Monitoring, Logging, and Disaster Recovery Flashcards
7 cards from real AWS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Monitoring, Logging, and Disaster Recovery flashcards as text
A company wants to detect when an EC2 instance's CPU utilization remains above 90% for more than 15 consecutive minutes. Which CloudWatch alarm configuration should be used?
Answer: Set threshold to 90%, period to 300 seconds, evaluation periods to 3
Setting a 300-second period with 3 consecutive evaluation periods means the alarm triggers only after 15 minutes of sustained high CPU.
Which AWS service allows you to query CloudWatch Logs data using standard SQL-like syntax without moving the data to S3?
Answer: CloudWatch Logs Insights
CloudWatch Logs Insights provides an interactive query engine for log data stored directly in CloudWatch Logs groups.
An architect needs to implement a multi-region active-passive DR strategy with an RTO of 1 hour and RPO of 15 minutes for an RDS database. Which approach meets these requirements most cost-effectively?
Answer: RDS cross-region read replica with automated snapshots every 15 minutes
A cross-region read replica can be promoted within an hour while 15-minute automated snapshots satisfy the RPO, making it more cost-effective than Aurora Global Database for non-Aurora workloads.
A company needs CloudTrail logs retained for 7 years for compliance. What is the most operationally efficient way to achieve this?
Answer: Enable CloudTrail and store logs in an S3 bucket with an S3 Lifecycle policy transitioning to Glacier Deep Archive after 90 days
S3 Lifecycle policies automating transition to Glacier Deep Archive provide durable, low-cost long-term retention with no operational overhead.
Which CloudWatch metric is NOT available by default and requires installing the CloudWatch Agent on an EC2 instance?
Answer: MemoryUtilization
MemoryUtilization is an OS-level metric not exposed by the EC2 hypervisor, so it requires the CloudWatch Agent to collect and publish.
A solutions architect is designing a DR plan and needs to minimize costs while keeping a warm standby in a secondary region with an RTO under 30 minutes. Which strategy fits best?
Answer: Warm standby
A warm standby maintains a scaled-down but fully functional environment in the secondary region, enabling promotion within the 30-minute RTO without the full cost of active-active.
An application writes structured JSON logs to stdout in an ECS Fargate task. Which configuration sends these logs to CloudWatch Logs with the least operational overhead?
Answer: Use the awslogs log driver in the ECS task definition
The awslogs log driver is natively supported by ECS Fargate and routes stdout/stderr directly to CloudWatch Logs without additional infrastructure.