Question 1

A security team is investigating a potential breach. They need to analyze VPC Flow Logs, AWS CloudTrail logs, and Amazon Route 53 DNS logs across 50 AWS accounts. The logs are currently stored in a centralized Amazon S3 bucket in a dedicated Security account. The team needs to query this massive dataset using standard SQL without provisioning any infrastructure. Which service should they use?

Accepted Answer

Identify the serverless SQL query engine for data stored in S3.

Question 2

What mistakes do candidates make on this AWS SAP-C02 question?

Accepted Answer

Choosing OpenSearch, which requires cluster provisioning and uses a different query language (DSL) rather than standard SQL.

How to approach this question

Full Answer

Common mistakes

Practice the full AWS Solutions Architect Professional SAP-C02 Practice Exam 5

More questions from this exam