DOP-C02 Domain 4: Monitoring, Logging, and Incident Response

Two designs were proposed. Design A would create composite alarms to reduce noise. Design B would export logs to SIEM. The team must pick the approach aligned with vendor best practices. Which choice is correct?

Multiple choice — select one answer

Answer choices

  1. a. CloudTrail management events and CloudTrail Lake
  2. b. CloudWatch subscription filters to Kinesis/Firehose/OpenSearch
  3. c. CodePipeline + custom metrics to CloudWatch
  4. d. CloudWatch composite alarms

Architectural breakdown & explanation

Composite alarms combine child alarms logically. Compare with CloudWatch subscription filters to Kinesis/Firehose/OpenSearch: Streaming exports integrate with analytics/SIEM.

Correct answer(s): d. CloudWatch composite alarms

Exam domain: Domain 4: Monitoring, Logging, and Incident Response (18% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified DevOps Engineer – Professional bank. Run a full timed practice exam with domain-weighted random questions in your browser.