Font size
WorksheetsAWS Services Quiz Class 7
Total questions: 99
Worksheet time: 50mins
Which AWS service helps you understand how your AWS resources are performing and whether they can handle the load you're throwing at them?
AWS Config
CloudTrail
CloudWatch
AWS Security
What can tracking performance over time help you identify in your AWS resources?
User permissions
Spikes in usage
Security breaches
Logging events
What might the words 'exception' or 'warning' in a log indicate when detecting application problems?
Successful performance
User access issues
A data corruption or timeout
An inventory of AWS resources
What is the purpose of auditing user permissions in AWS?
To maintain an inventory of AWS resources
To track performance
To reduce risk and improve security posture
To log every single action
Why is logging every single action that occurs against your AWS resources important?
To understand existing resources
To prevent future problems
To track user permissions
To handle the load on resources
What is the benefit of maintaining an inventory of AWS Resources?
To identify spikes in usage
To predict how proposed changes will impact the current environment
To detect application problems
To track performance
What is the purpose of AWS CloudTrail?
It collects numeric performance metrics from AWS resources.
It provides a detailed log of every read or write action that occurs against your AWS resources.
It configures how your AWS resources are configured and how they change over time.
It automatically adjusts AWS resource levels to meet demand.
Which AWS service collects numeric performance metrics from AWS and non-AWS resources?
AWS Config
AWS CloudTrail
CloudWatch
AWS Management Console
What can AWS Config do when a resource falls out of compliance with a baseline that you define?
It can delete the resource.
It can ignore the non-compliance.
It can alert you.
It can perform automatic action in response to events.
What are management events in AWS CloudTrail?
They are detailed logs of security breaches.
They are operations that a principal executes against an AWS resource.
They are automatic adjustments of AWS resource levels.
They are logs of non-API actions only.
How does CloudTrail classify events?
Into numeric metrics and performance logs.
Into read-only and write-only events.
Into management events and data events.
Into API and non-API actions.
What do write-only events in CloudTrail include?
API operations that read resources but can't make changes
API operations that modify or might modify resources
Logging into the management console as the root or an Identity and Access Management (IAM) user
API operations that return a list of EC2 instances
Which of the following is considered a read-only event in CloudTrail?
RunInstances API operation
DeleteObject API operation
DescribeInstances API operation
PutObject API operation
For how many days does CloudTrail log management events by default?
30 days
60 days
90 days
120 days
What type of operations does CloudTrail distinguish as read-only and write-only events for S3 object-level operations?
GetObject and PutObject
DeleteObject and DescribeInstances
RunInstances and GetObject
PutObject and DeleteObject
What is the format of CloudTrail log files?
XML
CSV
JSON
TXT
What is NOT included in the event history of every region according to CloudTrail?
Activities that occurred in that region
Global services such as IAM, CloudFront, and Route 53
Events for each region containing only the activities that occurred in that region
Separate event history for each region
What type of information does the 'userIdentity' field in CloudTrail log events provide?
The global endpoint of the service against which the action was taken
The IP address the request originated from
Detailed information about the principal that initiated the request
The name of the API operation
What does the 'eventSource' field in CloudTrail log events refer to?
The IP address the request originated from
The region the resource is located in
The name of the API operation
The global endpoint of the service against which the action was taken
When creating a trail in CloudTrail, how long can it take for the trail to log an event and write it to the S3 bucket?
Instantly
Up to 5 minutes
Up to 15 minutes
Up to 30 minutes
What is the purpose of creating a trail that logs write-only events in CloudTrail?
To log events from a single region only
To separate read-only and write-only events to different trails
To log events related to global services only
To log events from all regions without any restrictions
What is a requirement for trail names in CloudTrail?
They must contain spaces
They must be globally unique
They must be at least three characters and cannot contain spaces
They must be associated with a specific AWS region
What must be remembered when selecting a new S3 bucket for CloudTrail log storage?
