โ† All AWS Flashcard Decks

DevOps Monitoring, Testing & Deployment Strategies Flashcards

7 cards from real AWS practice questions. Tap to flip, then mark Knew It or Still Learning โ€” missed cards come back until you master them.

Read the first 7 DevOps Monitoring, Testing & Deployment Strategies flashcards as text
  1. Which AWS service enables you to continuously assess EC2 instances for software vulnerabilities and unintended network exposure without deploying agents?

    Answer: Amazon Inspector v2

    Amazon Inspector v2 uses agentless scanning for EC2 (via SSM) and container images to find CVEs and network reachability issues.

  2. In a CodeDeploy blue/green deployment to EC2, where does the deployment traffic shift AFTER the green (new) environment passes health checks?

    Answer: The load balancer is updated to route traffic from blue target group to green target group

    CodeDeploy blue/green on EC2 re-registers green instances with the load balancer and deregisters blue instances, shifting all traffic at the ALB/NLB level.

  3. A pipeline needs to validate that a CloudFormation stack change set won't delete production resources before deploying. Which action type checks this?

    Answer: CloudFormation CREATE_CHANGE_SET action followed by a manual approval reviewing the change set

    Creating a change set and adding a manual approval step lets reviewers inspect resource deletions before executing the change set.

  4. Which feature of Amazon CloudWatch RUM (Real User Monitoring) differentiates it from synthetic monitoring?

    Answer: It captures performance data from actual end-user browsers and sessions

    CloudWatch RUM collects client-side performance metrics and errors from real user browser sessions using a JavaScript snippet.

  5. When configuring a CodePipeline with an ECR source action, what event triggers the pipeline to start automatically?

    Answer: An Amazon EventBridge rule detecting an ECR image push to the specified repository and tag

    CodePipeline uses EventBridge rules to detect ECR image push events and automatically trigger the pipeline when a new image is pushed.

  6. Which AWS CodeDeploy deployment configuration ensures that at least 75% of instances remain in service during an in-place rolling deployment?

    Answer: A custom deployment configuration specifying minimum healthy hosts

    A custom deployment configuration lets you specify a minimum healthy host percentage (e.g., 75%), whereas built-in configs use fixed fractions like half or one.

  7. A DevOps team wants to correlate application logs with deployment events to quickly identify which deployment caused a spike in errors. Which approach achieves this in CloudWatch?

    Answer: Add deployment annotations to CloudWatch dashboards and use Logs Insights to query error rates filtered by time

    Dashboard annotations mark deployment times visually, and Logs Insights queries can filter log data within those time windows to correlate errors.