Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS Cert > CloudWatch, CloudTrail, AWS Config > Flashcards

CloudWatch, CloudTrail, AWS Config Flashcards

1
Q

In CloudWatch, __________ is a variable to monitor (CPUUtilization, NetworkIn…)

A

Metric

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

In CloudWatch, __________ is an attribute of a metric (instance id, environment, etc…).

A

Dimension

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Up to ______ dimensions per metric

A

30

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Metrics have __________

A

timestamps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Can you define CloudWatch Log expiration policies?

A

YES
(never expire, 1 day to 10 years…)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

CloudWatch Logs can send logs to:

A
  • Amazon S3 (exports)
  • Kinesis Data Streams
  • Kinesis Data Firehose
  • AWS Lambda
  • OpenSearch
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Are CloudWatch logs encrypted by default?

A

YES

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

For CloudWatch logs, can you setup KMS-based encryption with your own keys

A

YEs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q
  • SDK, CloudWatch Logs Agent, CloudWatch Unified Agent
  • Elastic Beanstalk: collection of logs from application
  • ECS: collection from containers
  • AWS Lambda: collection from function logs
  • VPC Flow Logs:VPC specific logs
  • API Gateway
  • CloudTrail based on filter
  • Route53: Log DNS queries
A

CloudWatch Logs - Sources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How long can log data take to become available for export?

A

12 hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q
  • Search and analyze log data stored in CloudWatch Logs
  • Example: find a specific IP inside a log, count occurrences of “ERROR” in your logs…
  • Provides a purpose-built query language
    • Automatically discovers fields from AWS services and JSON log
      events
    • Fetch desired event fields, filter based on conditions, calculate
      aggregate statistics, sort events, limit number of events…
    • Can save queries and add them to CloudWatch Dashboards
  • Can query multiple Log Groups in different AWS accounts
  • It’s a query engine, not a real-time engine
A

CloudWatch Logs Insights

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

CloudWatch Logs S3 export is ________ near-real time or real-time

A

NOT

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q
  • Get a real-time log events from CloudWatch Logs for processing and analysis
A

CloudWatch Logs Subscriptions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Where can CloudWatch Logs Subscriptions Send to?

A

Kinesis Data Streams
Kinesis Data Firehose
Lambda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

filter which CloudWatch logs are events delivered to your destination

A

Subscription Filter

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Metrics exists only in the_________ in which they are created.

A

region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Metrics ___________ be deleted, but they automatically expire after __________ if no new data is published to them.

A

cannot
15 months

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Each metric data point must be marked with a ________

A

timestamp

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

The timestamp for a metric can be up to ________ in the past and up to _________ into the future.

A

two weeks
two hours

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

If you do not provide a timestamp, CloudWatch creates a timestamp for you based on ______________

A

the time the data point was received

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

By ___________, several services provide _______ metrics for resources. You can also enable _______________, or _____________

A

default
free
detailed monitoring
publish your own application metrics.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Enables you to query multiple CloudWatch metrics and use math expressions to create new time series based on these metrics.

A

Metric math

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

For EC2 metric: CloudWatch does not collect ____________ and ____________ metrics right from the get go. You need to install ___________ in your instances first to retrieve these metrics.

A

memory utilization
disk space usage
CloudWatch Agent

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

a name/value pair that uniquely identifies a metric.

A

Dimensions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

a custom metric can be classified as standard or high

A

Resolution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

2 types of CloudWatch Resolutions

A

Standard Resolution
High Resolution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q
  • Data with a granularity of one minute.
  • Default metrics produced by AWS services.
A

Standard Resolution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q
  • Data with a granularity of one second.
  • Provides more insight into your application’s sub-minute activity.
A

High Resolution

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

metric data aggregations over specified periods of time.

A

Statistics

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

A ________ is the length of time associated with a specific CloudWatch statistic. The default value is ________ seconds.

A

period
60

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

Each statistic has a ____________.

A

unit of measure

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Metric data points that specify a unit of measure are aggregated _______.

A

separately

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

You can specify a unit when you create a custom metric. If you do not specify a unit, CloudWatch uses __________ as the unit.

A

None

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

CloudWatch aggregates statistics according to ________ that you specify when retrieving statistics.

