DevOps Engineering on AWS Certification Incident and Event Response on AWS 3

Question 1

Which AWS Systems Manager feature provides a built-in Post-Incident Analysis workflow that identifies root causes and generates tracked action items after an incident is resolved?

Accepted Answer

AWS Systems Manager Incident Manager

Answer

AWS CloudTrail Event History

Answer

Amazon Detective

Answer

AWS Security Hub Insights

Question 2

When AWS Systems Manager Incident Manager completes a post-incident analysis, where are the resulting action items automatically tracked?

Accepted Answer

OpsCenter OpsItems

Answer

Amazon CloudWatch Events

Answer

AWS Config compliance rules

Answer

CloudTrail event history

Question 3

Which Incident Manager feature defines who receives notifications during an incident and in what order if a responder does not acknowledge within a set time?

Accepted Answer

Escalation plans

Answer

Contact channels

Answer

Response plans

Answer

Runbook assignments

Question 4

An organization wants to proactively identify system weaknesses before incidents occur by injecting controlled faults such as CPU stress and network latency into running workloads. Which AWS service supports this?

Accepted Answer

AWS Fault Injection Simulator (FIS)

Answer

AWS X-Ray

Answer

Amazon CloudWatch Synthetics

Answer

AWS Systems Manager Automation

Question 5

A DevOps team wants a centralized dashboard that aggregates security findings from GuardDuty, Amazon Inspector, and AWS Macie to prioritize incident response. Which service provides this unified view?

Accepted Answer

AWS Security Hub

Answer

Amazon Detective

Answer

AWS CloudTrail

Answer

Amazon CloudWatch Container Insights

Question 6

A DevOps engineer needs to investigate the root cause of an incident by visualizing connections between AWS resources, API calls, and user activities over a specific time window. Which service is best suited for this forensic analysis?

Accepted Answer

Amazon Detective

Answer

AWS CloudTrail Lake

Answer

AWS Config timeline

Answer

Amazon CloudWatch Logs Insights

Question 7

An operations team stores runbooks as AWS Systems Manager Automation documents and wants to trigger them automatically in response to CloudWatch Alarms. Which integration pattern achieves this?

Accepted Answer

CloudWatch Alarm → EventBridge rule → SSM Automation as direct target

Answer

CloudWatch Alarm → SNS → SQS → polling Lambda → SSM Automation

Answer

CloudWatch Alarm → SNS topic → SSM Automation via EventBridge rule

Answer

CloudWatch Alarm → CloudTrail → Lambda → SSM Automation