Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

Sysops > Monitoring > Flashcards

Monitoring Flashcards

1
Q

Differences between the CloudWatch applications? (Logs, Alarms, Events)

A

Logs: cotains log files, can set alarm and react to changes in AWS resources - can be viewed in real time
Alarms: Monitors a single metric and perfoms actions of it
Events: near real time stream of system events

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is free of charge in monitoring?

A 
3 Dashboards
Basic monitoring for EC2 instances
Metrics for EBS, ELB and RDS
50 metrics, 10 alarms 1 mio. API requests
5min Refresh Rate
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Is CloudWatch inter-regional?

A

Metrics are only available for one region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Ways to create custom metrics

A

PutMetricData API
monitoring scripts for Win. / Linux
Applications from the AWS Partner Network

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How is the retention for the metrics (outside of Cloudwatch Logs)

A

1 min for 15 days
5 min for 63 days
1 hr for 455 days

Metrics cannot be deleted - they expire after 15month if no data is incoming

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are the reasons for a system status checks to fail?

A

Loss of network connectivity
Loss of system power
Software issues of host system
Hardware issues of the host

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are the reasons for instance status failures?

A 
Network configuration issues
Incorrect configurations of the OS
Exhausted memory
Corrupt file system
Kernel issues
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the purpose of CloudWatch Alarms?

A

Initiate automatic action in response to a predefined condition of a single metric

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are the status of CloudWatch Alarms?

A

OK
ALARM
INSUFFICIENT_DATA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

When are events created?

A

Change in AWS resource status (for example EC2 instance stopping)
Events sent by CloudTrail, user login e.g.
Issued by a scheduled (cron) basis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is the Cost Explorer?

A

Review of the costs of the last 13 month and a forecast of the next 3
It also generates detailed CSV reports

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How are inter-regional Trails managed?

A

All trails are applied to all regions by default, but it is not one trail but a copy to all regions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What can be done with AWS Config?

A

Create snapshot of current environments
Historical configurations
Notifications then resources change
See relations between resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What is the maximum number of months of history that AWS Cost Explorer displays?

A

13 months

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the basic metrics of EC2?

A

CPUCreditBalace
CPUUtilization
Network In / Network Out

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are the basic metrics of EBS?

A

Volume IdleTime
V. ReadBytes / ReadOps
V WriteByte / WriteOps

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What are the basic metrics of an ALB?

A 
Active Connections
Rejected Connections
(Un)HealthyHostCounts
Status Codes
RequestCounts
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What are the basic metrics of RDS?

A

CPUUtilization
ReadIOPS / WriteIOPS
Free Space
Active DB Connections

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What is the definition of a custom metric?

A
  • Anything generated inside the OS
  • Coming from outside the resources - as long as it has access to the CloudWatch Service API
  • Application Metrics like RAM or Disk Space
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is needed to push custom metrics?

A

CloudWatch Agent or scripts/SDK

Appropriate IAM access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What action should be taken if an EC2 instance (behind a ASG) is in an alarm state?

A

Terminate the instance - the auto scaling group will boot another one

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What are the EBS Volume Status Checks? (non prov. IOPS)

A

oka
warning
impared
insufficient-data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What are (some) RDS status checks?

A 
Available
Backing Up
Creating / Deleting
Failed
Mainenance
Rebooting
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Which arichtectural choice improve network performance?

A

Single AZ
Placement Groups
Enhances Networking
Keeping Traffic in the VPC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

What can be performance bottlenecks and how to get notified?

A 
Undersized NAT instances
Undersized RDS instances
Undersized EC2 instances
Old EC2 instance types
Underprovisioned EBS volumes
Static assets from EC2

The Trusted Advisor report can locate bottlenecks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

List Cloud Watch Event Targets

A 
SNS Topics
EC2 Instances
Lambda functions
Kinesis Data Streams
ECS tasks
System Manager commands
AWS Batch jobs
CodePipeline for deployments
Inspector for assessments
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What services have built-in CloudWatch Log support? (Store the logs in CW)

A

Route53
CloudTrail
Lambda
API Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What are services for CloudWatch Logs Custom Sources?

