Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS > CloudWatch and CloudTrail > Flashcards

CloudWatch and CloudTrail Flashcards

1
Q

Q: What is Amazon CloudWatch?

A

A: A monitoring and observability service that provides metrics, logs, and alarms for AWS resources and applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Q: What are CloudWatch metrics?

A

A: Time-ordered data points used to monitor AWS resources and applications, such as CPU utilization or request counts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Q: What are custom metrics in CloudWatch?

A

A: Metrics defined and published by users for monitoring application-specific data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Q: What are CloudWatch alarms?

A

A: Configurations that monitor CloudWatch metrics and trigger actions when thresholds are breached.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Q: What are CloudWatch Logs?

A

A: A service that collects, stores, and monitors logs from AWS resources, applications, and custom log sources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Q: What are log groups in CloudWatch?

A

A: Containers for log streams with shared retention, access policies, and metrics.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Q: What are log streams in CloudWatch?

A

A: Sequences of log events from the same source, such as an EC2 instance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Q: What is CloudWatch Logs Insights?

A

A: An interactive query service for analyzing CloudWatch Logs with SQL-like queries.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Q: What are CloudWatch dashboards?

A

A: Customizable visualizations of CloudWatch metrics and logs displayed in a single view.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Q: What are CloudWatch Events (EventBridge)?

A

A: A service that delivers near real-time notifications of system events and changes in AWS resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Q: What is the CloudWatch Agent?

A

A: A software agent that collects metrics and logs from on-premises and EC2 instances for CloudWatch.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Q: What is CloudWatch Synthetics?

A

A: A feature for monitoring APIs, URLs, and user workflows with canary testing to detect issues.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Q: What is CloudWatch ServiceLens?

A

A: A tool for monitoring application performance and dependencies by combining CloudWatch metrics, logs, and traces.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Q: What is CloudWatch Anomaly Detection?

A

A: A feature that uses machine learning to identify unusual metric behavior and detect anomalies.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Q: What is metric math in CloudWatch?

A

A: A feature for performing calculations on existing metrics to create new, derived metrics.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Q: What are the retention options for CloudWatch Logs?

A

A: Logs can be retained indefinitely or set to expire after a specific period (e.g., 1 day, 1 week, or 10 years).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Q: Which AWS services integrate with CloudWatch?

A

A: EC2, Lambda, RDS, S3, API Gateway, DynamoDB, ECS, EKS, and more.

18
Q

Q: What actions can CloudWatch alarms trigger?

A

A: Sending SNS notifications, executing Auto Scaling actions, or invoking Lambda functions.

19
Q

Q: What is a log subscription in CloudWatch?

A

A: A configuration that sends logs to destinations like Lambda, Kinesis, or Elasticsearch in real time.

20
Q

Q: How is CloudWatch pricing structured?

A

A: Based on metrics, dashboards, log storage, API requests, and log data ingestion and retrieval.

21
Q

Q: What is AWS CloudTrail?

A

A: A service that records API calls, console actions, and events in your AWS account for auditing and compliance.

22
Q

Q: What are the types of events in CloudTrail?

A

A: Management Events, Data Events, and Insights Events.

23
Q

Q: What are Management Events in CloudTrail?

A

A: Events that log management operations, such as creating or modifying resources (e.g., IAM roles, VPCs).

24
Q

Q: What are Data Events in CloudTrail?

A

A: Events that log resource-specific operations, such as S3 object access or Lambda function execution.

25
Q

Q: What are CloudTrail Insights Events?

A

A: Events that detect unusual activity in your account, such as spikes in API calls or unauthorized access attempts.

26
Q

Q: What is a trail in CloudTrail?

A

A: A configuration that delivers log files from CloudTrail to an S3 bucket for auditing and analysis.

27
Q

Q: What are cross-region trails in CloudTrail?

A

A: Trails that consolidate logs from multiple AWS regions into a single S3 bucket.

28
Q

Q: How does CloudTrail ensure log file integrity?

A

A: By using SHA-256 hash algorithms and digest files to verify the integrity of log files.

29
Q

Q: What is Event History in CloudTrail?

A

A: A feature that allows you to view the most recent 90 days of account activity through the AWS Management Console.

30
Q

Q: What does CloudTrail log for S3?

A

A: Events like bucket creation, object uploads, and changes to bucket policies.

31
Q

Q: How does CloudTrail integrate with AWS Config?

A

A: CloudTrail records actions that AWS Config uses to assess resource compliance.

32
Q

Q: How does CloudTrail log Lambda activity?

A

A: By recording API calls, such as CreateFunction, Invoke, or DeleteFunction.

33
Q

Q: How does CloudTrail help with compliance?

A

A: By providing detailed logs for audits, ensuring traceability of actions, and helping meet regulations like GDPR, SOC, and HIPAA.

34
Q

Q: How can you manage the retention of CloudTrail logs?

A

A: By configuring S3 lifecycle policies to archive or delete logs after a specific period.

35
Q

Q: What is the difference between CloudTrail and CloudWatch?

A

A: CloudTrail focuses on logging API calls and account activity, while CloudWatch monitors performance metrics and logs for operational insights.

36
Q

Q: What tools can analyze CloudTrail logs?

A

A: AWS Athena, Amazon S3 Select, CloudWatch Logs Insights, and third-party SIEM tools.

37
Q

Q: Where can CloudTrail logs be delivered?

A

A: To an S3 bucket, optionally with integration to CloudWatch Logs for real-time analysis.

38
Q

Q: Is AWS CloudTrail free?

A

A: The first trail in each region is free for management events. Additional trails or data events incur costs.

39
Q

Q: How can you use CloudTrail for multiple accounts?

A

A: By consolidating logs from multiple accounts in an AWS Organization to a single S3 bucket.

40
Q

Q: How does Trusted Advisor relate to CloudTrail?

A

A: Trusted Advisor recommends enabling CloudTrail for better auditing and compliance.

AWS (29 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions