AWS Certified Cloud Practitioner · Free Practice Question Medium
Question 50
According to the AWS Well-Architected Framework, what change management steps should be taken to achieve reliability in the AWS Cloud? (Select TWO.)
-
A
Use AWS Config to generate an inventory of AWS resources
-
B
Use AWS CloudTrail to record AWS API calls into an auditable log file
-
C
Use Amazon GuardDuty to record API activity to an S3 bucket
-
D
Use service limits to prevent users from creating or making changes to AWS resources
-
E
Use AWS Certificate Manager to create a catalog of approved services
Reveal correct answers
Correct answers: A, B
Explanation
AWS Config can be used to track the configuration state of your resources and how the state has changed over time. With CloudTrail you can audit who made what API calls on what resources at what time. This can help with identifying changes that cause reliability issues.
CORRECT: "Use AWS Config to generate an inventory of AWS resources" is the correct answer.
CORRECT: "Use AWS CloudTrail to record AWS API calls into an auditable log file" is the correct answer.
INCORRECT: "Use service limits to prevent users from creating or making changes to AWS resources" is incorrect. Service limits result in a maximum limit for launching resources, but you can still make changes to existing resources (so long as you don’t exceed the limit).
INCORRECT: "Use AWS Certificate Manager to create a catalog of approved services" is incorrect. Certificate manager is used for issuing and managing SSL/TLS certificates, it does not maintain a catalog of approved services.
INCORRECT: "Use Amazon GuardDuty to record API activity to an S3 bucket" is incorrect. GuardDuty does not record API activity to an S3 bucket.
References:
https://d1.awsstatic.com/whitepapers/architecture/AWS-Reliability-Pillar.pdf
Save time with our AWS cheat sheets:
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
