Practice Test GeeksAWS Practice Test
← All AWS Flashcard Decks

Monitoring, Logging, and Disaster Recovery Flashcards

7 cards from real AWS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Monitoring, Logging, and Disaster Recovery flashcards as text

  1. Which AWS service can aggregate security findings from GuardDuty, Inspector, and Macie into a single pane of glass for centralized monitoring?

    Answer: AWS Security Hub

    AWS Security Hub aggregates, normalizes, and prioritizes findings from multiple AWS security services into a unified dashboard.

  2. A company uses Route 53 health checks with DNS failover for DR. The primary region becomes unhealthy. What happens to in-flight requests that reached the primary ALB before the DNS TTL expires?

    Answer: In-flight requests continue on the primary; only new DNS resolutions after TTL expiry route to the secondary

    DNS failover only affects new name resolutions after the TTL expires; clients with cached DNS entries continue routing to the primary until their TTL lapses.

  3. An architect wants to automatically remediate non-compliant AWS Config rules (e.g., S3 buckets with public access enabled). Which feature enables this?

    Answer: AWS Config remediation actions using SSM Automation documents

    AWS Config supports automatic remediation by associating SSM Automation documents directly with config rules, which execute when a resource becomes non-compliant.

  4. Which S3 feature, when enabled on a source bucket, can help achieve an RPO near zero for object-level DR in a secondary region?

    Answer: S3 Cross-Region Replication with Replication Time Control (RTC)

    S3 RTC provides a predictable replication SLA (99.99% of objects replicated within 15 minutes) with replication metrics, minimizing RPO for cross-region DR.

  5. A CloudWatch alarm is in INSUFFICIENT_DATA state after being created. What does this state indicate?

    Answer: CloudWatch does not have enough data points yet to determine the alarm state

    INSUFFICIENT_DATA means CloudWatch has not yet collected enough data points to evaluate whether the threshold is breached, which is normal immediately after alarm creation.

  6. An organization wants to capture all API calls made to their AWS account across all regions and store them in a single S3 bucket. Which CloudTrail configuration achieves this?

    Answer: Create a multi-region trail and specify a single S3 bucket as the destination

    A multi-region CloudTrail trail automatically captures API activity from all regions and delivers logs to a single designated S3 bucket.

  7. A company wants to test their DR plan without impacting production. Which AWS feature allows you to restore an RDS snapshot to a separate environment for DR validation?

    Answer: RDS Snapshot Restore to a new DB instance

    Restoring an RDS snapshot to a new, isolated DB instance lets teams validate recovery procedures and data integrity without touching the production database.