The bucket must be located in the us-east-1 region
The bucket names must be globally unique
The bucket must be pre-configured with specific tags
The bucket must be shared with other AWS accounts
What should you make sure is selected under Management Events when creating a trail in CloudTrail?
Read
Write
All
None
What is the limit for selecting individual objects per trail, including Lambda functions and S3 buckets and prefixes?
100 individual objects
250 individual objects
500 individual objects
No limit
If you create a single-region trail to log Lambda events, what are you limited to?
Logging Lambda functions that exist in that region only
Logging Lambda functions from all regions
Logging all management events
Logging no events
What command can you use to disable logging global service events on an existing trail using the AWS CLI?
aws cloudtrail update-trail --name mytrail --include-global-service-events
aws cloudtrail create-trail --name mytrail --no-include-global-service-events
aws cloudtrail update-trail --name mytrail --no-include-global-service-events
aws cloudtrail delete-trail --name mytrail --no-include-global-service-events
What will happen if you log data events on the bucket that's storing your CloudTrail logs?
It will optimize the storage of logs.
It will create an infinite loop.
It will encrypt the logs with AWS KMS.
It will delete the older logs.
What is the purpose of the cryptographic hash of a file calculated by CloudTrail when log file integrity validation is enabled?
To ensure that the log files are encrypted
To detect when a file has been modified
To compress the log files for storage
To create a backup of the log files
What does CloudTrail create every hour to help detect if a log file has been modified?
A new log file
A digest file
A backup of the log file
A new encryption key
What does CloudTrail place in the file's S3 object metadata to ensure log file integrity?
A timestamp of the log file creation
The size of the log file
A cryptographic signature
The IP address of the user accessing the log file
How can you validate the integrity of CloudTrail log files using the AWS CLI?
By creating a new digest file
By encrypting the log files with SSE-S3
By specifying the ARN of the trail and a start time
By checking the file size of the log files
What type of encryption is used by default for log and digest files managed by CloudTrail?
Client-side encryption with Amazon S3-managed keys
Server-side encryption with AWS KMS-managed keys
Server-side encryption with Amazon S3-managed keys
Client-side encryption with AWS KMS-managed keys
What does CloudWatch use to organize metrics into namespaces?
Data points
InstanceId
AWS services
Hypervisors
How often does EC2 send data points to CloudWatch for basic monitoring?
Every minute
Every five minutes
Every ten minutes
Every hour
What is the average CPUUtilization over the five-minute interval if an EC2 instance has the following CPUUtilization metric values measured in percent: 25, 50, 75, 80, and 10?
48
50
55
60
What is the value of the CPUUtilization data point sent to CloudWatch at 13:01 if the previous value at 13:00 was 50?
37.5
40.0
45.0
50.0
What is the timestamp resolution of regular-resolution metrics generated by AWS services?
No less than one minute
Exactly one minute
Up to one second
Five minutes
For how long will CloudWatch store a metric at the five-minute resolution before converting it to one-hour resolution?
15 days
63 days
3 days
1 hour
What happens to AWS CloudWatch metrics after the 15-month retention period?
They are archived for future access.
They are stored at one-minute resolution permanently.
They are deleted permanently.
They are converted to five-minute resolution.
Which API operation can you use to create custom metrics with a resolution of less than one minute in CloudWatch?
PutMetricData
GetMetricData
CreateMetric
StoreMetricData
What statistics can you choose from for showing trends and changes over time in CloudWatch?
Sum and Average
Maximum and Minimum
Sum and Minimum
Average and Maximum
What does the Maximum statistic represent in CloudWatch?
The lowest data point in a period.
The average of all data points in a period.
The number of data points in a period.
The highest data point in a period.
If you specify a percentile of 50 in CloudWatch, what statistic are you requesting?
The average of the data points in the period.
The maximum data point in the period.
The median of the data points in the period.
The total count of the data points in the period.
What is the default period for CloudWatch when graphing a metric?
30 days
60 seconds
1 minute
1 hour
What does the Sum statistic show when graphing a metric in CloudWatch?
