16 September, 2020

Top Tips Of Improved AWS-SysOps Questions

Exambible AWS-SysOps Questions are updated and all AWS-SysOps answers are verified by experts. Once you have completely prepared with our AWS-SysOps exam prep kits you will be ready for the real AWS-SysOps exam without a problem. We have Most recent Amazon AWS-SysOps dumps study guide. PASSED AWS-SysOps First attempt! Here What I Did.

Online AWS-SysOps free questions and answers of New Version:

Page: 1 / 32

Total 387 questions Full Exam Access

Question 1

- (Topic 1)
You have a server with a 5O0GB Amazon EBS data volume. The volume is 80% full. You need to back up the volume at regular intervals and be able to re-create the volume in a new Availability Zone in the shortest time possible. All applications using the volume can be paused for a period of a few minutes with no discernible user impact.
Which of the following backup methods will best fulfill your requirements?

Take periodic snapshots of the EBS volume

Use a third party Incremental backup application to back up to Amazon Glacier

Periodically back up all data to a single compressed archive and archive to Amazon S3 using a parallelized multi-part upload

Create another EBS volume in the second Availability Zone attach it to the Amazon EC2 instance, and use a disk manager to mirror me two disks

Question 2

- (Topic 1)
An organization has configured a VPC with an Internet Gateway (IGW). pairs of public and
private subnets (each with one subnet per Availability Zone), and an Elastic Load Balancer (ELB) configured to use the public subnets The application s web tier leverages the ELB. Auto Scaling and a mum-AZ RDS database instance The organization would like to eliminate any potential single points ft failure in this design.
What step should you take to achieve this organization's objective?

Nothing, there are no single points of failure in this architectur

Create and attach a second IGW to provide redundant internet connectivit

Create and configure a second Elastic Load Balancer to provide a redundant load balance

Create a second multi-AZ RDS instance in another Availability Zone and configure replication to provide a redundant databas

Question 3

- (Topic 3)
A user has launched 5 instances in EC2-CLASSIC and attached 5 elastic IPs to the five different instances in the US East region. The user is creating a VPC in the same region. The user wants to assign an elastic IP to the VPC instance. How can the user achieve this?

The user has to request AWS to increase the number of elastic IPs associated with the account

AWS allows 10 EC2 Classic IPs per region; so it will allow to allocate new Elastic IPs to the same region

The AWS will not allow to create a new elastic IP in VPC; it will throw an error

The user can allocate a new IP address in VPC as it has a different limit than EC2

Question 4

- (Topic 2)
A user is trying to understand AWS SNS. To which of the below mentioned end points is SNS unable to send a notification?

Email JSON

HTTP

AWS SQS

AWS SES

Question 5

- (Topic 2)
A user has setup Auto Scaling with ELB on the EC2 instances. The user wants to configure that whenever the CPU utilization is below 10%, Auto Scaling should remove one instance. How can the user configure this?

The user can get an email using SNS when the CPU utilization is less than 10%. The user can use the desired capacity of Auto Scaling to remove the instance

Use CloudWatch to monitor the data and Auto Scaling to remove the instances using scheduled actions

Configure CloudWatch to send a notification to Auto Scaling Launch configuration when the CPU utilization is less than 10% and configure the Auto Scaling policy to remove the instance

Configure CloudWatch to send a notification to the Auto Scaling group when the CPU Utilization is less than 10% and configure the Auto Scaling policy to remove the instance

Question 6

- (Topic 3)
An AWS root account owner is trying to create a policy to access RDS. Which of the below mentioned
statements is true with respect to the above information?

Create a policy which allows the users to access RDS and apply it to the RDS instances

The user cannot access the RDS database if he is not assigned the correct IAM policy

The root account owner should create a policy for the IAM user and give him access to the RDS services

The policy should be created for the user and provide access for RDS

Question 7

- (Topic 2)
A user has created an S3 bucket which is not publicly accessible. The bucket is having thirty objects which are also private. If the user wants to make the objects public, how can he configure this with minimal efforts?

