Question 1

In regard to AWS CloudFormation, to pass values to your template at runtime you should use ____________.

Accepted Answer

A)  parameters 
B)  conditions 
C)  resources 
D)  mapping 
A)  parameters 
B)  conditions 
C)  resources 
D)  mapping

Question 2

A sysops administrator has an AWS Lambda function that performs maintenance on various AWS resources. This function must be run nightly. Which is the MOST cost-effective solution?

Accepted Answer

A)  Launch a single t2.nano Amazon EC2 instance and create a Linux cron job to invoke the Lambda function at the same time every night. 
B)  Set up an Amazon CloudWatch metrics alarm to invoke the Lambda function at the same time every night. 
C)  Schedule an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke the Lambda function at the same time every night. 
D)  Implement a Chef recipe in AWS OpsWorks stack to invoke the Lambda function at the same time every night. 
A)  Launch a single t2.nano Amazon EC2 instance and create a Linux cron job to invoke the Lambda function at the same time every night. 
B)  Set up an Amazon CloudWatch metrics alarm to invoke the Lambda function at the same time every night. 
C)  Schedule an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke the Lambda function at the same time every night. 
D)  Implement a Chef recipe in AWS OpsWorks stack to invoke the Lambda function at the same time every night.

Question 3

After installing and configuring the Amazon CloudWatch agent on an EC2 instance, the anticipated system logs are not being received by CloudWatch Logs. Which of the following are likely to be the cause of this problem? (Select TWO.)

Accepted Answer

A)  A custom of third-party solution for logs is being used. 
B)  The IAM role attached to the EC2 instance does not have the proper permissions. 
C)  The CloudWatch agent does not support the operating system used. 
D)  A billing constraint is limiting the number of CloudWatch Logs within this account. 
E)  The EC2 instance is in a private subnet, and the VPC does not have a NAT gateway. 
A)  A custom of third-party solution for logs is being used. 
B)  The IAM role attached to the EC2 instance does not have the proper permissions. 
C)  The CloudWatch agent does not support the operating system used. 
D)  A billing constraint is limiting the number of CloudWatch Logs within this account. 
E)  The EC2 instance is in a private subnet, and the VPC does not have a NAT gateway.

Question 4

What is a placement group in Amazon EC2?

Accepted Answer

A)  It is a logical grouping of EC2 instances within a single Availability Zone. 
B)  It the edge location of your web content. 
C)  It is a group used to span multiple Availability Zones. 
D)  It is the AWS region where you run the EC2 instance of your web content. 
A)  It is a logical grouping of EC2 instances within a single Availability Zone. 
B)  It the edge location of your web content. 
C)  It is a group used to span multiple Availability Zones. 
D)  It is the AWS region where you run the EC2 instance of your web content.

Question 5

If you want to launch Amazon Elastic Compute Cloud (EC2) Instances and assign each Instance a predetermined private IP address you should:

Accepted Answer

A)  Assign a group or sequential Elastic IP address to the instances 
B)  Launch the instances in a Placement Group 
C)  Launch the instances in the Amazon virtual Private Cloud (VP
C) . 
D)  Use standard EC2 instances since each instance gets a private Domain Name Service (DNS) already 
E)  Launch the Instance from a private Amazon Machine image (Mil) 
A)  Assign a group or sequential Elastic IP address to the instances 
B)  Launch the instances in a Placement Group 
C)  Launch the instances in the Amazon virtual Private Cloud (VP
C) . 
D)  Use standard EC2 instances since each instance gets a private Domain Name Service (DNS) already 
E)  Launch the Instance from a private Amazon Machine image (Mil)

Question 6

What are characteristics of Amazon S3? (Choose two.)

Accepted Answer

A)  Objects are directly accessible via a URL 
B)  S3 should be used to host a relational database 
C)  S3 allows you to store objects or virtually unlimited size 
D)  S3 allows you to store virtually unlimited amounts of data 
E)  S3 offers Provisioned IOPS 
A)  Objects are directly accessible via a URL 
B)  S3 should be used to host a relational database 
C)  S3 allows you to store objects or virtually unlimited size 
D)  S3 allows you to store virtually unlimited amounts of data 
E)  S3 offers Provisioned IOPS

Question 7

A company has a web application that is experiencing performance problems many times each night. A root cause analysis reveals spikes in CPU utilization that last 5 minutes on an Amazon EC2 Linux instance. A SysOps administrator is tasked with finding the process ID (PID) of the service or process that is consuming more CPU. How can the administrator accomplish this with the LEAST amount of effort?

Accepted Answer

A)  Configure an AWS Lambda function in Python 3.7 to run every minute to capture the PID and send a notification. 
B)  Configure the procstat plugin to collect and send CPU metrics for the running processes. 
C)  Log in to the EC2 Linux instance using a .pem key each night and then run the top command. 
D)  Use the default Amazon CloudWatch CPU utilization metric to capture the PID in the CloudWatch dashboard. 
A)  Configure an AWS Lambda function in Python 3.7 to run every minute to capture the PID and send a notification. 
B)  Configure the procstat plugin to collect and send CPU metrics for the running processes. 
C)  Log in to the EC2 Linux instance using a .pem key each night and then run the top command. 
D)  Use the default Amazon CloudWatch CPU utilization metric to capture the PID in the CloudWatch dashboard.

Question 8

What is Amazon CloudFront?

Accepted Answer

A)  A global Content Delivery Network 
B)  An encrypted endpoint to upload files to the Cloud 
C)  A web service to schedule regular data movement 
D)  A development front-end to Amazon Web Services 
A)  A global Content Delivery Network 
B)  An encrypted endpoint to upload files to the Cloud 
C)  A web service to schedule regular data movement 
D)  A development front-end to Amazon Web Services

Question 9

A SysOps Administrator is troubleshooting Amazon EC2 connectivity issues to the internet. The EC2 instance is in a private subnet. Below is the route table that is applied to the subnet of the EC2 instance. Destination - 10.2.0.0/16 Target - local Status - Active Propagated - No Destination - 0.0.0.0/0 Target - nat-xxxxxxx Status - Blackhole What has caused the connectivity issue?

Accepted Answer

A)  The NAT gateway no longer exists. 
B)  There is no route to the internet gateway. 
C)  The routes are no longer propagating. 
D)  There is no route rule with a destination for the internet. 
A)  The NAT gateway no longer exists. 
B)  There is no route to the internet gateway. 
C)  The routes are no longer propagating. 
D)  There is no route rule with a destination for the internet.

Question 10

Each SysOps Administrator at a company has a unique IAM user account. Each user is a member of the SysOps IAM group that has an IAM policy applied. A recent change to the IT security policy states that employees must now use their on-premises Active Directory user accounts to access the AWS Management Console. Which solution should be used to satisfy these requirements?

Accepted Answer

A)  Configure the on-premises Active Directory to use AWS Direct Connect. 
B)  Enable an Active Directory federation in an Amazon Route 53 private zone. 
C)  Implement a VPN tunnel and configure an Active Directory connector. 
D)  Implement multi-factor authentication for IAM and Active Directory. 
A)  Configure the on-premises Active Directory to use AWS Direct Connect. 
B)  Enable an Active Directory federation in an Amazon Route 53 private zone. 
C)  Implement a VPN tunnel and configure an Active Directory connector. 
D)  Implement multi-factor authentication for IAM and Active Directory.

Question 11

A serverless application running on AWS Lambda is expected to receive a significant increase in traffic. A SysOps Administrator needs to ensure that the Lambda function is configured to scale so the application can process the increased traffic. What should the Administrator do to accomplish this?

Accepted Answer

A)  Attach additional elastic network interfaces to the Lambda function 
B)  Configure AWS Application Auto Scaling based on the Amazon CloudWatch Lambda metric for the number of invocations 
C)  Ensure the concurrency limit for the Lambda function is higher than the expected simultaneous function executions 
D)  Increase the memory available to the Lambda function 
A)  Attach additional elastic network interfaces to the Lambda function 
B)  Configure AWS Application Auto Scaling based on the Amazon CloudWatch Lambda metric for the number of invocations 
C)  Ensure the concurrency limit for the Lambda function is higher than the expected simultaneous function executions 
D)  Increase the memory available to the Lambda function

Question 12

A SysOps Administrator must remove public IP addresses from all Amazon EC2 instances to prevent exposure to the internet. However, many corporate applications running on those EC2 instances need to access Amazon S3 buckets. The Administrator is tasked with allowing the EC2 instances to continue to access the S3 buckets. Which solutions can be used? (Choose two.)