The average of all data points in a period.
The highest data point in a period.
Each individual metric data point.
The total count of the data points in a period.
How does changing the time range affect the display of a graph in CloudWatch?
It changes the time series data points.
It changes the metric's resolution.
It only changes how the time series is displayed.
It changes the statistic being used for the metric.
Why would it not make sense to graph the sum of CPU utilization over, say, a 15-minute period?
Because it would yield a result under 0 percent.
Because it would yield a result over 100 percent.
Because CPU utilization cannot be measured as a percentage.
Because the sum of CPU utilization is not relevant to performance metrics.
What statistic can you use to understand long-term patterns of CPU utilization?
Sum
Maximum
Average
Minimum
What does the NetworkOut metric in the AWS/EC2 namespace measure?
The number of error messages sent by an instance.
The amount of data received by an instance.
The number of bytes sent by an instance.
The CPU utilization percentage of an instance.
What does the Details column in the CloudWatch interface uniquely identify for a metric?
The metric's average value and peak time.
The metric's namespace, name, and dimension.
The metric's sum and time range.
The metric's graph style and color.
Which of the following arithmetic functions can be used in CloudWatch to combine multiple metrics into a single time series?
Addition, subtraction, and square root.
Addition, division, and square root.
Addition, subtraction, multiplication, division, and exponentiation.
Multiplication, division, and logarithm.
For what purpose might you divide the AWS/Lambda Invocations metric by the Errors metric in CloudWatch?
To calculate the total number of invocations.
To determine the instance's CPU utilization.
To get an error rate.
To measure the network throughput.
What is the first step to create a graph using Metric Math in CloudWatch according to Exercise 7.2?
Click the Add Math button and select Start With Empty Expression.
Browse to the CloudWatch service console and expand Metrics on the navigation menu.
Click All Metrics.
Select Sum for Statistic and 5 Minutes for Period.
What should you select for each metric in the Graphed Metrics tab to graph the NetworkIn and NetworkOut metrics?
Average for Statistic and 1 Minute for Period.
Sum for Statistic and 5 Minutes for Period.
Maximum for Statistic and 10 Minutes for Period.
Minimum for Statistic and 15 Minutes for Period.
What expression should be entered in the Edit Math Expression field to graph a new time series combining NetworkIn and NetworkOut metrics?
m1/m2
m1-m2
m1+m2
m1*m2
Which statistical functions are mentioned in the image as being available for use in metric math expressions in CloudWatch?
AVG and MIN
SUM and AVG
MAX and AVG
MIN and MAX
What does the function SUM(METRICS()) return when used in CloudWatch?
A time series that can be graphed
An array of time series of all selected metrics
A scalar value representing the sum of all data points
The standard deviation of all selected metrics
What must you do to graph a scalar value like the standard deviation in CloudWatch?
Combine it with the METRICS function in the numerator
Graph it directly without any modifications
Use the SUM function to add up all the graphed metrics
Multiply it with the METRICS function
Which CloudWatch feature allows you to collect logs from AWS and non-AWS sources?
CloudWatch Metrics
CloudWatch Alarms
CloudWatch Logs
CloudWatch Events
What are some common uses for CloudWatch Logs?
Searching and extracting custom metrics
Collecting application logs from an instance
Logging Route 53 DNS queries
All of the above
What are CloudWatch Logs events records of?
Configuration changes in AWS resources
Activity recorded by an application or AWS resource
Binary data in CloudWatch Logs
User access patterns in AWS Management Console
What is the maximum retention period for log events in CloudWatch Logs?
1 year
5 years
10 years
Indefinitely
What can you NOT store as a metric in CloudWatch using metric filters?
The number of 404 Not Found errors in a log file
The number of bytes transferred in a request
A non-numeric string, such as an IP address
The occurrences of a specific string in a log file
What is the purpose of the CloudWatch Agent?
