Amazon Exam SOA-C02 Topic 7 Question 85 Discussion

Actual exam question for Amazon's SOA-C02 exam

Question #: 85
Topic #: 7

A company has created a NAT gateway in a public subnet in a VPC. The VPC also contains a private subnet that includes Amazon EC2 instances. The EC2 instances use the NAT gateway to access the internet to download patches and updates. The company has configured a VPC flow log for the elastic network interface of the NAT gateway. The company is publishing the output to Amazon CloudWatch Logs.

A SysOps administrator must identify the top five internet destinations that the EC2 instances in the private subnet communicate with for downloads.

What should the SysOps administrator do to meet this requirement in the MOST operationally efficient way?

AUse AWS CloudTrail Insights events to identify the top five internet destinations.

BUse Amazon CloudFront standard logs (access logs) to identify the top five internet destinations.

CUse CloudWatch Logs Insights to identify the top five internet destinations.

DChange the flow log to publish logs to Amazon S3. Use Amazon Athena to query the log files in Amazon S3.

Show Suggested Answer

Suggested Answer: C

by Raul at Feb 11, 2024, 03:47 PM

Limited Time Offer

25%

Off

Get Premium SOA-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Dion

11 months ago

I think using Amazon S3 with Athena would also be a good option to analyze the flow logs.

upvoted 0 times

...

Maryann

11 months ago

That makes sense, CloudWatch Logs Insights can give us a deeper look into the data.

upvoted 0 times

...

Venita

12 months ago

I see your point, Delfina, but CloudWatch Logs Insights can provide more detailed information.

upvoted 0 times

...

Delfina

12 months ago

But wouldn't using CloudTrail Insights events be better for this specific task?

upvoted 0 times

...

Maryann

12 months ago

I agree with Venita, it seems like the most efficient option.

upvoted 0 times

...

Venita

1 years ago

I think using CloudWatch Logs Insights is the way to go.

upvoted 0 times

...

Delfina

1 years ago

You guys are probably right. But I'm curious, why wouldn't we want to use AWS CloudTrail Insights events or Amazon CloudFront standard logs? Are those not as suitable for this use case?

upvoted 0 times

...

Bobbye

1 years ago

*laughs* Yeah, no kidding. Sometimes it feels like we're drowning in log data, doesn't it? But CloudWatch Logs Insights makes it a lot easier to find the needle in the haystack.

upvoted 0 times

Rasheeda

1 years ago

D) Querying log files in Amazon S3 with Amazon Athena sounds like a solid approach.

upvoted 0 times

...

Annabelle

1 years ago

C) Agreed, CloudWatch Logs Insights is a game-changer for managing log data.

upvoted 0 times

...

Louvenia

1 years ago

A) AWS CloudTrail Insights events might also offer some useful information.

upvoted 0 times

...

Tamar

1 years ago

B) Using Amazon CloudFront standard logs could also provide valuable insights.

upvoted 0 times

...

Wynell

1 years ago

C) Yes, CloudWatch Logs Insights will definitely help narrow down the top destinations.

upvoted 0 times

...

Cherry

1 years ago

D) Change the flow log to publish logs to Amazon S3. Use Amazon Athena to query the log files in Amazon S3.

upvoted 0 times

...

Mabelle

1 years ago

C) Use CloudWatch Logs Insights to identify the top five internet destinations.

upvoted 0 times

...

Diane

1 years ago

Exactly, Merilyn. CloudWatch Logs Insights is really the way to go here. It's designed for analyzing log data like the VPC flow logs, and it's super easy to use. *chuckles* Just don't forget to bring your magnifying glass - you might need it to read all those logs!

upvoted 0 times

...

Merilyn

1 years ago

Good question, Lina. CloudTrail is more focused on tracking API calls and user activity, so it might not be the best fit here. And CloudFront logs would only show traffic going through CloudFront, not directly to the internet.

upvoted 0 times

...