Task Statement 4.2: Audit, Monitor, and Analyze Logs and Metrics to Detect Issues. DOP-C02 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A DevOps team wants a single view to monitor the health of a web application. The view must show EC2 CPU utilization, ALB 5xx error counts, and the result of a custom health check that is published as a custom metric. The team wants to see all of this data on one screen. What should the team create?

   • AAn Amazon QuickSight analysis connected to the CloudWatch metrics.
   • BA single CloudWatch alarm with a composite expression that includes all three metrics.
   • CA CloudWatch dashboard with multiple widgets for the EC2, ALB, and custom metrics.
   • DAn AWS X-Ray service map showing the application's service graph.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A DevOps engineer manages a fleet of EC2 instances running a stateful application. The application's CPU utilization has a predictable daily pattern, but occasionally spikes for 5-10 minutes due to batch jobs. The engineer needs to be alerted only when CPU utilization deviates from the expected pattern, not on every spike. The batch jobs are known and expected. What should the engineer do?

   • ACreate a CloudWatch alarm on the CPUUtilization metric with a math expression that calculates the average over 24 hours.
   • BCreate a CloudWatch anomaly detection alarm on the CPUUtilization metric with an SNS topic as the action.
   • CUse an Amazon EventBridge rule to detect EC2 CPU utilization changes and invoke a Lambda function to send an alert.
   • DCreate a CloudWatch alarm with a static threshold of 80% CPU utilization and an SNS topic.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company's security policy requires that all S3 buckets have versioning enabled. A DevOps engineer needs to continuously audit the account to identify any bucket that does not comply with this policy and be notified when a non-compliant bucket is created. What should the engineer do?

   • ACreate an AWS Config rule using the managed rule 's3-bucket-versioning-enabled' and configure an SNS topic for the rule's non-compliant events.
   • BEnable S3 server access logging and analyze the logs with Athena to find buckets without versioning.
   • CCreate a CloudWatch Events rule that triggers on the CreateBucket API call and invoke a Lambda function to check the bucket's versioning status.
   • DUse Amazon Inspector to run a network reachability assessment on the S3 buckets.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which AWS service allows you to create a unified view of metrics and logs from multiple sources?

   • AAmazon QuickSight
   • BAWS CloudTrail
   • CAmazon CloudWatch Dashboards
   • DAmazon Athena
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary purpose of an Amazon CloudWatch anomaly detection band?

   • ATo encrypt metric data at rest
   • BTo define the expected range of values for a metric over time
   • CTo store metric data for long-term archival
   • DTo visualize metrics on a dashboard
   Reveal Solution Discussion Select an answer first