Accepted Answer

A)  Deploy a NAT gateway, and configure the route tables accordingly in the VPC where the EC2 instances are running. 
B)  Modify the network ACLs with private IP addresses in the routes to connect to Amazon S3. 
C)  Modify the security groups on the EC2 instances with private IP addresses in the routes to connect to Amazon S3. 
D)  Set up AWS Direct Connect, and configure a virtual interface between the EC2 instances and the S3 buckets. 
E)  Set up a VPC endpoint in the VPC where the EC2 instances are running, and configure the route tables accordingly. 
A)  Deploy a NAT gateway, and configure the route tables accordingly in the VPC where the EC2 instances are running. 
B)  Modify the network ACLs with private IP addresses in the routes to connect to Amazon S3. 
C)  Modify the security groups on the EC2 instances with private IP addresses in the routes to connect to Amazon S3. 
D)  Set up AWS Direct Connect, and configure a virtual interface between the EC2 instances and the S3 buckets. 
E)  Set up a VPC endpoint in the VPC where the EC2 instances are running, and configure the route tables accordingly.

Question 13

A user has launched an EC2 instance from an instance store backed AMI. The user has attached an additional instance store volume to the instance. The user wants to create an AMI from the running instance. Will the AMI have the additional instance store volume data?

Accepted Answer

A)  Yes, the block device mapping will have information about the additional instance store volume 
B)  No, since the instance store backed AMI can have only the root volume bundled 
C)  It is not possible to attach an additional instance store volume to the existing instance store backed AMI instance 
D)  No, since this is ephermal storage it will not be a part of the AMI 
A)  Yes, the block device mapping will have information about the additional instance store volume 
B)  No, since the instance store backed AMI can have only the root volume bundled 
C)  It is not possible to attach an additional instance store volume to the existing instance store backed AMI instance 
D)  No, since this is ephermal storage it will not be a part of the AMI

Question 14

An admin is planning to monitor the ELB. Which of the below mentioned services does not help the admin capture the monitoring information about the ELB activity?

Accepted Answer

A)  ELB Access logs 
B)  ELB health check 
C)  CloudWatch metrics 
D)  ELB API calls with CloudTrail 
A)  ELB Access logs 
B)  ELB health check 
C)  CloudWatch metrics 
D)  ELB API calls with CloudTrail

Question 15

An existing, deployed solution uses Amazon EC2 instances with Amazon EBS General Purpose SSD volumes, am Amazon RDS PostgreSQL database, an Amazon EFS file system, and static objects stored in an Amazon S3 bucket. The Security team now mandates that at-rest encryption be turned on immediately for all aspects of the application, without creating new resources and without any downtime. To satisfy the requirements, which one of these services can the SysOps Administrator enable at-rest encryption on?

Accepted Answer

A)  EBS General Purpose SSD volumes 
B)  RDS PostgreSQL database 
C)  Amazon EFS file systems 
D)  S3 objects within a bucket 
A)  EBS General Purpose SSD volumes 
B)  RDS PostgreSQL database 
C)  Amazon EFS file systems 
D)  S3 objects within a bucket

Question 16

A SysOps Administrator noticed that the cache hit ratio for an Amazon CloudFront distribution is less than 10%. Which collection of configuration changes will increase the cache hit ratio for the distribution? (Choose two.)

Accepted Answer

A)  Ensure that only required cookies, query strings, and headers are forwarded in the Cache Behavior Settings 
B)  Change the Viewer Protocol Policy to use HTTPS only 
C)  Configure the distribution to use presigned cookies and URLs to restrict access to the distribution 
D)  Enable automatic compression of objects in the Cache Behavior Settings 
E)  Increase the CloudFront time to live (TTL) settings in the Cache Behavior Settings 
A)  Ensure that only required cookies, query strings, and headers are forwarded in the Cache Behavior Settings 
B)  Change the Viewer Protocol Policy to use HTTPS only 
C)  Configure the distribution to use presigned cookies and URLs to restrict access to the distribution 
D)  Enable automatic compression of objects in the Cache Behavior Settings 
E)  Increase the CloudFront time to live (TTL) settings in the Cache Behavior Settings

Question 17

Which of the following statements is NOT true of CloudWatch?

