AWS Certified CloudOps Engineer Associate SOA-C03 Practice Question
Your team operates a production Amazon EKS cluster that uses managed node groups. You must begin streaming application container logs and granular CPU, memory, disk, and network metrics for every pod to Amazon CloudWatch with minimal ongoing maintenance. You prefer an AWS-managed solution rather than hand-built agents. Which approach meets these requirements?
Add a user-data script to each node group that installs and starts the CloudWatch agent as a systemd service to collect host metrics and the /var/log/containers directory.
Deploy the Prometheus Operator and Grafana inside the cluster, then configure a community exporter to push scraped metrics to CloudWatch.
Enable Container Insights for the cluster by using the CloudWatch console or eksctl, which installs the AWS CloudWatch agent and Fluent Bit DaemonSets that forward metrics and logs to CloudWatch.
Turn on control-plane logging for the cluster so that the API server automatically emits all pod metrics and container log streams to CloudWatch Logs.
Enabling Container Insights for the EKS cluster is an AWS-managed feature that deploys the CloudWatch agent and Fluent Bit as DaemonSets. The agent sends detailed node, pod, and container metrics to CloudWatch, and Fluent Bit streams application logs to CloudWatch Logs. After the one-time enablement, updates to the agents are handled by AWS, so ongoing maintenance is minimal. The other options do not satisfy the stated constraints:
Control-plane logging only delivers API server logs; it does not provide container metrics or workload log files.
Prometheus and Grafana are self-managed and require ongoing patching and scaling, and a custom exporter would still need to be maintained.
Installing the CloudWatch agent through user-data captures host metrics but not container-level metrics and does not address log collection; it also leaves lifecycle management to the operations team.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are Amazon EKS managed node groups?
Open an interactive chat with Bash
What components are included in Container Insights for Amazon EKS?
Open an interactive chat with Bash
How does Fluent Bit work in the context of container log streaming?
Open an interactive chat with Bash
AWS Certified CloudOps Engineer Associate SOA-C03
Monitoring, Logging, Analysis, Remediation, and Performance Optimization
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .