Question 1

Pricing is ____ consumed for EC2 instances.

Accepted Answer

A)  per instance-hour only 
B)  per instance-minute or instance-hour 
C)  per instance-second or per instance-hour 
D)  per instance-minute only 
A)  per instance-hour only 
B)  per instance-minute or instance-hour 
C)  per instance-second or per instance-hour 
D)  per instance-minute only

Question 2

A user has set the Alarm for the CPU utilization > 50%. Due to an internal process, the current CPU utilization will be 80% for 6 hours. How can the user ensure that the CloudWatch alarm does not perform any action?

Accepted Answer

A)  The user can disable the alarm using the DisableAlarmActions API. 
B)  The user can set CloudWatch in a sleep state using the CLI mon-sleep-alarm-action. 
C)  The user can pause the alarm from the console. 
D)  The user cannot stop the alarm from performing an action unless the alarm is deleted. 
A)  The user can disable the alarm using the DisableAlarmActions API. 
B)  The user can set CloudWatch in a sleep state using the CLI mon-sleep-alarm-action. 
C)  The user can pause the alarm from the console. 
D)  The user cannot stop the alarm from performing an action unless the alarm is deleted.

Question 3

A SysOps Administrator has written an AWS Lambda function to launch new Amazon EC2 instances and deployed it in the us-east-1 region. The Administrator tested it by launching a new t2.nano instance in the us-east-1 region and it performed as expected. However, when the region name was updated in the Lambda function to launch an EC2 instance in the us-west-1 region, it failed. What is causing this error?

Accepted Answer

A)  The AMI ID must be updated for the us-west-1 region in the Lambda function as well 
B)  The Lambda function can only launch EC2 instances in the same region where it is deployed 
C)  The Lambda function does not have the necessary IAM permission to launch more than one EC2 instance 
D)  The instance type defined in the Lambda function is not available in the us-west-1 region 
A)  The AMI ID must be updated for the us-west-1 region in the Lambda function as well 
B)  The Lambda function can only launch EC2 instances in the same region where it is deployed 
C)  The Lambda function does not have the necessary IAM permission to launch more than one EC2 instance 
D)  The instance type defined in the Lambda function is not available in the us-west-1 region

Question 4

A company's IT Security team is performing an audit of the AWS environment to determine which servers need to be patched and where additional security controls need to be added. The company is responsible for which of the following? (Choose two.)

Accepted Answer

A)  Patching the OS on Amazon RDS instances 
B)  Patching the OS on Amazon EC2 instances 
C)  Enabling server-side encryption with Amazon S3-Managed Keys (SSE-S3) on S3 objects 
D)  Patching the database engine on RDS instances 
E)  Patching PHP in an AWS Elastic Beanstalk managed EC2 application 
A)  Patching the OS on Amazon RDS instances 
B)  Patching the OS on Amazon EC2 instances 
C)  Enabling server-side encryption with Amazon S3-Managed Keys (SSE-S3) on S3 objects 
D)  Patching the database engine on RDS instances 
E)  Patching PHP in an AWS Elastic Beanstalk managed EC2 application

Question 5

Which of the following are characteristics of Amazon VPC subnets? (Choose two.)

Accepted Answer

A)  Each subnet maps to a single Availability Zone 
B)  A CIDR block mask of /25 is the smallest range supported 
C)  Instances in a private subnet can communicate with the internet only if they have an Elastic IP. 
D)  By default, all subnets can route between each other, whether they are private or public 
E)  V Each subnet spans at least 2 Availability zones to provide a high-availability environment 
A)  Each subnet maps to a single Availability Zone 
B)  A CIDR block mask of /25 is the smallest range supported 
C)  Instances in a private subnet can communicate with the internet only if they have an Elastic IP. 
D)  By default, all subnets can route between each other, whether they are private or public 
E)  V Each subnet spans at least 2 Availability zones to provide a high-availability environment

Question 6

A user has configured an ELB to distribute the traffic among multiple instances. The user instances are facing some issues due to the back-end servers. Which of the below mentioned CloudWatch metrics helps the user understand the issue with the instances?

Accepted Answer

A)  HTTPCode_Backend_3XX 
B)  HTTPCode_Backend_4XX 
C)  HTTPCode_Backend_2XX 
D)  HTTPCode_Backend_5XX 
A)  HTTPCode_Backend_3XX 
B)  HTTPCode_Backend_4XX 
C)  HTTPCode_Backend_2XX 
D)  HTTPCode_Backend_5XX

Question 7

Is it possible to publish your own metrics to CloudWatch?

Accepted Answer

A)  Yes, but only if the data is aggregated. 
B)  No, it is not possible. 
C)  No, metrics are in-built and cannot be defined explicitly. 
D)  Yes, it can be done by using the put-metric-data command. 
A)  Yes, but only if the data is aggregated. 
B)  No, it is not possible. 
C)  No, metrics are in-built and cannot be defined explicitly. 
D)  Yes, it can be done by using the put-metric-data command.

Question 8

An application is running on Amazon EC2 instances and storing all application data in Amazon S3. The company wants to archive all files older than 30 days to reduce costs. Archived files are used for auditing purposes only; however, the audit team may need to retrieve files in under a minute. How should the SysOps administrator implement these requirements?

Accepted Answer

A)  Configure an S3 bucket policy to move all objects older than 30 days to S3 Standard-Infrequent Access (S3 Standard-I
A) . 
B)  Create a lifecycle rule to move all objects older than 30 days to S3 Glacier. 
C)  Create a lifecycle rule to move all objects older than 30 days to S3 Standard-Infrequent Access (S3 Standard-I
A) . 
D)  Use S3 Intelligent-Tiering to move files older than 30 days to S3 Glacier Deep Archive. 
A)  Configure an S3 bucket policy to move all objects older than 30 days to S3 Standard-Infrequent Access (S3 Standard-I
A) . 
B)  Create a lifecycle rule to move all objects older than 30 days to S3 Glacier. 
C)  Create a lifecycle rule to move all objects older than 30 days to S3 Standard-Infrequent Access (S3 Standard-I
A) . 
D)  Use S3 Intelligent-Tiering to move files older than 30 days to S3 Glacier Deep Archive.

Question 9

A company has Amazon EC2 instances that serve web content behind an Elastic Load Balancing (ELB) load balancer. The ELB Amazon CloudWatch metrics from a few hours ago indicate a significant number of 4XX errors. The EC2 instances from the time of these errors have been deleted. At the time of the 4XX errors, how can an Administrator obtain information about who originated these requests?

Accepted Answer

A)  If ELB access logs have been enabled, the information can be retrieved from the S3 bucket 
B)  Contact AWS Support to obtain application logs from the deleted instances 
C)  Amazon S3 always keeps a backup of application logs from EC2 instances. Retrieve these logs for analysis 
D)  Use AWS Trusted Advisor to obtain ELB access logs 
A)  If ELB access logs have been enabled, the information can be retrieved from the S3 bucket 
B)  Contact AWS Support to obtain application logs from the deleted instances 
C)  Amazon S3 always keeps a backup of application logs from EC2 instances. Retrieve these logs for analysis 
D)  Use AWS Trusted Advisor to obtain ELB access logs

Question 10

A SysOps Administration team is supporting an application that stores a configuration file in an Amazon S3 bucket. Previous revisions of the configuration file must be maintained for change control and rollback. How should the S3 bucket be configured to meet these requirements?

Accepted Answer

A)  Enable a lifecycle policy on the S3 bucket. 
B)  Enable cross-origin resource sharing on the S3 bucket. 
C)  Enable object tagging on the S3 bucket. 
D)  Enable versioning on the S3 bucket. 
A)  Enable a lifecycle policy on the S3 bucket. 
B)  Enable cross-origin resource sharing on the S3 bucket. 
C)  Enable object tagging on the S3 bucket. 
D)  Enable versioning on the S3 bucket.

Question 11

A SysOps Administrator wants to prevent Developers from accidentally terminating Amazon EC2 instances. How can this be accomplished?

Accepted Answer

A)  Use AWS Systems Manager to restrict EC2 termination 
B)  Use AWS Config to restrict EC2 termination 
C)  Apply Amazon CloudWatch Events to prevent EC2 termination 
D)  Enable termination protection on EC2 instances 
A)  Use AWS Systems Manager to restrict EC2 termination 
B)  Use AWS Config to restrict EC2 termination 
C)  Apply Amazon CloudWatch Events to prevent EC2 termination 
D)  Enable termination protection on EC2 instances

Question 12

A user has created a VPC with public and private subnets using the VPC wizard. Which of the below mentioned statements is not true in this scenario?

