Systems Manager Incident Response Quiz

Quiz covering Response Automation

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

1. 1

   Which AWS Systems Manager feature is primarily used to automate incident response workflows by defining a sequence of actions to be taken on managed instances?

2. 2

   You want to trigger an automated response when an Amazon CloudWatch alarm indicates high CPU utilization on an EC2 instance. What is the standard way to initiate this integration?

3. 3

   When designing an incident response automation, why should you use the 'Approve' action within an Automation document?

4. 4

   A Systems Manager Automation document is failing to execute a command on a remote instance. Which of the following is the most likely cause?

5. 5

   You are automating an incident response that involves modifying a security group to block an attacking IP. If you need to ensure the automation document executes with specific permissions distinct from the user who triggered the incident, what should you configure?