DOP-C02 Question 108

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A2

  This solution ensures the least amount of downtime for CloudTrail log deliveries when auto-remediating CloudTrail being turned off. Here's why: Event-Driven Automation: By creating an Amazon EventBridge rule for the CloudTrail StopLogging event, the remediation process is triggered immediately when CloudTrail logging is stopped, minimizing the downtime. Targeted Remediation: The Lambda function uses the AWS SDK to call StartLogging on the specific CloudTrail trail ARN where the StopLogging event occurred. This targeted approach ensures that logging is re-enabled for the affected trail without impacting other trails or introducing unnecessary overhead. Low Latency: EventBridge rules and Lambda functions are designed to be highly responsive, ensuring that the remediation action is initiated with minimal delay after the StopLogging event occurs.

• Chose A1

  A. is correct Details are everything during an investigation

• 2

  A is correct: <The DevOps engineer needs a solution to auto-remediate CloudTrail being turned off> means we should turn on it again if we detect that it is turn-off. AWS config rule or Eventbridge would be considered. < the LEAST amount of downtime> means we should choose A because this minimizes downtime B: this option utilizes an AWS config rule, which is good. But it sets the rule with a periodic interval of 1 hours, which would introduce a lot of downtime C: this option utilizes evenbridge, but the event to trigger eventbridge is undetermined D: Should not use a custom script to do the task