AWS DevOps Incident and Event Response 1 — Questions and Answers
Question 1: Which AWS service provides a personalized view of the health of AWS services and sends notifications about events that might impact your specific resources?
- Amazon CloudWatch
- AWS Health Dashboard (Correct answer)
- AWS Systems Manager OpsCenter
- Amazon EventBridge
Correct answer: AWS Health Dashboard
AWS Health Dashboard provides account-specific health events and notifications for resources in your account, distinguishing it from the general public service health page.
Question 2: Which AWS Systems Manager capability provides a central location where engineers can view, investigate, and resolve operational work items called OpsItems?
- Systems Manager Patch Manager
- Systems Manager Run Command
- Systems Manager OpsCenter (Correct answer)
- Systems Manager Session Manager
Correct answer: Systems Manager OpsCenter
OpsCenter aggregates and standardizes OpsItems from various AWS services, giving operations teams a unified view for investigation and resolution.
Question 3: An automated remediation Lambda function needs to stop a non-compliant EC2 instance when a configuration change is detected. Which service should trigger this action automatically?
- AWS CloudTrail
- Amazon CloudWatch Events
- AWS Config automatic remediation (Correct answer)
- AWS Systems Manager State Manager
Correct answer: AWS Config automatic remediation
AWS Config evaluates resource configurations against rules and can trigger automatic remediation actions, including invoking SSM Automation runbooks or Lambda functions on non-compliant resources.
Question 4: During a major incident, your team needs to run a pre-approved multi-step operational workflow across several AWS services. Which Systems Manager feature should you use?
- Systems Manager Parameter Store
- Systems Manager Automation (Correct answer)
- Systems Manager Inventory
- Systems Manager Compliance
Correct answer: Systems Manager Automation
Systems Manager Automation executes runbooks (SSM Automation documents) that define multi-step workflows, API calls, and conditional branching for incident remediation.
Question 5: Which AWS service provides on-call schedules, escalation plans, response plans, and post-incident analysis capabilities for DevOps incident management?
- AWS Systems Manager OpsCenter
- Amazon DevOps Guru
- AWS Systems Manager Incident Manager (Correct answer)
- AWS CloudWatch Synthetics
Correct answer: AWS Systems Manager Incident Manager
AWS Systems Manager Incident Manager manages the full incident lifecycle with on-call management, escalation plans, runbook execution, and post-incident analysis templates.
Question 6: What is the primary purpose of a Dead Letter Queue (DLQ) in an event-driven incident response architecture?
- To permanently delete failed events after maximum retries
- To capture and retain messages that fail processing for later analysis (Correct answer)
- To throttle event processing during high-load incidents
- To encrypt sensitive event payloads before processing
Correct answer: To capture and retain messages that fail processing for later analysis
DLQs capture messages that cannot be successfully processed after the maximum number of retries, preserving them for debugging and reprocessing rather than losing them.
Question 7: Which Amazon EventBridge feature allows your team to capture events during an incident and replay them against remediation logic for post-incident validation?
- EventBridge Pipes
- EventBridge Schema Registry
- EventBridge Event Archive and Replay (Correct answer)
- EventBridge API Destinations
Correct answer: EventBridge Event Archive and Replay
EventBridge Event Archive captures a stream of events matching specified criteria, and Replay replays those archived events against an event bus, enabling post-incident testing and investigation.
AWS DevOps Incident and Event Response 1
Which AWS service provides a personalized view of the health of AWS services and sends notifications about events that might impact your specific resources?