Amazon SCS-C02 Exam - Topic 2 Question 51 Discussion

Actual exam question for Amazon's SCS-C02 exam

Question #: 51
Topic #: 2

[Logging and Monitoring]

A company hosts a web application on an Apache web server. The application runs on Amazon EC2 instances that are in an Auto Scaling group. The company configured the EC2 instances to send the Apache web server logs to an Amazon CloudWatch Logs group that the company has configured to expire after 1 year.

Recently, the company discovered in the Apache web server logs that a specific IP address is sending suspicious requests to the web application. A security engineer wants to analyze the past week of Apache web server logs to determine how many requests that the IP address sent and the corresponding URLs that the IP address requested.

What should the security engineer do to meet these requirements with the LEAST effort?

AExport the CloudWatch Logs group data to Amazon S3. Use Amazon Macie to query the logs for the specific IP address and the requested URLs.

BConfigure a CloudWatch Logs subscription to stream the log group to an Am-azon OpenSearch Service cluster. Use OpenSearch Service to analyze the logs for the specific IP address and the requested URLs.

CUse CloudWatch Logs Insights and a custom query syntax to analyze the CloudWatch logs for the specific IP address and the requested URLs.

DExport the CloudWatch Logs group data to Amazon S3. Use AWS Glue to crawl the S3 bucket for only the log entries that contain the specific IP ad-dress. Use AWS Glue to view the results.

Show Suggested Answer

Suggested Answer: C

by Augustine at Oct 13, 2025, 10:08 PM

Limited Time Offer

25%

Off

Get Premium SCS-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Madelyn

9 days ago

D sounds too complex for just a few logs.

upvoted 0 times

...

Carli

14 days ago

I feel like A is overcomplicating it. Just use Insights.

upvoted 0 times

...

Ruth

19 days ago

I agree, CloudWatch Logs Insights is straightforward.

upvoted 0 times

...

Quinn

24 days ago

I've used OpenSearch before, but it feels like overkill for this task.

upvoted 0 times

...

Josefa

30 days ago

Wait, does AWS Glue really work for this? Sounds complicated!

upvoted 0 times

...

Quentin

1 month ago

Not sure about that, exporting to S3 might give more flexibility.

upvoted 0 times

...

Ashley

1 month ago

Option C is the easiest way to analyze logs directly in CloudWatch.

upvoted 0 times

...

Georgene

2 months ago

Hmm, I wonder if the security engineer has a secret passion for data engineering. Maybe they just want an excuse to play with AWS Glue.

upvoted 0 times

...

Jeffrey

2 months ago

I'm with you guys. CloudWatch Logs Insights is the way to go here. Gotta love when the most efficient option is also the easiest.

upvoted 0 times

...

Vivan

2 months ago

Haha, I bet the security engineer is just itching to use some fancy new AWS service. But sometimes the simple solution is the best.

upvoted 0 times

...

Jennifer

2 months ago

Agreed, CloudWatch Logs Insights is a pretty straightforward tool for this kind of analysis. Saves a lot of time and effort.

upvoted 0 times

...

Cherri

2 months ago

Option C seems like the easiest way to go. No need to mess with exporting logs or setting up additional services.

upvoted 0 times

...

Gearldine

2 months ago

I think option C is the best. Quick and easy.

upvoted 0 times

...

Tabetha

3 months ago

I think option C is the way to go. CloudWatch Logs Insights seems like the simplest and most efficient way to analyze the logs for the specific IP address and requested URLs. As long as I can craft the right custom query, I should be able to get the information I need quickly.

upvoted 0 times

...

Kristofer

3 months ago

Option B could be good too, but more setup needed.

upvoted 0 times

...

Katina

3 months ago

I agree, using CloudWatch Logs Insights saves time!

upvoted 0 times

...

Galen

3 months ago

Hmm, I'm not super familiar with CloudWatch Logs Insights, so I'm not sure if that's the best approach. Exporting to S3 and using Glue or Macie might give me more flexibility, even if it's a bit more work upfront. I'll need to weigh the pros and cons of each option.

upvoted 0 times

...

Kiera

4 months ago

Option C with CloudWatch Logs Insights is definitely the way to go here. It's the most direct approach and should let me get the information I need with the least effort. I'll make sure to craft a good custom query to pull out the relevant data.

upvoted 0 times

...

Pearlie

4 months ago

I'm a bit confused by the different options here. Exporting the logs to S3 and then using Macie or Glue seems like a lot of extra work when CloudWatch Logs Insights is an option. I'll need to read through the question more carefully to understand the tradeoffs.

upvoted 0 times

...

Isadora

4 months ago

This looks like a straightforward logging and monitoring question. I'd probably go with option C - CloudWatch Logs Insights seems like the easiest way to analyze the logs without having to export or process them elsewhere.

upvoted 0 times