A

EC2 Applications
On-Premis Service
Other cloud resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

What are the steps to install the CloudWatch Logs Agent

A

Single command install
Configure configureation file
Take and push the Metric

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What are the options to automate the install of the CloudWatch Logs Agent?

A

Include in AMI
Include in EC2 user-data
Include in configuration management tool like Ansible or Chef
Via the AWS Systems Manager Agent command

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

What services log in S3 Buckets

A

S3
CloudFront
ELB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

In what logs can CloudTrail put its logs?

A

Logs in S3 and CloudWatch Logs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

What are the intervals for tracking metrics in Cloudwatch?

A

5min for basic

1min for details

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

What are the host level metrics tracked in Cloudwatch?

A

CPU
Network
Disk
Status Checks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

What the general difference between basic and custom metric?

A

basis: AWS has knowledge
custom: AWS has no knowledge

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

How long are metrics kept in CLoudWatch Logs?

A

Indefinitely or a custom duration

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What are ELB access logs?

A

Optional loggin for load balancers. Stores logging information in S3.
Captures IP, latency, requests and Server response.

It can be used for example to trace requests to ec2 instances that have been terminated in the meantime.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

What should be monitored for ElastiCache?

A

CPU Utilization
Evictions
Swap Usage
Concurrent Connections

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

How to create a CloudWatch dashboard across regions?

A

Just create it in one region, it will be available in other regions as well (with the data from the region the widget is created from)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

What is the purpose of AWS Organizations?

A
  • Manage policies across accounts
  • Control access to Services (Using SCPs)
  • Account management (Creation and Managing)
  • Consolidate Billing
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

What has precedence: an SCP or IAM policy?

A

A deny in an SCP will overrule an allow in an IAM Policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

What is the tree structure of AWS Organizations?

A

Root
Organizational Unit(s)
AWS Accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

What are Resource Groups?

A

AWS Service to group resources based on tags.

Those can be used for example to automate / bulk tasks with the AWS System Manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

What are Cost Allocations Tags and how to use them?

A

You can select the Tags that are relevant for Billing such as Department or Team.
These can be used in the Cost Explorer and Billing/Cost Management Console

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
45
Q

What are the three parts of configurations in AWS Config?

A

Configuration Items: Point in time attributes
Configuration Snapshots: Collection of the Items
Configuration Streams: Stream of Item changes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
46
Q

Is AWS Config inter-regional?

A

No, every region has its own data

But you can aggregate the resgions/accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
47
Q

AWS Config: What are compliance checks and how to use them?

A

Config can check against a set of rules (about 40), for example, if unrestricted ssh access is allowed somewhere.
The check can be triggered periodically or when a configuration has changed.
To enable AWS config to do these checks it needs a role with read access to the resources and write access to S3 and SNS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
48
Q

Where can you find the Service Health Dashboard?

A

status.aws.amazon.com

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
49
Q

What is the Personal Health Dashboard?

A

Global Dashboard to indicate how problems in AWS would affect services in the own account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
50
Q

What is needed for metrics to be tracked on On-Premise servers?

A

SSM agent

CloudWatch agent

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
51
Q

What is the AWS FlowLog?

A
  • All VPCs monitored must be in the same account
  • Not monitored: Metadata, DHCP, traffic to reserved IPs
  • Data logged in CloudWatch (FlowLog needs permission to write)
  • Can be streamed to Lambda or ElasticSearch
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
52
Q

What are AWS Config Rules?

A

Checks for (non) compliant settings in services, for example open SSH ports in Security Groups or cloudtrail being enabled

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
53
Q

Does AWS Config span multiple regions?

A

No, they need to be configured separately

or include global services like S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
54
Q

How are logs from AWS Config stored?

A

In a S3 bucket (same or different account)

[BUCKET]/[OPTIONAL PREFIX]/AWSlogs/[ID]/config/[REGION]

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
55
Q

How to get notified when a AWS Config rule is broken?

A

Create and subscribe to an SNS topic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
56
Q

What permissions are needed for AWS Config to work?

A

Config needs a role that has read-only access to the ressources and write access to the S3 bucket

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
57
Q

What are the (two) trigger types in AWS Config?

