Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS SysOps Questions > Monitoring and Reporting > Flashcards

Monitoring and Reporting Flashcards

1
Q

How many CLOUDWATCH alarm metrics can a single region has?

A

5000

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

To trigger CloudWatch alarm after 4 failed evaluations of metrics in 5-minute period. What value to set for ‘evaluation period’ and ‘data points’?

A

Evaluation period = 1 minute
Data Points = 4

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How long are the following interval CloudWatch metrics saved?
1-minute intervals,
5-minute intervals,
1-hour intervals

A

1 minute = 15 days,
5 minutes = 63 days,
1 hour = 455 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What is the namespace for an ALB?

A

AWS/ApplicationELB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Name the two types of health check for EC2 instances.

A

System status check,
Instance status check

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What is the CLI command to check status of EC2 instance?

A

aws ec2 describe-instance-status

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What Type of Cloudwatch monitoring provides metrics every 5 minutes?

A

Basic Monitoring

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What AWS solution allows you to store all log files from on-premises and AWS systems in one place and allow CloudWatch to monitor them?

A

Amazon CloudWatch Logs.
(not S3!)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What versions of Unix and Linux are supported with CloudWatch Logs agent?

A

Solaris is NOT supported!

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What do you know about updating CloudWatch Logs agent in REDHAT?

What do you know about updating CloudWatch Logs agent in REDHAT?

A

Updating via RPM could change configurations and cause configuration issues.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is EC2Config?

A

The old version of Systems Manager SSM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How to configure encryption for CloudWatch Logs?

A

No special settings requires. Logs are encrypted at rest and in-transit.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is the CLI command to use CloudWatch to monitor/unmonitor instances?

A

aws ec2 monitor-instances –…
aws ec2 unmonitor-instances –…

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are ways to filter which statistics to view in CloudWatch?

A

By specific Instance,
By ASG,
By AMI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What alarm action in CloudWatch can be use to recover EC2 instances?

A

Set the alarm action to “RECOVER” the instance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which Service allows you to set free tier alert?

A

AWS Budgets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

How to enable billing-alerts?

A

Only the “root” user can enable billing alerts.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What status is given to failed EC2 health checks?

A

IMPAIRED

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How can you view the status check for EC2 instances?

A

Via EC2 Console or via CLI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Where should you create an alarm for a failed EC2 status check failure?

A

In the EC2 Console.
Status check alarms cannot be done in CloudWatch!

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What service to use in order to get a personalized view of all services?

A

Personal Health Dashboard

22
Q

How to give permissions to a specific set of EC2 instances?

A

That is not possible . IAM does not give permissions to specific resources.

23
Q

What can be used to authenticate CloudWatch Logs agent instead of username and password?

A

Access Keys or IAM roles.
You cannot use IAM.

24
Q

How to delete CloudWatch Metrics?

A

Not possible , not even with the user account.

25
Q

High resolutions metrics:
1. Can it be applied on all metrics?
2. How to set it?
3. Does it cost more than Standard resolution?

A
  1. Can only be applied to custom-metrics.
  2. Use PutMetricRequest API. Set ‘StorageResolution’ field.
  3. It costs the same.
26
Q

How to ensure that I see the word ‘error’ in CloudWatch logs?

A

Use metric filters

27
Q

How to parse log data to find account numbers by using Regex expression?

A

Kinesis

28
Q

Is it possible to create CloudWatch alarm for under a minute?

A

Yes for custom metrics. Use high-resolution alarm.

29
Q

What configuration is required to enable logging of API calls in CloudTrail?

A

By default CloudTrail is enabled and logging basic API calls. For ‘All’ API calls, it is necessary to configure a ‘trail’.

30
Q

Can we put management and data traffic in separate CloudTrail trails?

A

Yes, we can create up to 5 trails.

31
Q

How to encrypt CloudTrail logs and control access?

A

They are Encrypted by default (SSE-S3).
Use Bucket Policies or IAM to control access

32
Q

How to prevent Accidental deletions?

A

MFA

33
Q

When will API calls show up in CloudTrail S3 logs?

A

After 15 minutes.
There is no way to change this.

34
Q

If a Critical app suffered an outage. How can we know who made what change?

A

AWS Config to view config. history,
CloudTrail to see who made the change.

35
Q

How to combine results of AWS Config under one region?

A

Instead of creating an aggregator in Organisations, we can create in a region.

36
Q

How to enable AWS Config for multiple regions?

A

Enable it in each region.

37
Q

What is required after setting up Config and creating an aggregator?

A

Authorize the aggregator account in each AWS account.

38
Q

When are AWS Config notifications sent if a resource is reported as non-complaint?

A

When the status changes.

39
Q

Which AWS account is used to create an organization?

A

master account (not root!)

40
Q

What is the best service to monitor the overall services posture?

A

AWS Inspector

41
Q

How to create a report against CIS benchmarks?

A

Use AWS Inspector to run assessment template containing the CIS rules!

42
Q

Service to identify threats by analyzing flow logs, DNS logs and ClouTrail event?

A

GuardDuty

43
Q

Services classifies data in S3 and catalogs the normal behaviour of users?

A

Macie

44
Q

What does/does not GuardDuty monitors?

A

Instance compromise, Account compromise, Reconnaissance activity.
NOT: DDoS

45
Q

Is Log Storage or Log Analytics a use case for CloudWatch?

A

Log Analytics is.

46
Q

What open source solutions are popular for gathering custom application metrics for CloudWatch?

A

StatsD and collectd

47
Q

What tool to use to integrate CloudWatch graphs with on-prem tool?

A

CloudWatch snapshot graphs.

48
Q

What are available versions of CloudWatch QuickSight?

A

Standard & Enterprise

49
Q

Which Service can help to improve Change management capabilities?

A

CONFIG

50
Q

Which Service assess your environments against security best practices?

A

Inspector

51
Q

Which service helps identify threats on the network?

A

GuardDuty

52
Q

Which service helps to respond to network threats?

A

GuardDuty

AWS SysOps Questions (5 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions