AWS AWS Monitoring & Operations 1 — Questions and Answers
Question 1: Which AWS service records every API call made in your AWS account, providing an audit trail for governance and compliance?
- Amazon CloudWatch
- AWS CloudTrail (Correct answer)
- AWS Config
- Amazon GuardDuty
Correct answer: AWS CloudTrail
AWS CloudTrail logs all API activity — who made the call, from where, and when — enabling security auditing and compliance.
Question 2: What CloudWatch feature triggers a notification or automated action when a metric crosses a defined threshold?
- CloudWatch Logs Insights
- CloudWatch Alarm (Correct answer)
- CloudWatch Event
- CloudWatch Metric Filter
Correct answer: CloudWatch Alarm
CloudWatch Alarms watch a single metric and perform actions such as notifying SNS or triggering Auto Scaling when the threshold is breached.
Question 3: Which AWS service continuously monitors and records AWS resource configurations and evaluates them against desired settings?
- AWS CloudTrail
- AWS Systems Manager
- AWS Config (Correct answer)
- Amazon Inspector
Correct answer: AWS Config
AWS Config records resource configuration changes over time and can evaluate them against compliance rules you define.
Question 4: What is the default retention period for a newly created CloudWatch Logs log group?
- 7 days
- 30 days
- 90 days
- Never expires (Correct answer)
Correct answer: Never expires
By default, CloudWatch Logs log groups retain log data indefinitely; you must explicitly set a retention policy to expire logs.
Question 5: Which AWS service automates operational tasks on AWS and on-premises resources using pre-built or custom runbooks?
- AWS OpsWorks
- AWS Systems Manager Automation (Correct answer)
- AWS CloudFormation
- AWS Service Catalog
Correct answer: AWS Systems Manager Automation
Systems Manager Automation runs runbooks (SSM Documents) to automate common maintenance and deployment tasks across resources.
Question 6: Which AWS service checks your AWS environment against best practices across five categories including cost, security, and performance?
- AWS Inspector
- AWS Security Hub
- AWS Trusted Advisor (Correct answer)
- AWS Well-Architected Tool
Correct answer: AWS Trusted Advisor
AWS Trusted Advisor inspects your AWS environment and provides recommendations across cost optimization, security, fault tolerance, performance, and service limits.
AWS AWS Monitoring & Operations 1
Which AWS service records every API call made in your AWS account, providing an audit trail for governance and compliance?