Topic 1 Question 268
3 つ選択A company recently migrated its application to an Amazon Elastic Kubernetes Service (Amazon EKS) cluster that uses Amazon EC2 instances. The company configured the application to automatically scale based on CPU utilization.
The application produces memory errors when it experiences heavy loads. The application also does not scale out enough to handle the increased load. The company needs to collect and analyze memory metrics for the application over time.
Which combination of steps will meet these requirements?
Attach the CloudWatchAgentServerPolicy managed IAM policy to the IAM instance profile that the cluster uses.
Attach the CloudWatchAgentServerPolicy managed IAM policy to a service account role for the cluster.
Collect performance metrics by deploying the unified Amazon CloudWatch agent to the existing EC2 instances in the cluster. Add the agent to the AMI for any new EC2 instances that are added to the cluster.
Collect performance logs by deploying the AWS Distro for OpenTelemetry collector as a DaemonSet.
Analyze the pod_memory_utilization Amazon CloudWatch metric in the ContainerInsights namespace by using the Service dimension.
Analyze the node_memory_utilization Amazon CloudWatch metric in the ContainerInsights namespace by using the ClusterName dimension.
ユーザの投票
コメント(6)
- 正解だと思う選択肢: ACE
A. This policy grants the necessary permissions for the Amazon CloudWatch agent to collect and publish metrics from the EC2 instances. C. The unified Amazon CloudWatch agent can collect both CPU and memory utilization metrics. Deploying it ensures you capture memory metrics across all EC2 instances in the EKS cluster. E. pod_memory_utilization metric provides detailed insights into memory usage at the pod level
B. service account role is more relevant for applications running within Kubernetes pods needing AWS permissions. D irrelevant F Node-level metrics do not provide the granularity needed to diagnose pod-level memory issues effectively
👍 9trungtd2024/07/14 - 正解だと思う選択肢: ACE
After check, feel Option A better
- provides necessary permissions at the EC2 instance level, which is where the CloudWatch agent runs.
- is directly suitable for metrics collection because it ensures that EC2 instances can send metrics to CloudWatch. The CloudWatch agent on the EC2 instances needs the IAM policy to push metrics and logs to CloudWatch.
Hope someone can explain further if choose option B instead of A.
👍 4jamesf2024/07/31 - 正解だと思う選択肢: ACE
vote for ACE
👍 3[Removed]2024/08/20
シャッフルモード