A

the period length

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

For large datasets, you can insert a pre-aggregated dataset called a ___________.

A

statistic set

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

6 CloudWatch Statics

A

Minimum
Maximum
Sum
Average
SampleCount
pNN.NN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

The lowest value observed during the specified period. You can use this value to determine low volumes of activity for your application.

A

Minimum

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

The highest value observed during the specified period. You can use this value to determine high volumes of activity for your application.

A

Maximum

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

All values submitted for the matching metric added together. Useful for determining the total volume of a metric.

A

Sum

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

The value of Sum / SampleCount during the specified period. By comparing this statistic with the Minimum and Maximum, you can determine the full scope of a metric and how close the average use is to the Minimum and Maximum. This comparison helps you to know when to increase or decrease your resources as needed.

A

Average

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

The count (number) of data points used for the statistical calculation.

A

SampleCount

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

The value of the specified percentile. You can specify any percentile, using up to two decimal places (for example, p95.45). Percentile statistics are not available for metrics that include any negative values.

A

pNN.NN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

indicates the relative standing of a value in a dataset. They help you get a better understanding of the distribution of your metric data.

A

Percentiles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

watches a single metric over a specified time period, and performs one or more specified actions, based on the value of the metric relative to a threshold over time.

A

Alarms

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

You can create an alarm for monitoring …….

A

CPU usage
load balancer latency
for managing instances
billing alarms.

45
Q

When an alarm is on a dashboard, it turns ______ when it is in the ALARM state.

A

red

46
Q

2 Alarm States

A

OK
Alarm
Insufficient_Data

47
Q

The metric or expression is within the defined threshold.

A

OK

48
Q

The metric or expression is outside of the defined threshold.

A

Alarm

49
Q

The alarm has just started, the metric is not available, or not enough data is available for the metric to determine the alarm state.

A

Insufficient_Data

50
Q

You can also monitor your estimated ________ by using Amazon CloudWatch Alarms.

A

AWS charges

51
Q

When you create an alarm, you specify three settings (3)

A

Period
Evaluation Period
Datapoints to Alarm

52
Q

is the length of time to evaluate the metric or expression to create each individual data point for an alarm. It is expressed in seconds.

A

Period

53
Q

is the number of the most recent periods, or data points, to evaluate when determining alarm state.

A

Evaluation Period

54
Q

is the number of data points within the evaluation period that must be breaching to cause the alarm to go to the ALARM state. The breaching data points do not have to be consecutive, they just must all be within the last number of data points equal to Evaluation Period.

A

Datapoints to Alarm

55
Q

For each alarm, you can specify CloudWatch to treat missing data points as any of the following …….. (4)

A

missing
notBreaching
breaching
ignore

56
Q

the alarm does not consider missing data points when evaluating whether to change state (default)

A

missing

57
Q

missing data points are treated as being within the threshold

A

notBreaching

58
Q

missing data points are treated as breaching the threshold

A

breaching

59
Q

the current alarm state is maintained

A

ignore

60
Q

Customizable home pages in the CloudWatch console that you can use to monitor your resources in a single view, even those spread across different regions.

A

CloudWatch Dashboard

61
Q

There is _______ on the number of CloudWatch dashboards you can create.

A

no limit

62
Q

All dashboards are ________ not region-specific.

A

Global

63
Q

Can you can your CloudWatch Dashboards with users who do not have direct access to your AWS account

A

YES

64
Q
  • Share a single dashboard and designate specific email addresses and passwords of the people who can view the dashboard.
  • Share a single dashboard publicly, so that anyone who has the link can view the dashboard.
  • Share all the CloudWatch dashboards in your account and specify a third-party SSO provider for dashboard access. All users who are members of this SSO provider’s list can access the dashboards in the account. To enable this, you integrate the SSO provider with Amazon Cognito.
A

Ways to share your CloudWatch Dashboard

65
Q

By default, will logs from your EC2 machine will go to CloudWatch

A

NO

66
Q

What do you need to run on EC2 to push the log files you want?

A

CloudWatch agent

67
Q

Can CloudWatch log agent can be setup on-premises???

A

YES

68
Q

2 types of CloudWatch Agents?

