Quiz
Chapter 7 - 13 - CloudTrail, CloudWatch, and AWS Config
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (20)
1You’ve configured CloudTrail to log all management events in all regions. Which of the
following API events will CloudTrail log? (Choose all that apply.)- ALogging into the AWS Console
- BCreating an S3 bucket from the web console
- CUploading an object to an S3 bucket
- DCreating a subnet using the AWS CLI
2You’ve configured CloudTrail to log all read-only data events. Which of the following
events will CloudTrail log?- AViewing all S3 buckets
- BUploading a file to an S3 bucket
- CDownloading a file from an S3 bucket
- DCreating a Lambda function
3Sixty days ago, you created a trail in CloudTrail to log read-only management events.
Subsequently someone deleted the trail. Where can you look to find out who deleted it?- AThe IAM user log
- BThe trail logs stored in S3
- CThe CloudTrail event history in the region where the trail was configured
- DThe CloudTrail event history in any region
4What uniquely distinguishes two CloudWatch metrics that have the same name and are in
the same namespace?- AThe region
- BThe dimension
- CThe timestamp
- DThe data point
5Which type of monitoring sends metrics to CloudWatch every five minutes?
- ARegular
- BDetailed
- CBasic
- DHigh resolution
6You update a custom CloudWatch metric with the timestamp of 15:57:08 and a value of 3.
You then update the same metric with the timestamp of 15:57:37 and a value of 6. Assuming
the metric is a high-resolution metric, which of the following will CloudWatch do?- ARecord both values with the given timestamp.
- BRecord the second value with the timestamp 15:57:37, overwriting the first value.
- CRecord only the first value with the timestamp 15:57:08, ignoring the second value.
- DRecord only the second value with the timestamp 15:57:00, overwriting the first value.
7How long does CloudWatch retain metrics stored at one-hour resolution?
- A15 days
- B3 hours
- C63 days
- D15 months
8You want to use CloudWatch to graph the exact data points of a metric for the last hour.
The metric is stored at five-minute resolution. Which statistic and period should you use?- AThe Sum statistic with a five-minute period
- BThe Average statistic with a one-hour period
- CThe Sum statistic with a one-hour period
- DThe Sample count statistic with a five-minute period
9Which CloudWatch resource type stores log events?
- ALog group
- BLog stream
- CMetric filter
- DCloudWatch Agent
10The CloudWatch Agent on an instance has been sending application logs to a CloudWatch
log stream for several months. How can you remove old log events without disrupting
delivery of new log events? (Choose all that apply.)- ADelete the log stream.
- BManually delete old log events.
- CSet the retention of the log stream to 30 days.
- DSet the retention of the log group to 30 days.
11You created a trail to log all management events in all regions and send the trail logs to
CloudWatch logs. You notice that some recent management events are missing from the
log stream, but others are there. What are some possible reasons for this? (Choose all
that apply.)- AThe missing events are greater than 256 KB in size.
- BThe metric filter is misconfigured.
- CThere’s a delay between the time the event occurs and the time CloudTrail streams the
event to CloudWatch. - DThe IAM role that CloudTrail assumes is misconfigured.
12Two days ago, you created a CloudWatch alarm to monitor the VolumeReadOps on an EBS
volume. Since then, the alarm has remained in an INSUFFICIENT_DATA state. What are
some possible reasons for this? (Choose all that apply.)- AThe data points to monitor haven’t crossed the specified threshold.
- BThe EBS volume isn’t attached to a running instance.
- CThe evaluation period hasn’t elapsed.
- DThe alarm hasn’t collected enough data points to alarm.
13You want a CloudWatch alarm to change state when four consecutive evaluation periods
elapse with no data. How should you configure the alarm to treat missing data?- AAs Missing
- BBreaching
- CNot Breaching
- DIgnore
- EAs Not Missing
14You’ve configured an alarm to monitor a metric in the AWS/EC2 namespace. You want
CloudWatch to send you a text message and reboot an instance when an alarm is breaching.
Which two actions should you configure in the alarm? (Choose two.)- ASMS action
- BAuto Scaling action
- CNotification action
- DEC2 action
15In a CloudWatch alarm, what does the EC2 recover action do to the monitored instance?
- AMigrates the instance to a different host
- BReboots the instance
- CDeletes the instance and creates a new one
- DRestores the instance from a snapshot
16You learn that an instance in the us-west-1 region was deleted at some point in the past. To
find out who deleted the instance and when, which of the following must be true?- AThe AWS Config configuration recorder must have been turned on in the region at the
time the instance was deleted. - BCloudTrail must have been logging write-only management events for all regions.
- CCloudTrail must have been logging IAM events.
- DThe CloudWatch log stream containing the deletion event must not have been deleted.
- AThe AWS Config configuration recorder must have been turned on in the region at the
17Which of the following may be included in an AWS Config delivery channel? (Choose all
that apply.)- AA CloudWatch log stream
- BThe delivery frequency of the configuration snapshot
- CAn S3 bucket name
- DAn SNS topic ARN
18You configured AWS Config to monitor all of your resources in the us-east-1 region. After
making several changes to the AWS resources in this region, you decided you want to delete
the old configuration items. How can you accomplish this?- APause the configuration recorder.
- BDelete the configuration recorder.
- CDelete the configuration snapshots.
- DSet the retention period to 30 days and wait for the configuration items to age out.
19Which of the following metric math expressions can CloudWatch graph? (Choose all that
apply.)- AAVG(m1)-m1
- BAVG(m1)
- CMETRICS()/AVG(m1)
- Dm1/m2
20You’ve configured an AWS Config rule to check whether CloudTrail is enabled. What could
prevent AWS Config from evaluating this rule?- ATurning off the configuration recorder
- BDeleting the rule
- CDeleting the configuration history for CloudTrail
- DFailing to specify a frequency for periodic checks
Information
- Description
- AWS (AWS - Study Book) Quiz on Chapter 7 - 13 - CloudTrail, CloudWatch, and AWS Config, created by Fausto Trindade on 03/02/2020.
- Author
- Fausto Trindade
- Language
- Português
- Views
- 0
- Tags
- Rating
- No ratings yet Rate this quiz