Systems Manager Incident Response Quiz

What you'll be asked

1. Which AWS Systems Manager feature is primarily used to automate incident response workflows by defining a sequence of actions to be taken on managed instances?
2. You want to trigger an automated response when an Amazon CloudWatch alarm indicates high CPU utilization on an EC2 instance. What is the standard way to initiate this integration?
3. When designing an incident response automation, why should you use the 'Approve' action within an Automation document?
4. A Systems Manager Automation document is failing to execute a command on a remote instance. Which of the following is the most likely cause?
5. You are automating an incident response that involves modifying a security group to block an attacking IP. If you need to ensure the automation document executes with specific permissions distinct from the user who triggered the incident, what should you configure?

Answers and explanations come after you submit.