AWS Monitoring, Logging, and Disaster Recovery 2

Question 1

Which AWS service continuously monitors your AWS configurations and evaluates them against desired settings for compliance?

Accepted Answer

AWS Config

Answer

AWS Config records configuration changes and evaluates resource configurations against rules to ensure compliance.

Question 2

A solutions architect must ensure that RDS automated backups are retained for 30 days. What is the maximum backup retention period for RDS automated backups?

Accepted Answer

35 days

Answer

Amazon RDS automated backups can be retained for a maximum of 35 days.

Question 3

Which CloudWatch metric type must you create custom metrics to monitor (not available by default)?

Accepted Answer

EC2 memory utilization

Answer

EC2 memory utilization is not reported by default; you must install the CloudWatch agent and publish it as a custom metric.

Question 4

Which AWS service provides threat detection by analyzing VPC Flow Logs, CloudTrail, and DNS logs using machine learning?

Accepted Answer

Amazon GuardDuty

Answer

Amazon GuardDuty continuously analyzes VPC Flow Logs, CloudTrail events, and DNS logs to detect threats and malicious activity.

Question 5

In the context of disaster recovery, what does RPO (Recovery Point Objective) define?

Accepted Answer

The maximum acceptable amount of data loss measured in time

Answer

RPO defines how much data loss is acceptable by specifying the maximum age of the data that must be recovered after a disaster.

AWS Practice Test

AWS Practice Test

AWS Monitoring, Logging, and Disaster Recovery 2