A

Perioc (duration can be set - per default 24h)
on configuration change

NOTE: some rules cannot be set to on or both of the trigggers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
58
Q

How to install the CloudWatch Logging Agent?

A

1) Create a role and attach it to the instance
2) Download and install the agent on the instance
3) Configure and start the agent

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
59
Q

How can a second account assume a role in another account?

A
  • Create the role in the primary account

- In the secondary account create a policy with the action sts:AssumeRole and link the first role as the Resource

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
60
Q

What are S3 Access Logs?

A

Logs events made for the buckets and its objects.

Not enabled per default.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
61
Q

What is the standard bucket name strucutre for CloudFront Logs?

A

[bucketname].s3.amazonaws.com/[optionalprefix]/[distributionid]/[YYY-MM-DD-HH].[uniqueid].gz

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
62
Q

What are the limitations of VPC Flow Logs?

A
  • You can only see VPC from your own account (if peered)

- Flow logs cannot be edited after creation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
63
Q

Which traffic is not caputed by the Flow Logs?

A
  • DHCP
  • Amazon DNS Servers
  • Router
  • Metadata IPs (169.254.169.254/.123)
  • Activation Servers
  • Traffic between Network Load Balancer Interface and Endpoint Network Interface
64
Q

Is the CloudWatch alarm for estimated charges limited to one Region?

A

No, it says US-East, but is summed up for alle regions

65
Q

What are Cost Allocation Tags?

A

Selection of tags that are used for cost reporting.

Needs to be enabled first, then the tags can be selected.

66
Q

How can Tags be used for security?

A

Tags can be used in IAM policies to ensure a resource has the needed tag

67
Q

What are Resource Groups?

A

A group of resources based on one or many tag (and value) combinations.
Can be used in IAM, since after creation a ARN is present.

68
Q

Does AWS Config span regions?

A

No, the settings must be done for every region that config will be used

69
Q

Inspector: With which service does AWS Inspector work with?

70
Q

CloudWatch: What is a composite alarm?

A

Alarm states of other alarms that you have created. The composite alarm goes into ALARM state only if all conditions of the rule are met.

71
Q

CloudWatch: What are Periods, Evaluation Periods and Datapoints to Alarm?

A

Period: Duration that will be checked
Evaluation Period: umber of the most recent periods, or data points, to evaluate
Datapoints to Alarm: number of data points within the Evaluation Periods that must be breaching to cause the alarm to go to the ALARM state

72
Q

CloudWatch: How can missing data points be handled?

A

notBreaching – Missing data points are treated as “good” and within the threshold,

breaching – Missing data points are treated as “bad” and breaching the threshold

ignore – The current alarm state is maintained

missing – If all data points in the alarm evaluation range are missing, the alarm transitions to INSUFFICIENT_DATA.

73
Q

CloudWatch: Anomaly Detection

A

Mines past metric data and creates a model of expected values.
You can choose whether the alarm is triggered when the metric value is above the band of expected values, below the band, or either above or below the band.

74
Q

CloudWatch: What is necessary for CW to start, stop, terminate EC2 instances?

A

To set up a CloudWatch alarm action that can reboot, stop, or terminate an instance, you must use a service-linked IAM role, AWSServiceRoleForCloudWatchEvents.

The AWSServiceRoleForCloudWatchEvents IAM role enables AWS to perform alarm actions on your behalf.

75
Q

CloudWatch: How to recover an instance using CloudWatch?

A

When the StatusCheckFailed_System alarm is triggered, and the recover action is initiated, you will be notified by the Amazon SNS topic that you chose when you created the alarm and associated the recover action. During instance recovery, the instance is migrated during an instance reboot, and any data that is in-memory is lost.

The recover action can be used only with StatusCheckFailed_System, not with StatusCheckFailed_Instance.

It is not supported and does not work with instances with Instance Store volumes

76
Q

CloudWatch: What is a billing alert?

A

It is possible to set up an alarm in CW, that will sound when a given threshold is reached.

It triggers only when actual billing exceeds the threshold. It doesn’t use projections based on your usage so far in the month.

77
Q

CloudWatch: Can you use CW cross-account / cross-regional?

