DOP-C02 Incident and Event Response Practice Question
A company uses Amazon CloudFront to distribute content globally. Users in some regions report slow load times. The DevOps team wants to identify the geographic regions where performance is worst. Which tool should they use?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
CloudFront reports in the AWS Management Console
CloudFront reports in the AWS Management Console provide performance metrics (e.g., total requests, error rates, latency) broken down by geographic region, enabling the team to identify regions with worst performance. Option A is wrong: CloudWatch metrics for CloudFront are aggregated per distribution, not per region. Option B is wrong: CloudFront access logs in S3 record individual requests but do not aggregate performance by region. Option C is wrong: Amazon Route 53 latency records are used for DNS-based routing decisions, not for analyzing CloudFront performance.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Amazon CloudWatch Metrics for CloudFront
Why it's wrong here
CloudWatch metrics for CloudFront are published at the distribution level and can be aggregated by dimensions such as DistributionId and CacheBehavior, but they do not support a geographic or region dimension. As a result, you cannot view per-country or per-edge-location request rates, error rates, or latency from CloudWatch metrics, even though such data would be needed to assess global performance.
- ✗
CloudFront access logs in S3
Why it's wrong here
CloudFront access logs in S3 do contain fields like x-edge-location and country, so they technically capture geographic data. However, they are raw request logs that require building a custom analytics pipeline (e.g., Athena queries, log parsers) to aggregate and visualize performance by region, which is not a ready-made geographic performance report. Additionally, log delivery is best-effort, so missing or delayed entries can compromise the accuracy of a real-time global view.
- ✗
Amazon Route 53 latency records
Why it's wrong here
Amazon Route 53 latency-based routing uses network latency measurements between users and AWS regions to route traffic, but its purpose is to select the optimal endpoint at request time, not to analyze historical CloudFront performance. Route 53 does not expose a reporting dashboard or API that provides per-region CloudFront metrics such as latency, throughput, or error rates across a distribution. Thus, it is a routing control mechanism, not an observability tool.
- ✓
CloudFront reports in the AWS Management Console
Why this is correct
CloudFront reports in the AWS Management Console include a Geo Distribution report and viewer reports that break down requests, bytes served, and other metrics by country and by edge location. These built-in reports are pre-aggregated by AWS and displayed directly in the console, giving a quick geographic view of traffic patterns and performance without needing additional infrastructure or custom queries. They are the intended way to answer global distribution questions out of the box.
Quick reference
AWS S3 Storage Class Comparison
| Storage Class | Min Duration | Retrieval | Use Case |
|---|---|---|---|
| S3 Standard | None | Immediate | Frequently accessed data |
| S3 Standard-IA | 30 days | Immediate | Infrequent access, rapid retrieval |
| S3 One Zone-IA | 30 days | Immediate | Non-critical infrequent data |
| S3 Intelligent-Tiering | None | Immediate–hours | Unknown or changing access patterns |
| S3 Glacier Instant | 90 days | Milliseconds | Archive with instant retrieval |
| S3 Glacier Flexible | 90 days | Minutes–hours | Archive, flexible retrieval |
| S3 Glacier Deep Archive | 180 days | Hours | Long-term compliance archive |
Go deeper
Related to this question
About these practice questions
One of 1,013 original DOP-C02 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DOP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DOP-C02 exam.