AWS Monitoring, Logging, and Disaster Recovery 5

Question 1

Which AWS service can aggregate security findings from GuardDuty, Inspector, and Macie into a single pane of glass for centralized monitoring?

Accepted Answer

AWS Security Hub

Answer

AWS Security Hub aggregates, normalizes, and prioritizes findings from multiple AWS security services into a unified dashboard.

Question 2

A company uses Route 53 health checks with DNS failover for DR. The primary region becomes unhealthy. What happens to in-flight requests that reached the primary ALB before the DNS TTL expires?

Accepted Answer

In-flight requests continue on the primary; only new DNS resolutions after TTL expiry route to the secondary

Answer

DNS failover only affects new name resolutions after the TTL expires; clients with cached DNS entries continue routing to the primary until their TTL lapses.

Question 3

An architect wants to automatically remediate non-compliant AWS Config rules (e.g., S3 buckets with public access enabled). Which feature enables this?

Accepted Answer

AWS Config remediation actions using SSM Automation documents

Answer

AWS Config supports automatic remediation by associating SSM Automation documents directly with config rules, which execute when a resource becomes non-compliant.

Question 4

Which S3 feature, when enabled on a source bucket, can help achieve an RPO near zero for object-level DR in a secondary region?

Accepted Answer

S3 Cross-Region Replication with Replication Time Control (RTC)

Answer

S3 RTC provides a predictable replication SLA (99.99% of objects replicated within 15 minutes) with replication metrics, minimizing RPO for cross-region DR.

Question 5

A CloudWatch alarm is in INSUFFICIENT_DATA state after being created. What does this state indicate?

Accepted Answer

CloudWatch does not have enough data points yet to determine the alarm state

Answer

INSUFFICIENT_DATA means CloudWatch has not yet collected enough data points to evaluate whether the threshold is breached, which is normal immediately after alarm creation.

AWS Practice Test

AWS Practice Test

AWS Monitoring, Logging, and Disaster Recovery 5