A

CloudWatch Logs Agent
CloudWatch Unified Agent

69
Q
  • Old version of the agent
  • Can only send to CloudWatch Logs
A

CloudWatch Logs Agent

70
Q
  • Collect additional system-level metrics such as RAM, processes, etc…
  • Collect logs to send to CloudWatch Logs
  • Centralized configuration using SSM Parameter Store
A

CloudWatch Unified Agent

71
Q

Collected directly on your Linux server / EC2 instance

A

CloudWatch Unified Agent

72
Q

CloudWatch Unified Agent – Metrics (6)

A
  • CPU (active, guest, idle, system, user, steal)
  • Disk metrics (free, used, total), Disk IO (writes, reads, bytes, iops)
  • RAM (free, inactive, used, total, cached)
  • Netstat (number of TCP and UDP connections, net packets, bytes)
  • Processes (total, dead, bloqued, idle, running, sleep)
  • Swap Space (free, used, used %)
73
Q

3 CloudWatch Alarm Targets

A
  • Stop,Terminate, Reboot, or Recover an EC2 Instance
  • Trigger Auto Scaling Action
  • Send notification to SNS (from which you can do pretty much anything)
74
Q

CloudWatch Alarms are on a ________ metric

A

single

75
Q

Composite Alarms are monitoring the states of _____________ alarms

A

multiple other

76
Q

Can alarms be created based on CloudWatch Logs Metrics Filters

A

YES

77
Q

Deliver near real-time stream of system events that describe changes in AWS resources.

A

Amazon EventBridge

78
Q

Events respond to these operational changes and take corrective action as necessary, by sending messages to respond to the environment, activating functions, making changes, and capturing state information.

A

Amazon EventBridge

79
Q

2 concepts of Amazon EventBridge

A

Events
Targets
Rules

80
Q

Amazon EventBridge - indicates a change in your AWS environment.

A

Events

81
Q

Amazon EventBridge – processes events.

A

Targets

82
Q

Amazon EventBridge – matches incoming events and routes them to targets for processing.

A

Rules

83
Q

Extends the capabilities of CloudWatch Events by enabling customers to connect data from their own apps and third-party SaaS apps, making it easier to connect applications.

A

Amazon EventBridge

84
Q

Schedule: Cron jobs (scheduled scripts)
Event Pattern: Event rules to react to a service doing something
Trigger Lambda functions, send SQS/SNS messages…

A

Amazon EventBridge (formerly CloudWatch Events)

85
Q

Allows you to generate code for your application, that will know in advance how data is structured in the event bus

A

Schema Registry

86
Q
  • Collect, aggregate, summarize metrics and logs
    from containers
  • Available for containers on…
    • Amazon Elastic Container Service (Amazon ECS)
    • Amazon Elastic Kubernetes Services (Amazon EKS)
    • Kubernetes platforms on EC2
    • Fargate (both for ECS and EKS)
  • In Amazon EKS and Kubernetes, it is using a containerized version of the CloudWatch Agent to discover containers
A

CloudWatch Container Insights

87
Q
  • Monitoring and troubleshooting solution for serverless applications running on AWS Lambda
  • Collects, aggregates, and summarizes system-level metrics including CPU time, memory, disk, and network
  • Collects, aggregates, and summarizes diagnostic information such as cold starts and Lambda worker shutdowns
  • it is provided as a Lambda Layer
A

CloudWatch Lambda Insights

88
Q
  • Analyze log data and create time series that display contributor data.
    • See metrics about the top-N contributors
    • The total number of unique contributors, and their usage.
  • This helps you find top talkers and understand who or what is impacting system performance.
  • Works for any AWS-generated logs (VPC, DNS, etc..)
  • For example, you can find bad hosts, identify the heaviest network users, or find the URLs that generate the most errors.
  • You can build your rules from scratch, or you can also use sample rules that AWS has created – leverages your CloudWatch Logs
  • CloudWatch also provides built-in rules that you can use to analyze metrics from other AWS services.
A

