Audit, monitor, and analyze logs and metrics to detect issues.
16 practice questions under this official exam objective (DOP-C02), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
16 total · page 1 of 1Add an SQS standard dead-letter queue and a CloudWatch Logs target to the EventBridge rule
Testers need to view, troubleshoot, and prevent event loss without redeploying the application. Enabling AWS CloudTrail delivers the event activity to
Query the log group with CloudWatch Logs Insights to count logins over seven days
To count how many times a specific user logged in during the past seven days, run an ad-hoc CloudWatch Logs Insights query against the log group using
Use configuration change recording with the ssh-restricted Config rule and SNS for notific
The environment scales in and out frequently, so recording must capture configuration changes as they occur rather than only on a periodic schedule, a
Send Redshift user activity audit logs to CloudWatch and display them with a CloudWatch Lo
Redshift database audit logging can include user activity logging, which records connections, disconnections, and the SQL statements users run. Config
Query an Athena table over the organization CloudTrail trail with partition projection to
Finding the top users and roles across all accounts requires the CloudTrail data from every account in one place and a query engine efficient enough t
Reduce Latency for Lambda Processing Kinesis Logs
This question addresses high latency in an AWS Lambda consumer processing Amazon Kinesis Data Streams logs. The correct steps involve enabling Enhance
Publish VPC Flow Logs to CloudWatch Logs and count RDP sessions with a log group metric fi
Counting daily RDP sessions requires a record of the connections themselves, and VPC Flow Logs capture the network metadata for traffic to and from th
Enable GuardDuty EKS Audit Log Monitoring and Amazon Detective with EKS audit logs as a so
The platform needs additional security for unauthorized logins and abrupt logouts on EKS, plus a summarized view of resource behaviour across the envi
Stream all CloudWatch metrics to Firehose, transform with Lambda, and deliver to S3
The analytics team must collect both performance metrics and custom metrics, transform the data, store it in Amazon S3, and automatically pick up any
Deploy the CloudWatch agent as a StatefulSet with IRSA and CloudWatchAgentServerPolicy, an
The cluster runs on AWS Fargate, which changes how the observability agent must be deployed. Fargate does not support DaemonSets, so the CloudWatch ag
Use an organization trail in the management account with CloudWatch anomaly detection and
Monitoring S3 access across all accounts requires a single organization trail delivered to CloudWatch in the Organizations management account, with da
Give the node instance profile CloudWatchAgentServerPolicy and run the CloudWatch agent, t
Memory errors under heavy load require collecting memory metrics over time from the EKS cluster's EC2 worker nodes. The unified Amazon CloudWatch agen
Capture ECS task state-change events with EventBridge and investigate stopped tasks in Clo
The requirement is to log and review all stopped ECS tasks for errors across an ECS cluster running on Auto Scaling group EC2 instances. An Amazon Eve
Collect metrics to S3 on a schedule, catalog with a Glue crawler, query with Athena, and v
Auditing and visualizing workload metrics at scale needs a collection layer, a catalog and query layer, and a visualization layer. An EventBridge sche
Use Systems Manager Inventory with AWS Config rules to identify prohibited applications
Auditing which applications are installed across a fleet is exactly what Systems Manager Inventory collects, and AWS Config can evaluate that inventor
Create a Contributor Insights rule for top contributors and alarm on INSIGHT_RULE_METRIC f
The application logs are already in the embedded metric format, which is what makes log data queryable as metrics by dimension. The question is which