To archive log groups to S3
To collect logs from EC2 instances and on-premises servers
To create CloudWatch metrics using metric filters
To define retention settings for log streams
Can you manually export a log group to an S3 bucket for archiving?
Yes, but only if the log group is less than 1 year old
No, this is not a supported feature in CloudWatch
Yes, but only if it is done at the time of log stream creation
Yes, you can manually export a log group to an S3 bucket
What is the maximum size of log events that CloudTrail can send to CloudWatch Logs?
256 KB
500 KB
1 MB
10 MB
What would you filter for in CloudWatch to search for failed console logins?
{ $.userIdentity.type = "IAMUser" && $.errorCode = "AccessDenied" }
{ $.eventSource = "signin.amazonaws.com" && $.responseElements.ConsoleLogin = "Failure" }
{ $.eventName = "ConsoleLogin" && $.errorMessage = "Failed" }
{ $.sourceIPAddress = "0.0.0.0" && $.loginStatus = "Failure" }
When configuring CloudTrail to deliver logs to CloudWatch Logs, what is the first step according to Exercise 7.3?
Select the Enabled check box under CloudWatch Logs.
Browse to the CloudTrail service console and click Trails.
Click the Save Changes button.
CloudTrail must assume an IAM role.
What must CloudTrail do to stream logs to CloudWatch Logs?
It must have the correct S3 bucket permissions.
It must assume an IAM role with the necessary permissions.
It must be configured with the correct VPC settings.
It must have an active subscription to CloudWatch.
What action does a CloudWatch alarm perform when it detects a change in a metric's value?
It updates the metric's value
It performs an action such as sending an email notification, rebooting an instance, or executing an Auto Scaling action
It directly monitors the metric
It generates a new metric
How often does CloudWatch take metric data points for monitoring if the metric has a resolution of 5 minutes?
Every 1 minute
Every 5 minutes
Every 15 minutes
Every 20 minutes
What must you set the period equal to or greater than when monitoring a metric with CloudWatch?
The resolution of the metric
The average of the metric
The sum of the metric
The maximum value of the metric
What type of threshold allows you to define a static value and condition to trigger an alarm?
Dynamic Threshold
Static Threshold
Anomaly Detection
Relative Threshold
What is the purpose of setting an anomaly detection threshold in CloudWatch?
To define the size of the band based on the number of standard deviations
To specify a static value for the metric
To directly monitor the metrics without statistical analysis
To update the metric's resolution
What are the three states an alarm can be in at any given time according to the CloudWatch documentation?
INSUFFICIENT_DATA, OK, TRIGGERED
ALARM, OK, EVALUATING
ALARM, OK, INSUFFICIENT_DATA
ACTIVE, INACTIVE, PENDING
What does the ALARM state indicate in CloudWatch?
The data points to alarm have not crossed and remained past a defined threshold for a period of time.
The alarm hasn't collected enough data to determine whether the data points to alarm have crossed a defined threshold.
The data points to alarm have crossed and remained past a defined threshold for a period of time.
The alarm is currently being evaluated and has not reached a conclusion.
What is the maximum duration for an evaluation period in CloudWatch?
12 hours
24 hours
48 hours
72 hours
What does an INSUFFICIENT_DATA state in CloudWatch signify?
The alarm has collected enough data and the data points to alarm have crossed the threshold.
The alarm has collected enough data but the data points to alarm have not crossed the threshold.
The alarm has not collected enough data to determine whether the data points to alarm have crossed the threshold.
The alarm is in the process of being reset to its default state.
In the context of CloudWatch, what is an 'n out of m' alarm?
An alarm that triggers when 'n' data points are below the threshold out of the last 'm' data points.
An alarm that triggers when 'n' data points are above the threshold out of the last 'm' data points.
An alarm that triggers if any 'n' data points out of the last 'm' exceed the threshold.
An alarm that triggers if all 'm' data points exceed the threshold consecutively.
How does CloudWatch treat missing data points by default when evaluating periods with missing data?