CloudWatch Contributor Insights

89
Q
  • Provides automated dashboards that show potential problems with monitored applications, to help isolate ongoing issues
  • Your applications run on Amazon EC2 Instances with select technologies only (Java, .NET, Microsoft IIS Web Server, databases…)
  • And you can use other AWS resources such as Amazon EBS, RDS, ELB, ASG, Lambda, SQS, DynamoDB, S3 bucket, ECS, EKS, SNS, API Gateway…
  • Powered by SageMaker
  • Enhanced visibility into your application health to reduce the time it will take
    you to troubleshoot and repair your applications
  • Findings and alerts are sent to Amazon EventBridge and SSM OpsCenter
A

CloudWatch Application Insights

90
Q
  • ECS, EKS, Kubernetes on EC2, Fargate, needs agent for Kubernetes
  • Metrics and logs
A

CloudWatch Container Insights

91
Q

Detailed metrics to troubleshoot serverless applications

A

CloudWatch Lambda Insights

92
Q

Find “Top-N” Contributors through CloudWatch Logs

A

CloudWatch Contributors Insights

93
Q

Automatic dashboard to troubleshoot your application and related AWS services

A

CloudWatch Application Insights

94
Q
  • Provides governance, compliance and audit for your AWS Account
  • Is enabled by default!
  • Get an history of events / API calls made within your AWS Account by:
    • Console
    • SDK
    • CLI
    • AWS Services
  • Can put logs into CloudWatch Logs or S3
  • It can be applied to All Regions (default) or a single Region.
  • If a resource is deleted in AWS, investigate this first!
A

AWS CloudTrail

95
Q
  • Operations that are performed on resources in your AWS account
  • Examples:
    • Configuring security (IAM AttachRolePolicy)
    • Configuring rules for routing data (Amazon EC2 CreateSubnet)
    • Setting up logging (AWS CloudTrail CreateTrail)
  • By default, trails are configured to log management events.
  • Can separate Read Events (that don’t modify resources) from Write Events (that may modify resources)
A

CloudTrail - Management Events

96
Q
  • By default, data events are not logged (because high volume operations)
  • Amazon S3 object-level activity (ex: GetObject, DeleteObject, PutObject): can separate Read and Write Events
  • AWS Lambda function execution activity (the Invoke API)
A

Data Events

97
Q

Enable this to detect unusual activity in your account:
* inaccurate resource provisioning
* hitting service limits
* Bursts of AWS IAM actions
* Gaps in periodic maintenance activity

A

CloudTrail Insights

98
Q

analyzes normal management events to create a baseline

A

CloudTrail Insights

99
Q

Continuously analyzes write events to detect unusual patterns
* Anomalies appear in the CloudTrail console
* Event is sent to Amazon S3
* An EventBridge event is generated (for automation needs)

A

CloudTrail Insights

100
Q

are stored for _________ in CloudTrail

A

90 days

101
Q

To keep CloudTrail Events beyond this period, log them to ________ and use ___________

A

S3
Athena

102
Q
  • Helps with auditing and recording compliance of your AWS resources
  • Helps record configurations and changes over time
A

AWS Config

103
Q

Questions that can be solved by AWS Config:

A
  • Is there unrestricted SSH access to my security groups?
  • Do my buckets have any public access?
  • How has my ALB configuration changed over time?
104
Q

AWS Config is a ________ service

A

per-region

105
Q

Can AWS Config be aggregated across regions and accounts?????

A

YES

106
Q
  • Performance monitoring (metrics, CPU, network, etc…) & dashboards
  • Events & Alerting
  • Log Aggregation & Analysis
A

CloudWatch

107
Q
  • Record API calls made within your Account by everyone
  • Can define trails for specific resources
  • Global Service
A

CloudTrail

108
Q
  • Record configuration changes
  • Evaluate resources against compliance rules
  • Get timeline of changes and compliance
A

Config

109
Q

For an Elastic Load Balancer -
* Monitoring Incoming connections metric
* Visualize error codes as % over time
* Make a dashboard to get an idea of your load balancer performance

A

Cloudwatch

110
Q

For an Elastic Load Balancer-
* Track security group rules for the Load Balancer
* Track configuration changes for the Load Balancer
* Ensure an SSL certificate is always assigned to the Load Balancer (compliance)

A

Config

111
Q

For an Elastic Load Balancer -
* Track who made any changes to the Load Balancer with API calls

A

CloudTrail

AWS Cert (16 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions