Question 1

An organization has created one IAM user and applied the below mentioned policy to the user. What entitlements do the IAM users avail with this policy?

Accepted Answer

A)  The policy will allow the user to perform all read only activities on the EC2 services 
B)  The policy will allow the user to list all the EC2 resources except EBS 
C)  The policy will allow the user to perform all read and write activities on the EC2 services 
D)  The policy will allow the user to perform all read only activities on the EC2 services except load Balancing

Question 2

A SysOps Administrator must generate a report that provides a breakdown of all API activity by a specific user over the course of a year. Given that AWS Cloud Trail was enabled, how can this report be generated?

Accepted Answer

A)  Using the AWS management Console, search for the user name in the CloudTrail history. Then filter by API and download the report in CSV format. 
B)  Use the CloudTrail digest files stored in the company's Amazon S3 bucket. Then send the logs to Amazon QuickSight to create the report. 
C)  Locate the monthly reports that CloudTrail sends that are emailed to the account's root user. Then forward the reports to the auditor using a secure channel. 
D)  Access the CloudTrail logs stored in the Amazon S3 bucket tied to Cloud Trail. Use Amazon Athena to extract the information needed to generate the report.

Question 3

A root account owner has created an S3 bucket testmycloud. The account owner wants to allow everyone to upload the objects as well as enforce that the person who uploaded the object should manage the permission of those objects. Which is the easiest way to achieve this?

Accepted Answer

A)  The root account owner should create a bucket policy which allows the IAM users to upload the object 
B)  The root account owner should create the bucket policy which allows the other account owners to set the object policy of that bucket 
C)  The root account should use ACL with the bucket to allow everyone to upload the object 
D)  The root account should create the IAM users and provide them the permission to upload content to the bucket

Question 4

A user is trying to pre-warm a blank EBS volume attached to a Linux instance. Which of the below mentioned steps should be performed by the user?

Accepted Answer

A)  There is no need to pre-warm an EBS volume 
B)  Contact AWS support to pre-warm 
C)  Unmount the volume before pre-warming 
D)  Format the device

Question 5

A user is trying to configure the CloudWatch billing alarm. Which of the below mentioned steps should be performed by the user for the first time alarm creation in the AWS Account Management section?

Accepted Answer

A)  Enable Receiving Billing Reports 
B)  Enable Receiving Billing Alerts 
C)  Enable AWS billing utility 
D)  Enable CloudWatch Billing Threshold

Question 6

A user has enabled termination protection on an EC2 instance. The user has also set Instance initiated shutdown behavior to terminate. When the user shuts down the instance from the OS, what will happen?

Accepted Answer

A)  The OS will shutdown but the instance will not be terminated due to protection 
B)  It will terminate the instance 
C)  It will not allow the user to shutdown the instance from the OS 
D)  It is not possible to set the termination protection when an Instance initiated shutdown is set to Terminate

Question 7

Network ACLs in a VPC operate at the ______.

Accepted Answer

A)  TCP level 
B)  instance level 
C)  subnet level 
D)  gateway level

Question 8

In the context of sending metrics to CloudWatch using Amazon Kinesis, which of the following statements best describes the metric "PutRecord.Latency"?

Accepted Answer

A)  It is the time taken per PutRecord operation, measured over the specified time period. 
B)  It is the number of successful records in a PutRecords operation per Amazon Kinesis stream, measured over the specified time period. 
C)  It is the time taken per PutRecords operation to calculate the statistics of the PutRecords opera-tions. 
D)  It is the number of successful PutRecord operations per Amazon Kinesis stream, measured over the specified time period.

Question 9

A SysOps Administrator needs to create a replica of a company's existing AWS infrastructure in a new AWS account. Currently, an AWS Service Catalog portfolio is used to create and manage resources. What is the MOST efficient way to accomplish this?

Accepted Answer

A)  Create an AWS CloudFormation template to use the AWS Service Catalog portfolio in the new AWS account. 
B)  Manually create an AWS Service Catalog portfolio in the new AWS account that duplicates the original portfolio. 
C)  Run an AWS Lambda function to create a new AWS Service Catalog portfolio based on the output of the DescribePortfolio API operation. Run an AWS Lambda function to create a new AWS Service Catalog portfolio based on the output of the DescribePortfolio API operation. 
D)  Share the AWS Service Catalog portfolio with the other AWS accounts and import the portfolio into the other AWS accounts.

Question 10

A SysOps Administrator is deploying an Amazon EC2 instance and is using third-party VPN software to route traffic to an on-premises data center. Based on the shared responsibility model, AWS is responsible for managing which element of this deployment?