It treats the missing data as if it never happened.
It assumes the missing data points are breaching the threshold.
It triggers an alarm regardless of the missing data.
It waits for a user to manually input the missing data.
If the evaluation period is 3 and the data points are 41, no data, 50, and 25, how many periods will CloudWatch evaluate if the missing data is treated as missing?
2 periods
3 periods
4 periods
1 period
What happens when CloudWatch missing data is treated as 'breaching' and the threshold is <40 with data points 41, no data, 50, and 25?
The alarm will trigger because the threshold is breached.
The alarm will not trigger because the missing data is not considered breaching.
The alarm will not trigger because there is no missing data.
The alarm will trigger because the missing data is considered not breaching.
What action does CloudWatch's alarm take when it is set to 'ignore' missing data?
It triggers an alarm immediately.
It waits for the user to acknowledge the missing data.
It changes state after it receives the number of consecutive data points specified.
It treats the missing data as if it never happened.
Which protocol is NOT used by a subscriber in the Simple Notification Service (SNS)?
HTTP
HTTPS
FTP
What is the endpoint for a Simple Queue Service (SQS) in the context of SNS?
An email address
A mobile push notification
A queue
A URL
What type of notification can trigger an action when an alarm monitoring an instance goes into an INSUFFICIENT_DATA state?
CPU utilization notification
Disk usage notification
Instance shutdown notification
Memory usage notification
When creating an alarm action in CloudWatch, what AWS service is used to relay the notification to the subscribers of the topic?
AWS Lambda
Amazon S3
Amazon EC2
Amazon SNS
What must exist before you can select it as an alarm action if you're using Auto Scaling?
An EC2 instance
A CloudWatch alarm
A simple Auto Scaling policy
An SNS topic
What does the EC2 StatusCheckFailed_Instance metric return if there's a problem with the instance?
0
1
An error message
A success message
What is the difference between CloudWatch Alarms and EventBridge in terms of the type of events they can respond to?
CloudWatch Alarms respond to metric values, while EventBridge responds to specific events.
CloudWatch Alarms respond to specific events, while EventBridge responds to metric values.
CloudWatch Alarms can only respond to EC2 instance changes, while EventBridge can respond to any AWS service event.
CloudWatch Alarms and EventBridge respond to the same types of events.
What AWS service can EventBridge use to send a notification as soon as an EC2 instance stops?
Amazon EC2
AWS Lambda
Amazon SNS
Amazon S3
By default, how many event buses does every AWS account have for AWS services?
None
One
Two
Multiple
What action can a rule defined in AWS take in response to an event?
It can delete the AWS account.
It can create a snapshot of an EC2 instance at a scheduled time.
It can automatically upgrade the instance type.
It can send a notification when a new user is created.
What is the main difference between AWS Config and CloudTrail?
AWS Config tracks real-time user activity, whereas CloudTrail tracks configuration changes.
AWS Config tracks configuration state over time, whereas CloudTrail logs events and API calls.
AWS Config is used for security auditing, whereas CloudTrail is used for compliance monitoring.
AWS Config logs data access, whereas CloudTrail tracks resource configuration.
Which of the following is a use case for AWS Config?
To monitor real-time network traffic.
To provide a holistic view of resource configurations at any point in time.
To automate the deployment of applications.
To manage user identities and access.
What can AWS Config help you identify?
The best pricing model for your resources.
Misconfigurations and their potential impact on other resources.
The number of users currently logged into the system.
The real-time performance metrics of your services.
What objective can AWS Config assist with in terms of security?
Encrypting data stored on S3 buckets.
Notifying when a resource configuration changes, alerting to potential breaches.
Installing security patches on EC2 instances.
Blocking IP addresses that exhibit suspicious behavior.
What is the primary function of the configuration recorder in AWS Config?
To automatically delete old configuration items
To serve as the workhorse of AWS Config, discovering and tracking resource changes
To back up configuration items to an S3 bucket
To monitor and configure AWS Config rules
