Section 18: AWS Monitoring and Audit

Question 1

We'd like to have CloudWatch Metrics for EC2 at a 1 minute rate. What should we do?
A) Enable Custom Metrics
B) enable High Resolution
C) Enable Basic Monitoring
D) Enable Detailed Monitoring

Answer 1

D) Enable Detailed Monitoring

This is a paid offering and gives you EC2 metrics at a 1 minute rate

Question 2

High Resolution Custom Metrics can have a minimum resolution of
A) 1 second
B) 10 seconds
C) 30 seconds
D) 1 minute

Answer 2

A) 1 second

Question 3

Your CloudWatch alarm is triggered and controls an ASG. The alarm should trigger 1 instance being deleted from your ASG, but your ASG has already 2 instances running and the minimum capacity is 2. What will happen?
A) One instance will be deleted and the ASG capacity and minimum will go to 1
B) The alarm will remain in “ALARM” state but never decrease the number of instances in my ASG
C) The alarm will detach from my ASG
D) The alarm will go in the OK state

Answer 3

B) The alarm will remain in “ALARM” state but never decrease the number of instances in my ASG

The number of instances in an ASG cannot go below the minimum, even if the alarm would in theory trigger an instance termination

Question 4

An Alarm on a High-Resolution Metric can be triggered as often as
A) 1 second
B) 10 seconds
C) 30 Seconds
D) 1 minute

Answer 4

B) 10 seconds

Question 5

You have made a configuration change and would like to evaluate the impact of it on the performance of your application. Which service do you use?
A) CloudWatch
B) CloudTrail

Answer 5

A) CloudWatch

CloudWatch is used to monitor the applications performance / metrics

Question 6

Someone has terminated an EC2 instance in your account last week, which was hosting a critical database. You would like to understand who did it and when, how can you achieve that?
A) Look at the CloudWatch Metrics
B) Look at the CloudWatch Alarms
C) Look at the CloudWatch Events
D) Look at CloudTrail

Answer 6

D) Look at CloudTrail

CloudTrail helps audit the API calls made within your account, so the database deletion API call will appear here (regardless if made from the console, the CLI, or an SDK)

Question 7

You would like to ensure that over time, none of your EC2 instances expose the port 84 as it is known to have vulnerabilities with the OS you are using. What can you do to monitor this?
A) Setup CloudWatch Metrics
B) Setup CloudTrail trails
C) Setup Config Rules
D) Create an AWS Lambda cron job

Answer 7

C) Setup Config Rules

Question 8

You would like to evaluate the compliance of your resource’s configurations over time. Which technology do you choose?
A) CloudWatch
B) CloudTrail
D) Config

Answer 8

D) Config