AWS DevOps Incident and Event Response 4

Question 1

An AWS Systems Manager OpsCenter OpsItem is created automatically when a CloudWatch alarm enters ALARM state. Which Systems Manager feature is responsible for this integration?

Accepted Answer

OpsCenter EventBridge rule

Answer

An EventBridge rule targeting OpsCenter is used to automatically create OpsItems when CloudWatch alarms fire.

Question 2

During an incident, an operator needs to execute a pre-approved set of remediation steps across 500 EC2 instances simultaneously. Which AWS service provides the fastest path to do this with full audit logging?

Accepted Answer

AWS Systems Manager Run Command

Answer

Systems Manager Run Command executes commands across many instances simultaneously and automatically logs output to S3 and CloudWatch Logs.

Question 3

A DevOps team wants CloudWatch to automatically restart an EC2 instance when CPU utilization stays at 100% for 15 minutes. What is the correct alarm action to configure?

Accepted Answer

EC2 reboot action

Answer

CloudWatch EC2 reboot alarm actions restart the instance OS, which clears CPU-bound processes.

Question 4

A pipeline failure event must trigger both a PagerDuty alert and an internal Slack notification simultaneously. What is the most scalable architecture for this requirement?

Accepted Answer

EventBridge rule → SNS topic with two subscriptions (HTTPS endpoints)

Answer

An SNS topic with multiple HTTPS subscriptions fans out a single event to multiple endpoints simultaneously without additional Lambda overhead.

Question 5

What does AWS Systems Manager Incident Manager's 'engagement plan' define?

Accepted Answer

The ordered list of contacts and escalation timing for notifying responders

Answer

An engagement plan specifies which contacts to notify, in what order, and after how many minutes to escalate if there is no acknowledgment.

AWS Practice Test

AWS Practice Test

AWS DevOps Incident and Event Response 4