README.md

Governance

Where and in what form are CloudTrail logs stored by default?

In S3, encrypted.

Distinct locations from within an AWS region that are engineered to be isolated from failures are called _____

Availability Zones

Auditing user access/API calls etc across the entire AWS estate can be achieved by using AWS _____

CloudTrail

Your application is scaling up and down multiple times an hour. To fix this, you could modify the Auto Scaling Group's _____ timers.

cooldown

You can create templates for EC2 instances via _____

CloudFormation

If you have existing infrastructure, AWS _____ can generate a CloudFormation template out of it.

CloudFormer

You delete a CloudFormation stack. What happens to the resources it had previously created?

They are removed with it

The AWS service for auditing the state of your infrastructure is called _____

AWS Config

The AWS tool that provides help to provision your resources following best practices, optimize your infrastructure, security, costs and performance is called _____

Trusted Advisor

CloudWatch metric data is kept for _____

2 weeks

In CloudFormation, can you define a specific IP address for an EC2 instance?

Yes

What metric can be used to monitor a web application's quality of service? (e.g. user's page load time)

The application's ELB latency

What is the typical frequency of metric updates you receive via CloudWatch?

Every 5 minutes (on AWS Free Tier)

Can CloudWatch work with SNS (Simple Notification Service)?

Yes

The AWS service for centralized performance metrics and logs is called _____

CloudWatch

The AWS service for API and user access logging is called _____

CloudTrail

Does CloudWatch provide metrics on CPU utilization?

Yes

Does CloudWatch provide metrics on network utilization?

Yes

Does CloudWatch monitor EC2 at OS level?

No - at hypervisor level.

CloudHSM has both _____ and _____ tamper detection.

physical  logical

VPN connection is charged per _____

hour

AWS resources are uniquely identified by their _____.

Amazon Resource Name (ARN)

Can you set different filters in CloudWatch based on an S3 object tag?

Yes

CloudFormation scripts are written in _____ format.

YAML / JSON

AWS _____ can be used to implement Chef recipes.

Opsworks