Exit SCS-C03 AWS Certified Security - Specialty
Question 1 of 5
0% complete
Q1 Single choice

A company is developing an application that runs across a combination of Amazon EC2 On-Demand Instances and Spot Instances. A security engineer needs to provide a logging solution that makes logs for all instances available from a single location. The solution must allow only a specific set of users to analyze the logs for events patterns. The users must be able to use SQL queries on the logs to perform root cause analysis.

Which solution will meet these requirements?

  • A

    Configure the EC2 instances to send application logs to a single Amazon CloudWatch Logs log group.
    Allow only specific users to access the log group. Use CloudWatch Logs Insights to query the log group.

  • B

    Configure the EC2 instances to send application logs to a single Amazon S3 bucket. Allow only specific users to access the S3 bucket. Use Amazon CloudWatch Logs Insights to query the log files in the S3 bucket.

  • C

    Configure each EC2 instance to send its application logs to its own specific Amazon CloudWatch Logs

    log group. Allow only specific users to access the log groups. Use Amazon Athena to query all the log groups.

  • D

    Configure the EC2 instances to send application logs to a single Amazon CloudWatch Logs log group.
    Grant Amazon Detective access to the log group. Allow only specific users to use Detective to query the log group.

Previous Next