Task Statement 4.2: Audit, Monitor, and Analyze Logs and Metrics to Detect Issues. DOP-C02 Practice Questions (Page 7)

Questions 31–33

1. 31application · medium

   A DevOps team has months of application logs stored in S3. Management wants an interactive dashboard to analyze trends in error rates and user activity over time. The team wants to use a serverless BI service that can query the data in S3 directly. What should the team use?

   • AA CloudWatch dashboard with a log insights query widget.
   • BAmazon Athena directly to create the visualizations.
   • CAmazon QuickSight with Athena as the data source.
   • DAmazon OpenSearch Service with Kibana.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which CloudWatch metric would a DevOps engineer monitor to detect an increase in application errors returned by an Application Load Balancer?

   • AHTTPCode_ELB_5XX_Count
   • BDatabaseConnections
   • CRequestCount
   • DCPUUtilization
   Reveal Solution Discussion Select an answer first
3. 33expert · hard

   A security analyst suspects that a compromised IAM credential was used to launch a new EC2 instance in a production account. The analyst needs to confirm the exact API call, the source IP address, and the user agent of the requester. CloudTrail is enabled in the account. What is the most direct way to retrieve this information?

   • AReview the VPC Flow Logs for the new instance's network traffic.
   • BQuery the CloudTrail logs stored in S3 using Amazon Athena for the RunInstances event.
   • CCheck the EC2 instance's system log in the EC2 console.
   • DUse the AWS Config console to view the configuration timeline for the EC2 instance.
   Reveal Solution Discussion Select an answer first