Course menuDEA-C01

Exams / DEA-C01 / Monitoring and logging pipelines / Question 2

DEA-C01 practice question: Monitoring and logging pipelines (2 of 3)

Data Operations and Support A free question from our original DEA-C01 practice exam. Try it, then open the answer to see why each option is right or wrong.

Last verified against current AWS documentation ·How we write our questions

A property-management company runs 14 AWS Lambda functions that make up its rent-ingestion pipeline. Each function writes its logs to its own CloudWatch log group. After a bad week, the operations lead wants to see, for the last seven days, how many errors each function raised and which error types were most common.

The analysis is a one-time investigation, and the team wants it done in the console without building a new data store.

Which approach meets these requirements?

Choose one answer.

  1. A. Create an OpenSearch Service domain, subscribe every log group to it with a subscription filter, and build dashboards for the error counts.
  2. B. Create export tasks that copy the 14 log groups to S3, define Athena tables over the exported files, and query them to count the errors.
  3. C. Run one CloudWatch Logs Insights query over the 14 log groups for seven days, filtering errors and counting them by function and type.
  4. D. Turn on AWS X-Ray tracing for the 14 functions, and read each trace to count the errors across the seven days.
Show the answer and explanation

Answer: C

  • A. Wrong: OpenSearch works for ongoing search, but building a domain and subscriptions for a one-time investigation is more work and cost than the team needs. The option also creates a new data store, which the team wants to avoid.
  • B. Wrong: Exports can cover the past seven days, but each log group needs its own export task, and the team must then define tables over the files. The option adds a new data store and several steps that a one-time investigation does not need.
  • C. Right: Correct. Logs Insights can query several log groups in one query over a chosen time range, and its stats command counts matches by field. The result shows error counts by function and type in the console, with no new store. Learn more: Analyzing log data with CloudWatch Logs Insights (opens in a new tab)
  • D. Wrong: X-Ray traces requests across services and does not give a log-wide count of error types over the week. Reading traces one by one is slow for this question.

Explanation

CloudWatch Logs Insights queries several log groups in a single query over a time range, and its aggregation commands count results by field. That answers the one-time question in the console without new infrastructure. OpenSearch, Athena exports and X-Ray take more setup or answer a different question.

Study

Keep practicing

Answer questions with a score at the end, or practice just this topic with the explanation after each one. No sign-up needed.

Want more on Monitoring and logging pipelines? The 5 full-length practice sets have 12 more Monitoring and logging pipelines questions, 325 in all, none of them in the free exam. One payment of $14.99, no subscription. See the practice sets