The user should select all objects from the console and apply a single policy to mark them public

The user can write a program which programmatically makes all objects public using S3 SDK

Set the AWS bucket policy which marks all objects as public

Make the bucket ACL as public so it will also mark all objects as public

Question 8

- (Topic 3)
An organization (Account ID 123412341234. has attached the below mentioned IAM policy to a user. What does this policy statement entitle the user to perform?
{
"Version": "2012-10-17",
"Statement": [{
"Sid": "AllowUsersAllActionsForCredentials",
"Effect": "Allow",
"Action": [
"iam:*LoginProfile",
"iam:*AccessKey*",
"iam:*SigningCertificate*"
],
"Resource": ["arn:aws:iam:: 123412341234:user/${aws:username}"]
}]
}

The policy allows the IAM user to modify all IAM user’s credentials using the console, SDK, CLI or APIs

The policy will give an invalid resource error

The policy allows the IAM user to modify all credentials using only the console

The policy allows the user to modify all IAM user’s password, sign in certificates and access keys using only CLI, SDK or APIs

Question 9

- (Topic 3)
A user has created a VPC with CIDR 20.0.0.0/24. The user has used all the IPs of CIDR and wants to increase the size of the VPC. The user has two subnets: public (20.0.0.0/28. and private (20.0.1.0/28.. How can the user change the size of the VPC?

The user can delete all the instances of the subne

Change the size of the subnets to 20.0.0.0/32 and 20.0.1.0/32, respectivel

Then the user can increase the size of the VPC using CLI

It is not possible to change the size of the VPC once it has been created

The user can add a subnet with a higher range so that it will automatically increase the size of the VPC

The user can delete the subnets first and then modify the size of the VPC

Question 10

- (Topic 2)
A user has setup a CloudWatch alarm on an EC2 action when the CPU utilization is above 75%. The alarm sends a notification to SNS on the alarm state. If the user wants to simulate the alarm action how can he achieve this?

Run activities on the CPU such that its utilization reaches above 75%

From the AWS console change the state to ‘Alarm’

The user can set the alarm state to ‘Alarm’ using CLI

Run the SNS action manually

Question 11

- (Topic 1)
You have been asked to propose a multi-region deployment of a web-facing application where a controlled portion of your traffic is being processed by an alternate region.
Which configuration would achieve that goal?

Route53 record sets with weighted routing policy

Route53 record sets with latency based routing policy

Auto Scaling with scheduled scaling actions set

Elastic Load Balancing with health checks enabled

Question 12

- (Topic 2)
A user has setup connection draining with ELB to allow in-flight requests to continue while the instance is being deregistered through Auto Scaling. If the user has not specified the draining time, how long will ELB allow inflight requests traffic to continue?

600 seconds

3600 seconds

300 seconds

0 seconds

Question 13

- (Topic 3)
A user wants to find the particular error that occurred on a certain date in the AWS MySQL RDS DB. Which of the below mentioned activities may help the user to get the data easily?

It is not possible to get the log files for MySQL RDS

Find all the transaction logs and query on those records

Direct the logs to the DB table and then query that table

Download the log file to DynamoDB and search for the record

Question 14

- (Topic 2)
A user is accessing RDS from an application. The user has enabled the Multi AZ feature with the MS SQL RDS DB. During a planned outage how will AWS ensure that a switch from DB to a standby replica will not affect access to the application?

RDS will have an internal IP which will redirect all requests to the new DB

RDS uses DNS to switch over to stand by replica for seamless transition

The switch over changes Hardware so RDS does not need to worry about access

RDS will have both the DBs running independently and the user has to manually switch over

Question 15

- (Topic 3)
The compliance department within your multi-national organization requires that all data for your customers that reside in the European Union (EU) must not leave the EU and also
data for customers that reside in the US must not leave the US without explicit authorization.
What must you do to comply with this requirement for a web based profile management application running on EC2?

Run EC2 instances in multiple AWS Availability Zones in single Region and leverage an Elastic Load Balancer with session stickiness to route traffic to the appropriate zone to create their profile

Run EC2 instances in multiple Regions and leverage Route 53\'s Latency Based Routing capabilities to route traffic to the appropriate region to create their profile

Run EC2 instances in multiple Regions and leverage a third party data provider to determine if a user needs to be redirect to the appropriate region to create their profile

Run EC2 instances in multiple AWS Availability Zones in a single Region and leverage a third party data provider to determine if a user needs to be redirect to the appropriate zone to create their profile

Question 16

- (Topic 3)
A root account owner has given full access of his S3 bucket to one of the IAM users using the bucket ACL. When the IAM user logs in to the S3 console, which actions can he perform?