A

Yes, by sharing with single accounts or the entire organisation

78
Q

CloudWatch: What can be done with the CloudWatch Agent?

A
  • Collect more system-level metrics from Amazon EC2 instances
  • Send data from on-premise instances
  • Can be installed manually or wir the SSM
79
Q

CloudWatch: What are High Resolution Custom Metrics?

A

Allows push push data to the log down to 1 sec - therefore Alarms can be triggered down to 10sec.

80
Q

Trusted Advisor: What are the four categories that TA helps with?

A

Cost Optimization
Fault Tolerance
Performance
Security

81
Q

Trusted Advisor: How are the data refreshed?

A

Automatically after 24h hours

Manually every 5min for all or selected checks

82
Q

Trusted Advisor: What are the three types of results of a check?

A

No action necessary
Investigation recommended
Action recommended

83
Q

Inspector: What is the purpose of the AWS Inspector?

A

For EC2 Instances
Helps to identifiy security vulnerbilities based in hundreds of best pracitices
For it to work an agent has to be installed on the instance

84
Q

What is needed to get metrics from an ELB?

A

Nothing, AWS will automatically send metrics from an ELB

85
Q

What are ELB access logs?

A

Optional feature (disabled per default)

Will list:

  • IP address
  • Latency
  • Request path
  • Server response codes
86
Q

What is Request Tracing?

A

For requests coming to the ELB, AWS adds the X-Amzn-Trace-Id to the header, which can be used to analyze the traffic from the client to the system.

Needs the ALB (not NLB or Classic LB)

87
Q

If an instance has the tag name MyInstance and the tag Name AlsoMyInstance, which one will be shown the the Name column of the overview page?

A

AlsoMyInstance

Tags are case sensitive and the overview page listens to “Name”

88
Q

What are the two types of Resource Groups?

A

Tag based

CloudFormation stack based

89
Q

How to use Tags in the Cost Explorer?

A

(if organized in an Organisational Unit -> log in as root)
Select the Tags
Activate the Tags
Use Tag in the Explorer

90
Q

Which service does Systems Manager integrate with to give you visibility of the overall health of your AWS infrastructure?

A

CloudWatch

91
Q

By default, how frequently are ELB metrics published to CloudWatch?

A

If there are requests flowing through the load balancer, Elastic Load Balancing measures and sends its metrics in 60-second intervals. If there are no requests flowing through the load balancer or no data for a metric, the metric is not reported.

92
Q

CloudTrail: How long are the trails stored by default and where?

A

In a non visible S3 Bucket fpr 7 days.

If longer duration is needed an own bucket can be selected

93
Q

CloudTrail: What are digest files?

A

Hash value that verifies the integrity of the logs.

94
Q

Flow Log: What are the attributes in a log entry?

A 
version
account-id
interface-id
srcaddr
dstaddr
srcport
dstport
protocol
packets
bytes
start
end
action
log-status

First Source, then Destination (both for port and IP)

95
Q

Flow Log: Where can you send/save the data to?

A

Cloud Watch Logs

S3

96
Q

You would like to run a Lambda function at the same time every night. How could this be done?

A

Schedule an event in CloudWatch to trigger the function

97
Q

What is the use-case for AWS X-Ray?

A

X-Ray can be used for adding code tracing support for both monolithic application code (e.g. a large Django monolithic project) and serverless (Lambda function) code.

98
Q

Is it possible to use CloudWatch metrics to trigger auto-scaling based on SQS queue size?

A

yes

https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-using-sqs-queue.html

99
Q

What is Request Tracing?

A

Used by the load balancer, Request Tracing can be used to track HTTP requests from clients to targets.
Tracked with the X-Amzn-Trace-Id parameter in the header.

100
Q

CloudWatch Events:

What is the “target” and what services can be used?

A 
The target is the action that is taken place when the event occurs, such as:
calling a lambda function, 
sending an E-Mail with SNS
deploying Code or
activate a command in SSM
101
Q

What can be the destinations for a VPC Flow Log?

A

S3 or CloudWatch Log Group

102
Q

What are “units”?

A

Every metric has a unit, per default it is “none”

103
Q

What is Aggregation?

