Your Customer Is Willing to Consolidate Their Log Streams (Access

question 870

Multiple Choice

Your customer is willing to consolidate their log streams (access logs, application logs, security logs, etc.) in one single system. Once consolidated, the customer wants to analyze these logs in real time based on heuristics. From time to time, the customer needs to validate heuristics, which requires going back to data samples extracted from the last 12 hours. What is the best approach to meet your customer's requirements?

• A) Send all the log events to Amazon SQS, setup an Auto Scaling group of EC2 servers to consume the logs and apply the heuristics.
• B) Send all the log events to Amazon Kinesis, develop a client process to apply heuristics on the logs
• C) Configure Amazon CloudTrail to receive custom logs, use EMR to apply heuristics the logs
• D) Setup an Auto Scaling group of EC2 syslogd servers, store the logs on S3, use EMR to apply heuristics on the logs

---

Definitions:

Legislature Abolished

The disbandment or termination of a legislative body, which is an assembly with the authority to make, amend, and repeal laws.

Slavery

A socio-economic system in which individuals are owned by others, forced to work without pay, and considered legal property.

Dominant Elite

The dominant elite describes a small group of individuals or entities that hold significant power, wealth, or influence over a larger population or a specific area of society or economy.

Poor White Men

Typically refers to economically disadvantaged white males, often discussed in socio-historical contexts regarding race, class, and political power.