He can just view the content of the bucket

He can do all the operations on the bucket

It is not possible to give access to an IAM user using ACL

The IAM user can perform all operations on the bucket using only API/SDK

Question 17

- (Topic 3)
You run a web application with the following components Elastic Load Balancer (EL8), 3 Web/Application servers, 1 MySQL RDS database with read replicas, and Amazon Simple Storage Service (Amazon S3) for static content. Average response time for users is increasing slowly.
What three CloudWatch RDS metrics will allow you to identify if the database is the bottleneck? Choose 3 answers

The number of outstanding IOs waiting to access the dis

The amount of write latenc

The amount of disk space occupied by binary logs on the maste

The amount of time a Read Replica DB Instance lags behind the source DB Instance

The average number of disk I/O operations per secon

Question 18

- (Topic 2)
A user has launched 10 instances from the same AMI ID using Auto Scaling. The user is trying to see the
average CPU utilization across all instances of the last 2 weeks under the CloudWatch console. How can the user achieve this?

View the Auto Scaling CPU metrics

Aggregate the data over the instance AMI ID

The user has to use the CloudWatchanalyser to find the average data across instances

It is not possible to see the average CPU utilization of the same AMI ID since the instance ID is different

Question 19

- (Topic 3)
A user has configured Auto Scaling with the minimum capacity as 2 and the desired capacity as 2. The user is trying to terminate one of the existing instance with the command:
as-terminate-instance-in-auto-scaling-group --decrement-desired-capacity
What will Auto Scaling do in this scenario?

Terminates the instance and does not launch a new instance

Terminates the instance and updates the desired capacity to 1

Terminates the instance and updates the desired capacity and minimum size to 1

Throws an error

Question 20

- (Topic 3)
An application you maintain consists of multiple EC2 instances in a default tenancy VPC. This application has undergone an internal audit and has been determined to require dedicated hardware for one instance. Your compliance team has given you a week to move this instance to single-tenant hardware.
Which process will have minimal impact on your application while complying with this requirement?

Create a new VPC with tenancy=dedicated and migrate to the new VPC

Use ec2-reboot-instances command line and set the parameter "dedicated=true"

Right click on the instance, select properties and check the box for dedicated tenancy

Stop the instance, create an AMI, launch a new instance with tenancy=dedicated, and terminate the old instance

Question 21

- (Topic 2)
A user has configured an Auto Scaling group with ELB. The user has enabled detailed CloudWatch monitoring on Elastic Load balancing. Which of the below mentioned statements will help the user understand this functionality better?

ELB sends data to CloudWatch every minute only and does not charge the user

ELB will send data every minute and will charge the user extra

ELB is not supported by CloudWatch

It is not possible to setup detailed monitoring for ELB

Question 22

- (Topic 1)
You are currently hosting multiple applications in a VPC and have logged numerous port scans coming in from a specific IP address block. Your security team has requested that all access from the offending IP address block be denied for the next 24 hours.
Which of the following is the best method to quickly and temporarily deny access from the specified IP address block?

Create an AD policy to modify Windows Firewall settings on all hosts in the VPC to deny access from the IP address block

Modify the Network ACLs associated with all public subnets in the VPC to deny access from the IP address block

Add a rule to all of the VPC 5 Security Groups to deny access from the IP address block

Modify the Windows Firewall settings on all Amazon Machine Images (AMIs) that your organization uses in that VPC to deny access from the IP address block

Question 23

- (Topic 3)
A user wants to upload a complete folder to AWS S3 using the S3 Management console. How can the user perform this activity?

Just drag and drop the folder using the flash tool provided by S3

Use the Enable Enhanced Folder option from the S3 console while uploading objects

The user cannot upload the whole folder in one go with the S3 management console

Use the Enable Enhanced Uploader option from the S3 console while uploading objects

Question 24

A user is trying to setup a scheduled scaling activity using Auto Scaling. The user wants to setup the recurring schedule. Which of the below mentioned parameters is not required in this case?

Maximum size

Auto Scaling group name

End time

Recurrence value

Question 25

- (Topic 3)
A user has enabled termination protection on an EC2 instance. The user has also set Instance initiated
shutdown behaviour to terminate. When the user shuts down the instance from the OS, what will happen?

The OS will shutdown but the instance will not be terminated due to protection

It will terminate the instance

It will not allow the user to shutdown the instance from the OS

It is not possible to set the termination protection when an Instance initiated shutdown is set to Terminate

Question 26

- (Topic 3)
A user has hosted an application on EC2 instances. The EC2 instances are configured with ELB and Auto Scaling. The application server session time out is 2 hours. The user wants to configure connection draining to ensure that all in-flight requests are supported by ELB even though the instance is being deregistered. What time out period should the user specify for connection draining?

5 minutes

1 hour

30 minutes

2 hours

Page: 1 / 32

Total 387 questions Full Exam Access