to grant these permissions?

Use the IAM role of the user who creates the subscription.

Configure the Kinesis Data Stream to be publicly accessible.

Attach a resource-based policy to the Kinesis Data Stream that allows CloudWatch Logs to write to it.

Create an IAM role that CloudWatch Logs can assume, and attach a policy that allows PutRecord and PutRecords on the Kinesis Data Stream.

What is the purpose of a CloudWatch metric namespace?

It sets the retention period for the metric data

It groups related metrics from the same source or application

It determines who can view the metric

It defines the unit of measurement for the metric

Which IAM entity is typically used to grant an EC2 instance permission to send logs to CloudWatch Logs?

An IAM role attached to the instance profile

An IAM user with long-term credentials

An IAM policy attached directly to the EC2 instance

AWSCertified DevOps Engineer - Professional

Domain 4Objective 1

Task Statement 4.1: Configure the Collection, Aggregation, and Storage of Logs and Metrics. DOP-C02 Practice Questions (Page 6)

Part of the Content Domain 4: Monitoring and Logging domain, which accounts for 15% of the DOP-C02 exam. AWS does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 4–6 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

13concepts

15%of the exam

13 Concepts in This Objective

CloudWatch metrics fundamentals
Real-time log ingestion
Encryption for logs and metrics
IAM for log collection
Secure log storage and management
Metric filters
CloudWatch metric streams
Custom metrics collection
Log storage lifecycle management
CloudWatch log subscriptions
Log search with filter and pattern syntax
CloudWatch Logs Insights
KMS encryption for log data

Questions 26–30

26expert · hard
A DevOps team is setting up a CloudWatch Logs subscription to stream logs to a Kinesis Data Stream. The team wants to ensure that the subscription has the necessary permissions to write to the Kinesis Data Stream. What is the correct way to grant these permissions?
Select an answer first
27foundation · easy
What is the purpose of a CloudWatch metric namespace?
Select an answer first
28foundation · easy
Which IAM entity is typically used to grant an EC2 instance permission to send logs to CloudWatch Logs?
Select an answer first
29foundation · easy
Which CloudWatch feature provides a purpose-built query language for analyzing log data?
Select an answer first
30foundation · easy
What is the default retention period for CloudWatch Logs log groups?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to DOP-C02

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “DOP-C02” is a trademark of its owner, used for identification only.

Task Statement 4.1: Configure the Collection, Aggregation, and Storage of Logs and Metrics. DOP-C02 Practice Questions (Page 6)

Questions 26–30

A DevOps team is setting up a CloudWatch Logs subscription to stream logs to a Kinesis Data Stream. The team wants to ensure that the subscription has the necessary permissions to write to the Kinesis Data Stream. What is the correct way to grant these permissions?

What is the purpose of a CloudWatch metric namespace?

Which IAM entity is typically used to grant an EC2 instance permission to send logs to CloudWatch Logs?

Which CloudWatch feature provides a purpose-built query language for analyzing log data?

What is the default retention period for CloudWatch Logs log groups?

Keep studying — Content Domain 4: Monitoring and Logging