Task Statement 4.2: Audit, Monitor, and Analyze Logs and Metrics to Detect Issues. DOP-C02 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which AWS service is a business intelligence tool for creating interactive visualizations and dashboards from data?

   • AAmazon QuickSight
   • BAWS Glue
   • CAmazon Athena
   • DAmazon CloudWatch
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary purpose of CloudWatch Logs Insights?

   • ATo create visualizations of log data
   • BTo query and analyze log data for troubleshooting and monitoring
   • CTo store log data for long-term retention
   • DTo send real-time alerts based on log patterns
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A security team needs to automatically scan EC2 instances for common vulnerabilities and unintentionally exposed ports. The scans must run on a weekly schedule. The team wants to use a managed AWS service. What should the team configure?

   • AA CloudWatch Events rule that triggers a Lambda function to run nmap against the instances.
   • BA CloudWatch alarm on the EC2 CPUUtilization metric to detect unusual activity.
   • CAn Amazon Inspector assessment template with a weekly recurrence and a network reachability package.
   • DAn AWS Config rule that checks for exposed security group ports.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is the role of an AWS Config rule?

   • ATo scan for software vulnerabilities
   • BTo record API activity
   • CTo encrypt data at rest
   • DTo evaluate resource configurations against desired policies
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   An application running on EC2 instances is intermittently returning HTTP 500 errors. The application logs are written to CloudWatch Logs. A DevOps engineer needs to determine the most common error message associated with these 500 errors over the last 4 hours. The engineer suspects a specific database connection issue. What is the most efficient way to analyze the logs?

   • AEnable AWS X-Ray tracing on the EC2 instances to trace the requests that return 500.
   • BCreate a CloudWatch dashboard with a metric filter for 'status=500' and view the graph.
   • CUse CloudWatch Logs Insights to run a query that filters for 'status=500' and counts by 'message' field.
   • DDownload all log data from S3 and use Amazon QuickSight to create a visual analysis.
   Reveal Solution Discussion Select an answer first