AWS AWS Monitoring & Operations

Question 1

Which AWS service records every API call made in your AWS account, providing an audit trail for governance and compliance?

Accepted Answer

AWS CloudTrail

Answer

AWS CloudTrail logs all API activity — who made the call, from where, and when — enabling security auditing and compliance.

Question 2

What CloudWatch feature triggers a notification or automated action when a metric crosses a defined threshold?

Accepted Answer

CloudWatch Alarm

Answer

CloudWatch Alarms watch a single metric and perform actions such as notifying SNS or triggering Auto Scaling when the threshold is breached.

Question 3

Which AWS service continuously monitors and records AWS resource configurations and evaluates them against desired settings?

Accepted Answer

AWS Config

Answer

AWS Config records resource configuration changes over time and can evaluate them against compliance rules you define.

Question 4

What is the default retention period for a newly created CloudWatch Logs log group?

Accepted Answer

Never expires

Answer

By default, CloudWatch Logs log groups retain log data indefinitely; you must explicitly set a retention policy to expire logs.

Question 5

Which AWS service automates operational tasks on AWS and on-premises resources using pre-built or custom runbooks?

Accepted Answer

AWS Systems Manager Automation

Answer

Systems Manager Automation runs runbooks (SSM Documents) to automate common maintenance and deployment tasks across resources.

AWS Practice Test