Accepted Answer

A)  CloudWatch can be accessed using the AWS SDKS. 
B)  CloudWatch can be accessed using the AWS console. 
C)  CloudWatch can be accessed using CloudWatch API. 
D)  CloudWatch can be accessed using the CloudWatch CLI for iOS. 
A)  CloudWatch can be accessed using the AWS SDKS. 
B)  CloudWatch can be accessed using the AWS console. 
C)  CloudWatch can be accessed using CloudWatch API. 
D)  CloudWatch can be accessed using the CloudWatch CLI for iOS.

Question 18

A company has a business application hosted on Amazon EC2 instances behind an Application Load Balancer. Amazon CloudWatch metrics show that the CPU utilization on the EC2 instances is very high. There are also reports from users that receive HTTP 503 and 504 errors when they try to connect to the application. Which action will resolve these issues?

Accepted Answer

A)  Place the EC2 instances into an AWS Auto Scaling group. 
B)  Configure the ALB's Target Group to use more frequent health checks. 
C)  Enable sticky sessions on the Application Load Balancer. 
D)  Increase the idle timeout setting of the Application Load Balancer. 
A)  Place the EC2 instances into an AWS Auto Scaling group. 
B)  Configure the ALB's Target Group to use more frequent health checks. 
C)  Enable sticky sessions on the Application Load Balancer. 
D)  Increase the idle timeout setting of the Application Load Balancer.

Question 19

An e-commerce company hosts its website on the AWS us-west-1 region. It plans to create a special site for a promotion that should be visible only to shoppers from Canada. What change should the SysOps Administrator make to the company's existing AWS setup to achieve this result?

Accepted Answer

A)  Update the Amazon Route 53 record set to use a latency routing policy for the new site 
B)  Update the Application Load Balancer with a new host-based routing rule for the new site 
C)  Update the Amazon Route 53 record set to use a geolocation routing policy for the new site 
D)  Update the Application Load Balancer with a new path-based routing rule for the new site 
A)  Update the Amazon Route 53 record set to use a latency routing policy for the new site 
B)  Update the Application Load Balancer with a new host-based routing rule for the new site 
C)  Update the Amazon Route 53 record set to use a geolocation routing policy for the new site 
D)  Update the Application Load Balancer with a new path-based routing rule for the new site

Question 20

A user has launched multiple EC2 instances for the purpose of development and testing in the same region. The user wants to find the separate cost for the production and development instances. How can the user find the cost distribution?

Accepted Answer

A)  The user should download the activity report of the EC2 services as it has the instance ID wise data 
B)  It is not possible to get the AWS cost usage data of single region instances separately 
C)  The user should use Cost Distribution Metadata and AWS detailed billing 
D)  The user should use Cost Allocation Tags and AWS billing reports 
A)  The user should download the activity report of the EC2 services as it has the instance ID wise data 
B)  It is not possible to get the AWS cost usage data of single region instances separately 
C)  The user should use Cost Distribution Metadata and AWS detailed billing 
D)  The user should use Cost Allocation Tags and AWS billing reports

In regard to AWS CloudFormation, to pass values to your template at runtime you should use ____________.

A sysops administrator has an AWS Lambda function that performs maintenance on various AWS resources. This function must be run nightly. Which is the MOST cost-effective solution?

After installing and configuring the Amazon CloudWatch agent on an EC2 instance, the anticipated system logs are not being received by CloudWatch Logs. Which of the following are likely to be the cause of this problem? (Select TWO.)

What is a placement group in Amazon EC2?

If you want to launch Amazon Elastic Compute Cloud (EC2) Instances and assign each Instance a predetermined private IP address you should:

What are characteristics of Amazon S3? (Choose two.)

What is Amazon CloudFront?

A serverless application running on AWS Lambda is expected to receive a significant increase in traffic. A SysOps Administrator needs to ensure that the Lambda function is configured to scale so the application can process the increased traffic. What should the Administrator do to accomplish this?

