AWS AWS Monitoring & Operations 3

Question 1

Which AWS service uses machine learning to detect unusual and potentially unauthorized activity in your AWS account?

Accepted Answer

Amazon GuardDuty

Answer

Amazon GuardDuty continuously analyzes CloudTrail, VPC Flow Logs, and DNS logs using ML to identify threats like cryptocurrency mining or credential compromise.

Question 2

How long does the CloudTrail Event History console retain management events by default?

Accepted Answer

90 days

Answer

CloudTrail Event History retains the last 90 days of management events; longer retention requires setting up a Trail that writes to S3.

Question 3

Which AWS service allows you to define rules that enforce resource configuration compliance across an entire AWS Organization?

Accepted Answer

AWS Config Conformance Packs

Answer

AWS Config Conformance Packs deploy a collection of Config rules and remediation actions across multiple accounts and regions in an organization.

Question 4

Which AWS service provides synthetic monitoring by running canary scripts to test your application endpoints continuously?

Accepted Answer

Amazon CloudWatch Synthetics

Answer

CloudWatch Synthetics runs configurable scripts called canaries that simulate user actions to monitor endpoints and APIs around the clock.

Question 5

Which service provides a ranked list of the most significant contributors to latency or error rates in your CloudWatch log data?

Accepted Answer

CloudWatch Contributor Insights

Answer

CloudWatch Contributor Insights analyzes log data in real time to identify the top contributors driving system performance issues.

AWS Practice Test

AWS Practice Test

AWS AWS Monitoring & Operations 3