DevOps Engineering on AWS Certification Monitoring, Logging, and Observability on AWS 2 — Questions and Answers
Question 1: Which CloudWatch component triggers an action when a metric crosses a defined threshold?
- CloudWatch Alarm (Correct answer)
- CloudWatch Dashboard
- CloudWatch Log Group
- CloudWatch Event Rule
Correct answer: CloudWatch Alarm
CloudWatch Alarms watch a single metric over a specified time period and perform one or more actions when the metric breaches a threshold.
Question 2: Which AWS service enables you to define rules for evaluating the compliance of AWS resource configurations over time?
- AWS Config (Correct answer)
- AWS CloudTrail
- Amazon Inspector
- AWS Security Hub
Correct answer: AWS Config
AWS Config continuously evaluates your AWS resource configurations against desired rules, providing compliance status and configuration history.
Question 3: Which Amazon CloudWatch feature allows you to run synthetic canary scripts to monitor application endpoints?
- CloudWatch Synthetics (Correct answer)
- CloudWatch RUM
- CloudWatch Anomaly Detection
- CloudWatch Contributor Insights
Correct answer: CloudWatch Synthetics
CloudWatch Synthetics creates canary scripts that run on a schedule to simulate user interactions and monitor endpoint availability and latency.
Question 4: What does Amazon CloudWatch Real User Monitoring (RUM) collect?
- Performance data from real user browser sessions (Correct answer)
- Server-side application logs
- EC2 instance CPU metrics
- VPC flow log data
Correct answer: Performance data from real user browser sessions
CloudWatch RUM collects and analyzes client-side performance data from real user browser sessions, including page load times and JavaScript errors.
Question 5: Which CloudWatch feature identifies the top contributors to a metric, such as the IPs generating the most traffic?
- Contributor Insights (Correct answer)
- Anomaly Detection
- Logs Insights
- Metric Math
Correct answer: Contributor Insights
CloudWatch Contributor Insights creates time series data that displays contributor data from your logs, identifying the top-N contributors to a metric.
Question 6: Which AWS service provides centralized security findings from GuardDuty, Inspector, and Macie in a single dashboard?
- AWS Security Hub (Correct answer)
- AWS CloudTrail
- Amazon Detective
- AWS Config
Correct answer: AWS Security Hub
AWS Security Hub aggregates and prioritizes security findings from multiple AWS services and third-party tools into a unified security posture view.
DevOps Engineering on AWS Certification Monitoring, Logging, and Observability on AWS 2
Which CloudWatch component triggers an action when a metric crosses a defined threshold?