AWS DevOps Monitoring and Logging 4

Question 1

An organization needs to centralize CloudWatch Logs from 50 AWS accounts into a single Security account for SIEM ingestion. Which feature supports cross-account log streaming?

Accepted Answer

CloudWatch Subscription Filters with cross-account Kinesis Data Streams

Answer

CloudWatch Subscription Filters can send log data to a Kinesis Data Stream in another account by setting the appropriate resource policy, enabling cross-account log aggregation.

Question 2

Which AWS service continuously records configuration changes to AWS resources and can trigger remediation when a resource drifts from a desired state?

Accepted Answer

AWS Config

Answer

AWS Config records resource configuration history and evaluates compliance against rules, with optional automatic remediation via Systems Manager Automation.

Question 3

A team wants to detect anomalous spikes in Lambda error rates using machine learning without writing threshold rules. Which CloudWatch feature provides this?

Accepted Answer

CloudWatch Anomaly Detection

Answer

CloudWatch Anomaly Detection uses ML to model expected metric behavior and can create alarms that fire when values deviate from the predicted band.

Question 4

During a blue/green deployment, which metric from an Application Load Balancer is most useful for determining when to shift 100% of traffic to the green environment?

Accepted Answer

HealthyHostCount for the green target group

Answer

HealthyHostCount for the green target group confirms all new instances have passed health checks and are ready to serve full traffic.

Question 5

A DevOps engineer must ensure that all CloudWatch Logs data older than 30 days is exported to S3 for cost-efficient long-term storage. Which native mechanism supports this?

Accepted Answer

CloudWatch Logs export task (CreateExportTask API) scheduled via EventBridge

Answer

The CreateExportTask API exports a log group's data to S3 for a specified time range; scheduling it via EventBridge Scheduler automates the 30-day export.

AWS Practice Test

AWS Practice Test

AWS DevOps Monitoring and Logging 4