Management and Governance Services

Question 1

_________ provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services.

Answer 1

AWS CloudTrail

Question 2

CloudTrail inserts an audit trail in an ____________or into ______

Answer 2

S3 bucket

CloudWatch logs

Question 3

Provides metrics, logs, and alarms for infrastructure

Answer 3

Amazon CloudWatch

Question 4

Continually evaluates infrastructure against a set of rules

Answer 4

AWS Config

Question 5

Provides operational data and automation across infrastructure

Answer 5

AWS Systems Manager

Question 6

__________ allows for custom dashboards based on collected metrics.

Answer 6

Amazon CloudWatch

Question 7

____________ continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations.

Answer 7

AWS Config

Question 8

AWS Config provides specific ___________________ with rules for specific compliance standards.

Answer 8

conformance packs

Question 9

_________________ provides multiple tools that make it easier to manage your AWS infrastructure.

Answer 9

AWS Systems Manager

Question 10

_________ is a managed service for provisioning infrastructure based on templates. The templates can be written in ____________________ or _____________________.

Answer 10

AWS CloudFormation
YAML
JSON

Question 11

________ is a feature that enables you to find changes in your infrastructure after it was launched by CloudFormation.

Answer 11

Drift Detection

Question 12

AWS Control Tower​ - A service to create a ______________ environment on AWS that follows the recommended best practices in operational efficiency, security, and governance. It provides a way to create new AWS accounts based on ____________ .

Answer 12

multi-account

templates

Question 13

An operations engineer at a financial services company. He recently discovered that someone had disabled a security setting on a server. He is concerned that events like this might go unnoticed until a breach. Which service would allow the organization to continually track configuration of infrastructure?

Answer 13

AWS Config

Question 14

Lead architect at a SaaS company. They will be launching a new application that includes several components. He is looking to minimize manual work required when creating infrastructure. What service would enable James to automate much of this effort?

Answer 14

AWS CloudFormation

Question 15

CTO at a manufacturing company. A cloud server needed to support their manufacturing process was deleted. They want to make sure the follow up with the person who deleted this instance. Which service could show the individual that deleted this specific server?

Answer 15

AWS CloudTrail