Accepted Answer

A)  The VPC will create a routing instance and attach it with a public subnet 
B)  The VPC will create two subnets 
C)  The VPC will create one internet gateway and attach it to VPC 
D)  The VPC will launch one NAT instance with an elastic IP 
A)  The VPC will create a routing instance and attach it with a public subnet 
B)  The VPC will create two subnets 
C)  The VPC will create one internet gateway and attach it to VPC 
D)  The VPC will launch one NAT instance with an elastic IP

Question 13

ABC (with AWS account ID 111122223333) has created 50 IAM users for its organization's employees. What will be the AWS console URL for these associates?

Accepted Answer

A)  https://signin.aws.amazon.com/console/111122223333/ 
B)  https://111122223333.signin.aws.amazon.com/console/ 
C)  https://signin.aws.amazon.com/111122223333/console/ 
D)  https://signin.aws.amazon.com/console/ 
A)  https://signin.aws.amazon.com/console/111122223333/ 
B)  https://111122223333.signin.aws.amazon.com/console/ 
C)  https://signin.aws.amazon.com/111122223333/console/ 
D)  https://signin.aws.amazon.com/console/

Question 14

A user is trying to create a PIOPS EBS volume with 8 GB size and 200 IOPS. Will AWS create the volume?

Accepted Answer

A)  Yes, since the ratio between EBS and IOPS is less than 30 
B)  No, since the PIOPS and EBS size ratio is less than 30 
C)  No, the EBS size is less than 10 GB 
D)  Yes, since PIOPS is higher than 100 
A)  Yes, since the ratio between EBS and IOPS is less than 30 
B)  No, since the PIOPS and EBS size ratio is less than 30 
C)  No, the EBS size is less than 10 GB 
D)  Yes, since PIOPS is higher than 100

Question 15

A user has launched an EBS backed instance with EC2-Classic. The user stops and starts the instance. Which of the below mentioned statements is not true with respect to the stop/start action?

Accepted Answer

A)  The instance gets new private and public IP addresses 
B)  The volume is preserved 
C)  The Elastic IP remains associated with the instance 
D)  The instance may run on a new host computer 
A)  The instance gets new private and public IP addresses 
B)  The volume is preserved 
C)  The Elastic IP remains associated with the instance 
D)  The instance may run on a new host computer

Question 16

An application accesses data through a file system interface. The application runs on Amazon EC2 instances in multiple Availability Zones, all of which must share the same data. While the amount of data is currently small, the company anticipates that it will grow to tens of terabytes over the lifetime of the application. What is the MOST scalable storage solution to fulfill the requirement?

Accepted Answer

A)  Connect a large Amazon EBS volume to multiple instances and schedule snapshots. 
B)  Deploy Amazon EFS is in the VPC and create mount targets in multiple subnets. 
C)  Launch an EC2 instance and share data using SMB/CIFS or NFS. 
D)  Deploy an AWS Storage Gateway cached volume on Amazon EC2. 
A)  Connect a large Amazon EBS volume to multiple instances and schedule snapshots. 
B)  Deploy Amazon EFS is in the VPC and create mount targets in multiple subnets. 
C)  Launch an EC2 instance and share data using SMB/CIFS or NFS. 
D)  Deploy an AWS Storage Gateway cached volume on Amazon EC2.

Question 17

A SysOps Administrator is notified that a security vulnerability affects a version of MySQL that is being used with Amazon RDS MySQL. Who is responsible for ensuring that the patch is applied to the MySQL cluster?

Accepted Answer

A)  The database vendor 
B)  The Security department of the SysOps Administrator's company 
C)  AWS 
D)  The SysOps Administrator 
A)  The database vendor 
B)  The Security department of the SysOps Administrator's company 
C)  AWS 
D)  The SysOps Administrator

Question 18

In Amazon EC2, can you create an EBS volume from a snapshot and attach it to another instance?

