Monitoring, logging and remediation
Practise only this domain. 86 questions with explanations, 20 at a time.
Start this domainSample questions
- EC2 instances in a fleet report CPU and network statistics to CloudWatch, but memory and disk utilization are missing. What is the standard way to publish those two metrics?Easy
- A security team wants to deploy one curated collection of AWS Config rules and remediations to many accounts and Regions at once. Which Config feature provides that bundle?Easy
- Compute Optimizer reports that several EC2 instances consistently use under 10 percent CPU and memory. Which recommendation category describes them?Easy
- A gp3 volume reaches its included 3,000 IOPS during nightly batch runs. Which change adds IOPS with the least disruption and lowest cost?Medium
- During a suspected scraping attack, the team wants a real-time ranking of the client IP addresses generating the most 4xx responses on an ALB. Which feature provides that ranking?Hard
- Compliance requires every S3 bucket to use SSE-KMS with a customer managed key. Buckets that do not meet the rule must be corrected automatically within minutes of creation, with an auditable record. Which design should be used?Hard
- An operations team wants one dashboard that shows metrics for workloads in us-east-1, eu-west-1, and ap-southeast-2. Is that possible with CloudWatch dashboards?Easy
- A team has no reliable idea of what normal request latency looks like across the day and does not want to hand-tune static thresholds. Which CloudWatch feature should it use?Medium
- An application runs in four Regions and the security team needs one place to query all of its logs. Which architecture avoids copying data between Regions?Medium
- A CloudWatch alarm is in the ALARM state, but nobody received the notification. What should you check?Easy
- A video transcoding service on EC2 should page the team only when two independent conditions hold together on one instance: CPU stays above 80 percent and outbound network throughput stays above a set level. Which CloudWatch capability should the engineer use to combine the two signals?Medium
- A fleet of Linux web servers reports only CPU and network numbers to CloudWatch by default. The team now needs memory consumption and root volume fullness graphed alongside those. What should they deploy?Easy
- A subscription filter sends CloudWatch Logs events to a Firehose delivery stream that writes to S3. The team needs to drop noisy records and reshape the rest before they are stored in S3. What should the team configure?Medium