Cram Quiz
Answer these questions. The answers follow the last question. If you cannot answer these questions correctly, consider reading this section again until you can.
1. You have been put in charge of selecting a monitoring system for your application. You are required to assess several monitoring platforms from a functional point of view. Which of the following factors should you look for in a modern monitoring system?
A. The ability to meter, view, graph, and analyze metrics and logs.
B. The ability to create and trigger alert conditions.
C. The ability to use MongoDB as the underlying database platform.
D. The ability of the platform to interact with external APIs.
2. You have been put in charge of selecting a monitoring system for your application. You are required to assess several monitoring platforms from a security point of view. Which of the following factors should you look for in a monitoring system when considering security and compliance? (Choose all that apply.)
A. The ability to collect, monitor, and analyze logs.
B. The ability to collect, monitor, and graph metrics.
C. The ability to trigger alerts.
D. All of these answers are correct.
1. Answer: A, B, and D are correct. Of all the choices, using a specific underlying database is not an important factor when determining the ability of the monitoring platform to be used in a modern application.
2. Answer: D is correct. You should use metrics and logs because they can both help you identify security events and maintain compliance. You also should use alerting to ensure any unusual events can be handled in the most prompt and appropriate manner.
This section covers the following official AWS Certified SysOps Administrator – Associate (SOA-C02) exam domain:
Domain 1: Monitoring, Logging, and Remediation
CramSaver
If you can correctly answer these questions before going through this section, save time by skimming the Exam Alerts in this section and then completing the Cram Quiz at the end of the section.
1. Name the types of metrics that can be collected by CloudWatch.
2. Which service would you use to analyze the cause of an issue that occurred within your application yesterday?
Answers
1. Answer: CloudWatch can collect standard, detailed, and custom metrics.
2. Answer: CloudWatch Logs Insights enables you to discover causes for past issues.
Amazon CloudWatch is one of the key services that you will need to understand if you want to pass the AWS Certified SysOps Administrator – Associate (SOA-C02) exam. CloudWatch allows you to collect metrics and logs; perform monitoring from within the AWS console or via the API; and create alerts that can send notifications, perform automated actions, and contact other services through their API.
Most AWS services, instances, and objects can output metrics and/or logs into CloudWatch. These are usually referred to as standard metrics, and some services can enable detailed metrics. Standard metrics are usually collected with an interval of five minutes, whereas the services that support detailed metrics enable you to collect the data in one-minute intervals. You can, however, also create custom metrics and logs in CloudWatch, which can help you implement a comprehensive approach to metering, monitoring, and alerting. Standard metrics are not associated with any cost, whereas detailed and custom metrics and logs do incur a small collection and storage charge. Custom metrics can also be easily collected and sent to CloudWatch via the AWS CloudWatch agent, which can be installed in your operating system on EC2 or on-premises.
All of the data you collect in CloudWatch is accessible directly in the AWS console and can also be addressed via the AWS CLI and the CloudWatch API. CloudWatch also has an alarms back end that can track both metrics and logs and perform notifications and interact with other services that can perform automated actions. For example, you can send messages through the Simple Notification Service (SNS) to an alert email and/or to an on-call individual through text messages. You can also trigger actions on other AWS services; for example, you can trigger AutoScaling actions on EC2 instances or trigger Lambda functions that can react to the event.
Data in CloudWatch is stored to a regional repository, meaning all monitoring for a region is completely isolated from any other regions and inherently highly available. For global applications monitoring, configurations can be automated through the CloudFormation service, which we cover in Chapter 7, “Provisioning Resources.”