Accepted Answer

A)  No, you cannot attach EBS volumes to an instance. 
B)  Yes, you can but only if the volume is larger than 2TB. 
C)  No, you can't create an EBS volume from a snapshot. 
D)  Yes, you can. 
A)  No, you cannot attach EBS volumes to an instance. 
B)  Yes, you can but only if the volume is larger than 2TB. 
C)  No, you can't create an EBS volume from a snapshot. 
D)  Yes, you can.

Question 19

A user has created a VPC with CIDR 20.0.0.0/16. The user has created public and VPN only subnets along with hardware VPN access to connect to the user's datacenter. The user wants to make so that all traffic coming to the public subnet follows the organization's proxy policy. How can the user make this happen?

Accepted Answer

A)  Setting up a NAT with the proxy protocol and configure that the public subnet receives traffic from NAT 
B)  Setting up a proxy policy in the internet gateway connected with the public subnet 
C)  It is not possible to setup the proxy policy for a public subnet 
D)  Setting the route table and security group of the public subnet which receives traffic from a virtual private gateway 
A)  Setting up a NAT with the proxy protocol and configure that the public subnet receives traffic from NAT 
B)  Setting up a proxy policy in the internet gateway connected with the public subnet 
C)  It is not possible to setup the proxy policy for a public subnet 
D)  Setting the route table and security group of the public subnet which receives traffic from a virtual private gateway

Question 20

A company needs to restrict access to an Amazon S3 bucket to Amazon EC2 instances in a VPC only. All traffic must be over the AWS private network. What actions should the SysOps Administrator take to meet these requirements?

Accepted Answer

A)  Create a VPC endpoint for the S3 bucket, and create an IAM policy that conditionally limits all S3 actions on the bucket to the VPC endpoint as the source. 
B)  Create a VPC endpoint for the S3 bucket, and create a S3 bucket policy that conditionally limits all S3 actions on the bucket to the VPC endpoint as the source. 
C)  Create a service-linked role for Amazon EC2 that allows the EC2 instances to interact directly with Amazon S3, and attach an IAM policy to the role that allows the EC2 instances full access to the S3 bucket. 
D)  Create a NAT gateway in the VPC, and modify the VPC route table to route all traffic destined for Amazon S3 through the NAT gateway. 
A)  Create a VPC endpoint for the S3 bucket, and create an IAM policy that conditionally limits all S3 actions on the bucket to the VPC endpoint as the source. 
B)  Create a VPC endpoint for the S3 bucket, and create a S3 bucket policy that conditionally limits all S3 actions on the bucket to the VPC endpoint as the source. 
C)  Create a service-linked role for Amazon EC2 that allows the EC2 instances to interact directly with Amazon S3, and attach an IAM policy to the role that allows the EC2 instances full access to the S3 bucket. 
D)  Create a NAT gateway in the VPC, and modify the VPC route table to route all traffic destined for Amazon S3 through the NAT gateway.

Pricing is ____ consumed for EC2 instances.

A user has set the Alarm for the CPU utilization > 50%. Due to an internal process, the current CPU utilization will be 80% for 6 hours. How can the user ensure that the CloudWatch alarm does not perform any action?

A company's IT Security team is performing an audit of the AWS environment to determine which servers need to be patched and where additional security controls need to be added. The company is responsible for which of the following? (Choose two.)

Which of the following are characteristics of Amazon VPC subnets? (Choose two.)

A user has configured an ELB to distribute the traffic among multiple instances. The user instances are facing some issues due to the back-end servers. Which of the below mentioned CloudWatch metrics helps the user understand the issue with the instances?

Is it possible to publish your own metrics to CloudWatch?

A SysOps Administration team is supporting an application that stores a configuration file in an Amazon S3 bucket. Previous revisions of the configuration file must be maintained for change control and rollback. How should the S3 bucket be configured to meet these requirements?

A SysOps Administrator wants to prevent Developers from accidentally terminating Amazon EC2 instances. How can this be accomplished?

A user has created a VPC with public and private subnets using the VPC wizard. Which of the below mentioned statements is not true in this scenario?

ABC (with AWS account ID 111122223333) has created 50 IAM users for its organization's employees. What will be the AWS console URL for these associates?

