Equipment Maintenance & Calibration Flashcards
7 cards from real Architecting on AWS Certification practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Equipment Maintenance & Calibration flashcards as text
A company must decommission thousands of S3 objects older than 365 days to reduce storage costs while retaining newer objects indefinitely. Which feature handles this automatically?
Answer: S3 Lifecycle policies with Expiration actions
S3 Lifecycle Expiration actions automatically delete objects after a configured number of days, eliminating the need for manual cleanup scripts.
An architect needs to validate that all newly launched EC2 instances comply with a CIS benchmark before they serve production traffic. Which service can scan AMIs and running instances for security benchmark compliance?
Answer: Amazon Inspector
Amazon Inspector automatically assesses EC2 instances and container images against security benchmarks and CVE databases, providing findings with severity scores.
During a planned ECS cluster maintenance event, tasks must be gracefully stopped before the underlying EC2 instances are drained. Which ECS feature controls the grace period for in-flight task shutdown?
Answer: ECS task stopTimeout in the task definition
The stopTimeout field in an ECS task definition specifies how long ECS waits for a task to exit gracefully before forcibly stopping it.
A DevOps team wants CloudFormation stacks to automatically detect and report configuration drift without manual intervention. What is the most scalable way to trigger drift detection across dozens of stacks periodically?
Answer: EventBridge rule triggering a Lambda function that calls the CloudFormation drift detection API
An EventBridge scheduled rule can invoke a Lambda function that calls the CloudFormation DetectStackDrift API across all stacks, providing automated, serverless periodic drift detection.
A production Aurora cluster must undergo minor version upgrades with zero downtime. Which Aurora feature allows applying upgrades without interrupting read/write operations?
Answer: Aurora Zero-Downtime Patching (ZDP)
Aurora Zero-Downtime Patching preserves existing connections and in-flight transactions during minor version upgrades, enabling maintenance with no observable downtime.
An architect must ensure that CloudWatch Alarms auto-remediate high memory utilization on EC2 instances by restarting the application service via SSM. Which integration connects the alarm action directly to SSM?
Answer: CloudWatch Alarm → EventBridge → SSM Automation
CloudWatch Alarms can trigger EventBridge events, which in turn invoke SSM Automation documents to perform remediation actions on the affected resources.
A solutions architect needs to ensure that Elastic Load Balancer SSL/TLS certificates are renewed before expiration without manual tracking. Which AWS service automates this?
Answer: AWS Certificate Manager (ACM) with auto-renewal
ACM automatically renews certificates issued by ACM before they expire and deploys the renewed certificate to associated AWS services like ALB with no manual action required.