Accepted Answer

A)  Configuring IPsec tunnels for the VPN. 
B)  Ensuring high availability of the EC2 instance. 
C)  Ensuring high availability of the VPN connection. 
D)  Managing the health of the underlying EC2 host.

Question 11

In which screen does a user select the Availability Zones while configuring Auto Scaling?

Accepted Answer

A)  Auto Scaling Group Creation 
B)  Auto Scaling Instance Creation 
C)  Auto Scaling Launch config Creation 
D)  Auto Scaling Policy Creation

Question 12

A SysOps Administrator is reviewing AWS Trusted Advisor warnings and encounters a warning for an S3 bucket policy that has open access permissions. While discussing the issue the bucket owner, the Administrator realizes the S3 bucket is an origin for an Amazon CloudFront web distribution. Which action should the Administrator take to ensure that users access objects in Amazon S3 by using only CloudFront URLs?

Accepted Answer

A)  Encrypt the S3 bucket content with Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3) 
B)  Create an origin access identity and grant it permissions to read objects in the S3 bucket 
C)  Assign an IAM user to the CoudFront distribution and whitelist the IAM user in the S3 bucket policy 
D)  Assign an IAM role to the CloudFront distribution and whitelist the IAM role in the S3 bucket policy

Question 13

A user has setup a CloudWatch alarm on the EC2 instance for CPU utilization. The user has setup to receive a notification on email when the CPU utilization is higher than 60%. The user is running a virus scan on the same instance at a particular time. The user wants to avoid receiving an email at this time. What should the user do?

Accepted Answer

A)  Remove the alarm 
B)  Disable the alarm for a while using CLI 
C)  Modify the CPU utilization by removing the email alert 
D)  Disable the alarm for a while using the console

Question 14

The chief financial officer (CFO) of an organization has seen a spike in Amazon S3 storage costs over the last few months. A SysOps administrator suspects that these costs are related to storage for older versions of S3 objects from one of its S3 buckets. What can the administrator do to confirm this suspicion?

Accepted Answer

A)  Enable Amazon S3 inventory and then query the inventory to identify the total storage of previous object versions. 
B)  Use object-level cost allocation tags to identify the total storage of previous object versions. 
C)  Enable the Amazon S3 analytics feature for the bucket to identify the total storage of previous object versions. 
D)  Use Amazon CloudWatch storage metrics for the S3 bucket to identify the total storage of previous object versions.

Question 15

What does Amazon SWF stand for?

Accepted Answer

A)  Simple Waveflow Service 
B)  Simple WebFactor Service 
C)  Simple Workflow Service 
D)  Simple WebForm Service

Question 16

A SysOps administrator must run a script on production servers to fix an issue. The company has a policy to block all remote interactive access to production servers. Based on this situation, how should the administrator run the script?

Accepted Answer

A)  Share and use the Amazon EC2 key pairs to gain access to the servers and run the script. 
B)  Put the script into the user data of the instances. 
C)  Configure the script to run as a cron job or scheduled task on the EC2 instances. 
D)  Use AWS Systems Manager to run the script.

Question 17

A user is trying to understand the detailed CloudWatch monitoring concept. Which of the below mentioned services provides detailed monitoring with CloudWatch without charging the user extra?

Accepted Answer

A)  AWS Auto Scaling 
B)  AWS Route 53 
C)  AWS EMR 
D)  AWS SNS

Question 18

An e-commerce company wants to lower costs on its nightly jobs that aggregate the current day's sales and store the results in Amazon S3. The jobs are currently run using multiple on-demand instances and the job take just under 2 hours to complete. If a job fails for any reason, it needs to be restarted from the beginning. What method is the MOST cost effective based on these requirements?

Accepted Answer

A)  Use a mixture of On-Demand and Spot Instances for job execution. 
B)  Submit a request for a Spot block to be used for job execution. 
C)  Purchase Reserved Instances to be used for job execution. 
D)  Submit a request for a one-time Spot Instance for job execution.

Question 19

A user has launched a Windows based EC2 instance. However, the instance has some issues and the user wants to check the log. When the user checks the Instance console output from the AWS console, what will it display?

Accepted Answer

A)  All the event logs since instance boot 
B)  The last 10 system event log error 
C)  The Windows instance does not support the console output 
D)  The last three system events' log errors

Question 20

A user is configuring the Multi AZ feature of an RDS DB. The user came to know that this RDS DB does not use the AWS technology, but uses server mirroring to achieve HA. Which DB is the user using right now?

Accepted Answer

A)  My SQL 
B)  Oracle 
C)  MS SQL 
D)  PostgreSQL

Exam 13: AWS Certified SysOps Administrator (SOA-C01)