A user is trying to create a PIOPS EBS volume with 8 GB size and 200 IOPS. Will AWS create the volume?

A user has launched an EBS backed instance with EC2-Classic. The user stops and starts the instance. Which of the below mentioned statements is not true with respect to the stop/start action?

A SysOps Administrator is notified that a security vulnerability affects a version of MySQL that is being used with Amazon RDS MySQL. Who is responsible for ensuring that the patch is applied to the MySQL cluster?

In Amazon EC2, can you create an EBS volume from a snapshot and attach it to another instance?

A company needs to restrict access to an Amazon S3 bucket to Amazon EC2 instances in a VPC only. All traffic must be over the AWS private network. What actions should the SysOps Administrator take to meet these requirements?

AWS Certified Advanced Networking - Specialty (ANS-C00)

AWS Certified Alexa Skill Builder - Specialty

AWS Certified Cloud Practitioner (CLF-C01)

AWS Certified Data Analytics - Specialty (DAS-C01)

AWS Certified Database - Specialty

AWS Certified Developer Associate (DVA-C01)

AWS Certified Machine Learning - Specialty (MLS-C01)

AWS Certified Security - Specialty (SCS-C01)

AWS Certified Solutions Architect - Associate SAA-C02

AWS Certified Solutions Architect - Professional (SAP-C01)

AWS Certified SysOps Administrator - Associate (SOA-C02)

AWS DevOps Engineer - Professional (DOP-C01)

Filters

Exam 13: AWS Certified SysOps Administrator (SOA-C01)

Pricing is ____ consumed for EC2 instances.

A user has set the Alarm for the CPU utilization > 50%. Due to an internal process, the current CPU utilization will be 80% for 6 hours. How can the user ensure that the CloudWatch alarm does not perform any action?

A company's IT Security team is performing an audit of the AWS environment to determine which servers need to be patched and where additional security controls need to be added. The company is responsible for which of the following? (Choose two.)

Which of the following are characteristics of Amazon VPC subnets? (Choose two.)

A user has configured an ELB to distribute the traffic among multiple instances. The user instances are facing some issues due to the back-end servers. Which of the below mentioned CloudWatch metrics helps the user understand the issue with the instances?

Is it possible to publish your own metrics to CloudWatch?

A SysOps Administration team is supporting an application that stores a configuration file in an Amazon S3 bucket. Previous revisions of the configuration file must be maintained for change control and rollback. How should the S3 bucket be configured to meet these requirements?

A SysOps Administrator wants to prevent Developers from accidentally terminating Amazon EC2 instances. How can this be accomplished?

A user has created a VPC with public and private subnets using the VPC wizard. Which of the below mentioned statements is not true in this scenario?

ABC (with AWS account ID 111122223333) has created 50 IAM users for its organization's employees. What will be the AWS console URL for these associates?

A user is trying to create a PIOPS EBS volume with 8 GB size and 200 IOPS. Will AWS create the volume?

A user has launched an EBS backed instance with EC2-Classic. The user stops and starts the instance. Which of the below mentioned statements is not true with respect to the stop/start action?

A SysOps Administrator is notified that a security vulnerability affects a version of MySQL that is being used with Amazon RDS MySQL. Who is responsible for ensuring that the patch is applied to the MySQL cluster?

In Amazon EC2, can you create an EBS volume from a snapshot and attach it to another instance?

A company needs to restrict access to an Amazon S3 bucket to Amazon EC2 instances in a VPC only. All traffic must be over the AWS private network. What actions should the SysOps Administrator take to meet these requirements?

AWS Certified Advanced Networking - Specialty (ANS-C00)

AWS Certified Alexa Skill Builder - Specialty

AWS Certified Cloud Practitioner (CLF-C01)

AWS Certified Data Analytics - Specialty (DAS-C01)

AWS Certified Database - Specialty

AWS Certified Developer Associate (DVA-C01)

AWS Certified Machine Learning - Specialty (MLS-C01)

AWS Certified Security - Specialty (SCS-C01)

AWS Certified Solutions Architect - Associate SAA-C02

AWS Certified Solutions Architect - Professional (SAP-C01)

AWS Certified SysOps Administrator - Associate (SOA-C02)

AWS DevOps Engineer - Professional (DOP-C01)

Filters