AWS Monitoring & Operations Flashcards
6 cards from real AWS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 AWS Monitoring & Operations flashcards as text
Which AWS service records every API call made in your AWS account, providing an audit trail for governance and compliance?
Answer: AWS CloudTrail
AWS CloudTrail logs all API activity — who made the call, from where, and when — enabling security auditing and compliance.
What CloudWatch feature triggers a notification or automated action when a metric crosses a defined threshold?
Answer: CloudWatch Alarm
CloudWatch Alarms watch a single metric and perform actions such as notifying SNS or triggering Auto Scaling when the threshold is breached.
Which AWS service continuously monitors and records AWS resource configurations and evaluates them against desired settings?
Answer: AWS Config
AWS Config records resource configuration changes over time and can evaluate them against compliance rules you define.
What is the default retention period for a newly created CloudWatch Logs log group?
Answer: Never expires
By default, CloudWatch Logs log groups retain log data indefinitely; you must explicitly set a retention policy to expire logs.
Which AWS service automates operational tasks on AWS and on-premises resources using pre-built or custom runbooks?
Answer: AWS Systems Manager Automation
Systems Manager Automation runs runbooks (SSM Documents) to automate common maintenance and deployment tasks across resources.
Which AWS service checks your AWS environment against best practices across five categories including cost, security, and performance?
Answer: AWS Trusted Advisor
AWS Trusted Advisor inspects your AWS environment and provides recommendations across cost optimization, security, fault tolerance, performance, and service limits.