DOP-C02 Monitoring and Logging Practice Question
A DevOps engineer needs to centralize logs from multiple AWS accounts into a single CloudWatch Logs account. Which feature should be used?
⚠ Common exam trap
Many candidates confuse CloudWatch Logs Insights (a query tool) with the actual cross-account log forwarding mechanism, or they incorrectly assume that CloudTrail or Kinesis Data Firehose are the primary services for cross-account log centralization, when in fact the native CloudWatch Logs cross-account subscription is the correct, managed solution.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
CloudWatch Logs cross-account subscription
CloudWatch Logs cross-account subscription (Option D) allows you to stream log data from multiple source AWS accounts to a single destination account's CloudWatch Logs log group. This is the native, managed feature designed specifically for centralizing logs across accounts without needing additional infrastructure or data transformation.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
CloudWatch Logs Insights
Why it's wrong here
CloudWatch Logs Insights is an interactive query engine for analyzing log data that already resides in CloudWatch Logs; it does not ingest, forward, or aggregate logs from external accounts. Its purpose is to search and visualize patterns within existing log groups, so it cannot centralize logs from multiple AWS accounts into a single destination. This makes it wrong because it addresses post-collection analysis, not cross-account log delivery.
- ✗
AWS CloudTrail
Why it's wrong here
AWS CloudTrail records API activity and management events across accounts and delivers those audit logs to an S3 bucket or CloudWatch Logs in the same account, but it does not aggregate arbitrary application, OS, or custom logs from CloudWatch Logs in other accounts. Its scope is limited to CloudTrail's own event data, not general log streams. Therefore, it is unsuitable for centralizing heterogeneous logs from multiple AWS accounts.
- ✗
Amazon Kinesis Data Firehose
Why it's wrong here
Amazon Kinesis Data Firehose is a streaming data delivery service that can capture and load records to destinations like S3, Redshift, or Splunk, but using it for cross-account CloudWatch Logs aggregation requires building a pipeline with a CloudWatch Logs subscription filter, a destination policy, and an intermediary stream. It is a supporting component, not the native mechanism for subscribing and forwarding log groups across accounts. The primary feature designed for this exact use case is CloudWatch Logs cross-account subscription, so Firehose is not the correct answer.
- ✓
CloudWatch Logs cross-account subscription
Why this is correct
CloudWatch Logs cross-account subscription allows a central (destination) account to create a destination policy and use subscription filters in source accounts to forward log events in real time to a central log group or a Kinesis Data Streams/Firehose pipeline. This feature natively supports aggregating logs from multiple AWS accounts into a single location, providing centralized monitoring and analysis. It directly meets the requirement to centralize logs from multiple AWS accounts, making it the correct choice.
Go deeper
Related to this question
About these practice questions
Courseiva writes every DOP-C02 question from scratch — 1,298 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DOP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DOP-C02 exam.