A

When there are multiple data points published at the same timestamp, namespace / dimension AWS aggregates them for better visibility.
Only available for detailed monitoring and not across regions

104
Q

How to get the status of all instances (cli)

A

aws ec2 describe-instance-status

105
Q

CloudWatch: How to allow a user to only access certain EC2 instances to monitor

A

This is not possible

106
Q

What are the (three) conditions, when an alarm is triggered?

A
  • Reached a particular value
  • stays over a threshold for a consecutive times
  • stays on a consistent value multiple periods
107
Q

What happens for Auto Scaling Groups / SNS when an alarm is triggered?

A

ASG: Will fire the event every time until the alarm is gone
SNS: Will only fire once

108
Q

ElastiCache: What should be done if CPUUtilization is high?

A

Memcached: implement larger instance type or add more nodes
Redis: Add read replicas

109
Q

ElastiCache: What should be done if the SwapUsage goes over 50mb?

A

Memached: Increase ConnectionOverhead
Redis: no recommendations atm

110
Q

ElastiCache: What should be done if data is evicted?

A

Memcached: Scale up cluster or add nodes
Redis: Scale up cluster

111
Q

ELB: What is the metric to track (un)healthy hosts?

A

HealthyHostCount

112
Q

ELB: What are the SpilloverCount and the SurgeQueueLength?

A

SpilloverCount: Dropped requests because the surge queue is full
SurgeQueueLength: Count of requests that can wait to be handled

113
Q

CloudWatch Events: When are events created? (four)

A
  • AWS resource changed (instance stopped e.g.)
  • Events from CloudTrail (failed login attempt)
  • Code from applications that should be processed in CW Events
  • On a scheduled basis
114
Q

CloudWatch Events: What can be done to have a recurring Event-Check done?

A

Set up a scheduled (cron like) event

115
Q

CloudWatch Logs: What is a Log Group?

A

Stream of data from multiple resources, such as a group of EC2 instances

116
Q

CloudWatch Logs: What is the Retention Policy?

A

How long events are kept in the logs.

From 1 day to 10years (option to keep them always)

117
Q

What service can monitor costs and how to alert the customer?

A

Costs can be monitored with CloudsWatch in a billing alert, which can send a notification when the usage exceeds the limit.
Billing alerts can be created in the AWS Billing and Cost Management console

118
Q

How to encrypt CloudTrail log files?

A

By default they are encrypted

119
Q

Config: How to set up a custom rule?

A

The check will be created in AWS Config and will run as a custom Lambda function on change or in periodic intervals.

120
Q

CloudWatch Events: What are the three components?

A

Events, Rules and Targets

121
Q

What command can you type into the Amazon CLI to retrieve the Amazon EC2 instance namespace?

A

aws cloudwatch list-metrics –namespace AWS/EC2.

122
Q

CloudWatch: How can you access Amazon CloudWatch? (four)

A

Amazon CloudWatch Console
AWS CLI
CloudWatch API
AWS SDK

123
Q

CloudWatch: How many Alarms can you have in a region?

124
Q

CloudWatch: What are:

  • Data Point
  • Data Points to Alarm
  • Evaluation Points
  • Evaluation interval
A

Data Points: Metric to be checked
DP to Alarm: How many checks in on interval should be failed in order to raise the alarm (3 e.g)
Evaluation Point: How often should be checked (1min e.g.)
Evaluation interval: How long in total should be checked? (5min e.g.)

125
Q

CloudWatch: What is a namespace in Amazon CloudWatch?

A

A logical grouping of Amazon CloudWatch metrics

126
Q

CloudWatch: What are the supported Linux Distributions for the CLoudwatch Agent?

A

Amazon Linux
Ubuntu
Red Hat
Debian

127
Q

CloudWatch: What (two) types of logs can be send from a Windows Server?

A

IIS Logs

System Logs

128
Q

CloudWatch: How to install the CW Agent on a Windows 2016 Server?

A

Via the Systems Manager

The EC2 Config Service does not exist anymore.

129
Q

CloudWatch: How is data encrypted?

A

Log data is encrypted in transit and at rest within Amazon CloudWatch. This requires
no special configuration on the part of a system administrator

130
Q

Is there a way to create reports with billing data

by usage, or the cost per individual log group?