A user has launched an EC2 instance from an instance store backed AMI. The user has attached an additional instance store volume to the instance. The user wants to create an AMI from the running instance. Will the AMI have the additional instance store volume data?

An admin is planning to monitor the ELB. Which of the below mentioned services does not help the admin capture the monitoring information about the ELB activity?

A SysOps Administrator noticed that the cache hit ratio for an Amazon CloudFront distribution is less than 10%. Which collection of configuration changes will increase the cache hit ratio for the distribution? (Choose two.)

Which of the following statements is NOT true of CloudWatch?

An e-commerce company hosts its website on the AWS us-west-1 region. It plans to create a special site for a promotion that should be visible only to shoppers from Canada. What change should the SysOps Administrator make to the company's existing AWS setup to achieve this result?

A user has launched multiple EC2 instances for the purpose of development and testing in the same region. The user wants to find the separate cost for the production and development instances. How can the user find the cost distribution?

AWS Certified Advanced Networking - Specialty (ANS-C00)

AWS Certified Alexa Skill Builder - Specialty

AWS Certified Cloud Practitioner (CLF-C01)

AWS Certified Data Analytics - Specialty (DAS-C01)

AWS Certified Database - Specialty

AWS Certified Developer Associate (DVA-C01)

AWS Certified Machine Learning - Specialty (MLS-C01)

AWS Certified Security - Specialty (SCS-C01)

AWS Certified Solutions Architect - Associate SAA-C02

AWS Certified Solutions Architect - Professional (SAP-C01)

AWS Certified SysOps Administrator - Associate (SOA-C02)

AWS DevOps Engineer - Professional (DOP-C01)

Filters

Exam 13: AWS Certified SysOps Administrator (SOA-C01)

In regard to AWS CloudFormation, to pass values to your template at runtime you should use ____________.

A sysops administrator has an AWS Lambda function that performs maintenance on various AWS resources. This function must be run nightly. Which is the MOST cost-effective solution?

After installing and configuring the Amazon CloudWatch agent on an EC2 instance, the anticipated system logs are not being received by CloudWatch Logs. Which of the following are likely to be the cause of this problem? (Select TWO.)

What is a placement group in Amazon EC2?

If you want to launch Amazon Elastic Compute Cloud (EC2) Instances and assign each Instance a predetermined private IP address you should:

What are characteristics of Amazon S3? (Choose two.)

What is Amazon CloudFront?

A serverless application running on AWS Lambda is expected to receive a significant increase in traffic. A SysOps Administrator needs to ensure that the Lambda function is configured to scale so the application can process the increased traffic. What should the Administrator do to accomplish this?

A user has launched an EC2 instance from an instance store backed AMI. The user has attached an additional instance store volume to the instance. The user wants to create an AMI from the running instance. Will the AMI have the additional instance store volume data?

An admin is planning to monitor the ELB. Which of the below mentioned services does not help the admin capture the monitoring information about the ELB activity?

A SysOps Administrator noticed that the cache hit ratio for an Amazon CloudFront distribution is less than 10%. Which collection of configuration changes will increase the cache hit ratio for the distribution? (Choose two.)

Which of the following statements is NOT true of CloudWatch?

An e-commerce company hosts its website on the AWS us-west-1 region. It plans to create a special site for a promotion that should be visible only to shoppers from Canada. What change should the SysOps Administrator make to the company's existing AWS setup to achieve this result?

A user has launched multiple EC2 instances for the purpose of development and testing in the same region. The user wants to find the separate cost for the production and development instances. How can the user find the cost distribution?

AWS Certified Advanced Networking - Specialty (ANS-C00)

AWS Certified Alexa Skill Builder - Specialty

AWS Certified Cloud Practitioner (CLF-C01)

AWS Certified Data Analytics - Specialty (DAS-C01)

AWS Certified Database - Specialty

AWS Certified Developer Associate (DVA-C01)

AWS Certified Machine Learning - Specialty (MLS-C01)

AWS Certified Security - Specialty (SCS-C01)

AWS Certified Solutions Architect - Associate SAA-C02

AWS Certified Solutions Architect - Professional (SAP-C01)

AWS Certified SysOps Administrator - Associate (SOA-C02)

AWS DevOps Engineer - Professional (DOP-C01)

Filters