Examkin

Soru

Zorluk: ZorAWS Management, Governance, and Developer Tools

An organization is designing a governance and monitoring strategy on AWS. They need to meet the following operational requirements:

1. Continuously evaluate and audit resource configurations against predefined security policies (such as verifying that all EBS volumes are encrypted).
2. Collect, track, and analyze performance metrics from their cloud resources, and configure automated alarms if utilization exceeds specific thresholds.

Which of the following AWS services should the organization select to meet these requirements? (Select TWO.)

  1. AWS ConfigCevap
  2. Amazon CloudWatchCevap
  3. C
    AWS CloudTrail
  4. D
    AWS CloudFormation
  5. E
    AWS Artifact

Cevap

AWS Config and Amazon CloudWatch
AWS Config allows organizations to continuously evaluate and audit their resource configurations against compliance rules, such as verifying encryption. Amazon CloudWatch collects, monitors, and analyzes operational metrics from resources, enabling users to set up real-time alarms for metric thresholds like high CPU usage.

Adım Adım Çözüm

1
Analyze the first requirement: continuously evaluating and auditing resource configurations against policies.
AWS Config is the designated service that tracks configuration history and evaluates compliance against custom or managed rules.
This addresses the auditing aspect of resource states, such as checking if storage volumes are encrypted.
2
Analyze the second requirement: collecting performance metrics and configuring alarms based on usage thresholds.
Amazon CloudWatch collects performance metrics (like CPU usage) and allows users to set up alerts via CloudWatch Alarms.
This addresses the operational monitoring and alerting requirements.
3
Evaluate the distractors to verify why they do not meet the core criteria.
AWS CloudTrail tracks actions but not performance metrics, AWS CloudFormation deploys resources but does not monitor them, and AWS Artifact delivers compliance agreements rather than configuration rules.
Ensures the selected pair is the only combination that fully addresses the scenario.

Anahtar Kavram

Understanding the difference between configuration compliance tools (AWS Config), performance monitoring systems (Amazon CloudWatch), and event audit logging (AWS CloudTrail).
Bu soruyu puanla

Konular

AWS Management, Governance, and Developer Tools

Bu konudan daha fazla soru