A

Yes, using “detailed billing”

131
Q

How many tags can you have in an Amazon CloudWatch log group?

132
Q

CloudWatch: How would you enable / disable Amazon CloudWatch detailed monitoring via the AWS CLI?

A

aws ec2 monitor-instances –instance-ids

aws ec2 unmonitor-instances –instance-ids

133
Q

CloudWatch: How to get the total number of metrics tracked in a span of time?

A

SampleCount can give you the total number of metrics that are being used in a
statistical calculation. This can be helpful if you are trying to determine sample size

134
Q

CloudWatch: Which two steps are necessary to be able to aggregate statistics across multiple instances?

A
  • Enable detailed monitoring.

- Choose the Amazon EC2 namespace and select Across All Instances.

135
Q

How to get alerted when the use of resources goes out of AWS Free Tier?

A

Set up an AWS Free Tier alert in AWS Budgets

136
Q

Where should you create an alarm for a failed Amazon EC2 status check failure?

A

Amazon EC2 Console

137
Q

Amazon EC2 Console: For what metrics can you use High - Resolution metrics?

A

Custom Metrics (not pre-built metrics)

138
Q

CloudTrail: How to automatically push the calls to new regions? (two)

A
  • Select Yes to apply to all regions in the trail configuration page.
  • In the CLI, you set the parameter IsMultiRegionTrail to True.
139
Q

CloudTrail: Your boss wants you to create two separate trails in Amazon CloudWatch, one for
management and one for data.
Is this possible?

A

Yes, you can create two separate trails and separate management activity from data
activity.

140
Q

Config: What are the periodic steps you can set up?

A

You can set periodic rules to run every 1, 3, 6, 12, or 24 hours

141
Q

. Which account is used in AWS Organizations to create an organization, invite new AWS
accounts, and remove AWS accounts?

142
Q

How can you get access to all of the checks within AWS Trusted Advisor?

A

Upgrade to Business-level support or

Upgrade to Enterprise-level support.

143
Q

Trusted Advisor continuously alerts on one of your resources.
Ensure that AWS Trusted Advisor no longer alerts on that resource. How can you
accomplish this?

A

Add an exclusion for reporting the resource at the resource level.

144
Q

Inspector: What type of software can be checked by inspector?

A

Amazon Inspector can only find applications installed by the operating system’s
package manager. It can’t find applications installed by automation software like Chef,
Puppet. or Ansible

145
Q

Inspector: What are the two report types?

A

Findings Report

Full Report

146
Q

What is the purpose of AWS GuardDuty?

A

Amazon GuardDuty allows you to monitor for threats by analyzing AWS CloudTrail
events, VPC Flow Logs, and DNS logs

147
Q

Which AWS services classifies data in S3 and catalogs the normal behaviors from users
who are accessing that data?

A

Amazon Macie

148
Q

Guard Duty: How long are findings stored?

149
Q

With which tool can you query logs using regex?

A

Amazon CloudWatch Logs Insights

150
Q

Which tool allows to display metric charts on a website or third party tool?

A

Amazon CloudWatch snapshot graphs

151
Q

What ist needed for the Run Command in AWS Systems Manager?

Open Ports / Remote Access?

A

Open Ports

152
Q

What ist needed for the Session Manager AWS Systems Manager?

Open Ports / Remote Access?

A

Session Manager within AWS Systems Manager allows remote console sessions via an
interactive web browser with no need to open inbound ports or use bastion hosts to access
your systems

153
Q

What are the editions for QuickSight and how are they billed?

A
  • Pay-per-session
  • Enterprise and Standard
    The Enterprise
    Edition will support Active Directory groups from AWS Directory Service.
    The Standard
    edition allows you to invite IAM users, or users directly with an email address.
154
Q

What is a benefit provided by Amazon Macie?

A

Visibility into the locations where you store data

155
Q

You want to use CloudWatch to find the average CPU utilization for an instance over
a 30-minute period. The metric is updated every 5 minutes. Which statistic and period
should you use?

A

The Average statistic with a 30-minute period

Sysops (14 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions