Pass Amazon AWS-SysOps PDF Dumps | Recently Updated 991 Questions
Updated Test Engine to Practice AWS-SysOps Dumps & Practice Exam
What is the duration, language, and format of AWS Certified SysOps Administrator - Associate Exam
- Number of Questions: 65
- No negative marking for wrong answers
- Language of Exam: English, Japanese, Korean.
Domain 3: Deployment and Provisioning
- Implement steps for provisioning cloud resources.
- Remediate different deployment issues.
NEW QUESTION 242
A company website hosts patches for software that is sold globally. The website runs in AWS and performs well until a large software patch is released. The flood of downloads puts a strain on the web servers and leads to a poor customer experience.
What can the Sysops Administrator propose to enhance customer experience, create a more available web platform, and keep costs low?
- A. Increase the size of the NAT instance to improve throughput.
- B. Use an Amazon CloudFront distribution to cache static content, including software patches.
- C. Scale out the web servers in advance of patch releases to reduce Auto Scaling delays.
- D. Move the content to IQ1 and provision additional IOPS to the volume that contains the software patches.
Answer: B
NEW QUESTION 243
A user is trying to understand the detailed CloudWatch monitoring concept. Which of the below mentioned services provides detailed monitoring with CloudWatch without charging the user extra?
- A. AWS Auto Scaling
- B. AWS EMR
- C. AWS Route 53
- D. AWS SNS
Answer: C
Explanation:
Explanation
Explanation:
CloudWatch is used to monitor AWS as well as the custom services. It provides either basic or detailed monitoring for the supported AWS products. In basic monitoring, a service sends data points to CloudWatch every five minutes, while in detailed monitoring a service sends data points to CloudWatch every minute.
Services, such as RDS, ELB, OpsWorks, and Route 53 can provide the monitoring data every minute without charging the user.
NEW QUESTION 244
When an EC2 instance mat is backed by an S3-Based AMI is terminated, what happens to the data on the root
volume?
- A. Data is automatically saved as an EBS snapshot.
- B. Data is unavailable until the instance is restarted
- C. Data is automatically saved as an EBS volume.
- D. Data is automatically deleted
Answer: D
NEW QUESTION 245
Which method can be used to prevent an IP address block from accessing public objects in an S3 bucket?
- A. Modify the IAM policies of any users that would access the bucket
- B. Create a bucket policy and apply it to the bucket
- C. Create a NACL and attach it to the VPC of the bucket
- D. Create an ACL and apply it to all objects in the bucket
Answer: B
Explanation:
Explanation/Reference:
Explanation:
http://docs.aws.amazon.com/AmazonS3/latest/dev/example-bucket-policies.html
NEW QUESTION 246
A SysOps administrator implemented the following bucket policy to allow only the corporate IP address range of 54.240.143.0/24 to access objects in an Amazon S3 bucket.
Some employees are reporting that they are able to access the S3 bucket from IP addresses outside the corporate IP address range.
How can the Administrator address this issue?
- A. Change Effect from Allow to Deny in the second statement of the policy to deny requests not from the source IP range.
- B. Modify the Condition operator to include both NotIpAddress and IpAddress to prevent unauthorized access to the S3 bucket.
- C. Modify the IAM policy instead of the bucket policy to restrict users from accessing the bucket based on their source IP addresses.
- D. Modify the Condition element from the IAM policy to aws:StringEquals instead of .
aws:SourceIp
Answer: A
NEW QUESTION 247
The fastest way to load 300 TB of data to AWS is _____.
- A. to use AWS Import/Export Snowball
- B. to directly upload all data to S3 over a dedicated 100 Mbps connection
- C. to zip all the data and then upload to S3
- D. to use VM Import/Export
Answer: A
Explanation:
Even with high-speed Internet connections, it can take months to transfer large amounts of data.
For example, 100 terabytes of data will take more than 100 days to transfer over a dedicated 100 Mbps connection. That same transfer can be accomplished in less than one day, plus shipping time, using two Snowball appliances.
Reference: http://aws.amazon.com/importexport/
NEW QUESTION 248
An organization is planning to use AWS for 5 different departments. The finance department is responsible to pay for all the accounts. However, they want the cost separation for each account to map with the right cost center. How can the finance department achieve this?
- A. Create 5 separate IAM groups and add users as per the department's employees
- B. Create 5 separate accounts and make them a part of one consolidate billing
- C. Create 5 separate IAM users and set a different policy for their access
- D. Create 5 separate accounts and use the IAM cross account access with the roles for better management
Answer: B
Explanation:
Explanation/Reference:
Explanation:
AWS consolidated billing enables the organization to consolidate payments for multiple Amazon Web Services (AWS. accounts within a single organization by making a single paying account. Consolidated billing enables the organization to see a combined view of the AWS charges incurred by each account as well as obtain a detailed cost report for each of the individual AWS accounts associated with the paying account.
NEW QUESTION 249
A SysOps Administrator has an AWS Direct Connect connection in place in region us-east-1, between an AWS account and a data center. The Administrator is now required to connect the data center to a VPC in another AWS Region, us-west-2, which must have consistent network performance and low-latency.
What is the MOST efficient and quickest way to establish this connectivity?
- A. Use Direct Connect gateway with the existing Direct Connect connection to connect to the Virtual Private Gateway of the VPC in region us-west-2.
- B. Create a new Direct Connect connection between the data center and region us-west-2.
- C. Create a VPC peering connection between the VPC in region us-east-1 and us-west-2, and access the VPC in us-west-2 from the data center.
- D. Create an AWS VPN CloudHub architecture, and use software VPN to connect to the VPC in region us-west-2.
Answer: A
Explanation:
Explanation
https://docs.aws.amazon.com/directconnect/latest/UserGuide/virtualgateways.html
NEW QUESTION 250
A company is running a new promotion that will result in a massive spike in traffic for a single application. The SysOps Administrator must prepare the application and ensure that the customers have a great experience. The application is heavy on memory and is running behind an AWS Application Load Balancer (ALB). The ALB has been pre-warmed, and the application is in an Auto Scaling group.
What built-in metric should be used to control the Auto Scaling group's scaling policy?
- A. MemoryUtilization
- B. RejectedConnection Count
- C. CPUUtilization
- D. Request CountPerTarget
Answer: D
NEW QUESTION 251
An organization is planning to use AWS for their production roll out. The organization wants to implement
automation for deployment such that it will automatically create a LAMP stack, download the latest PHP
installable from S3 and setup the ELB. Which of the below mentioned AWS services meets the quirement for making an orderly deployment of the software?
- A. AWS Cloudfront
- B. AWS Cloudformation
- C. AWS DevOps
- D. AWS Elastic Beanstalk
Answer: B
Explanation:
AWS Cloudformation is an application management tool which provides application modelling, deployment, configuration, management and related activities. Cloudformation provides an easy way to create and delete the collection of related AWS resources and provision them in an orderly way. AWS CloudFormation automates and simplifies the task of repeatedly and predictably creating groups of related resources that power the user's applications. AWS Cloudfront is a CDN; Elastic Beanstalk does quite a few of the required tasks. However, it is a PAAS which uses a ready AMI. AWS Elastic Beanstalk provides an environment to easily develop and run applications in the cloud.
NEW QUESTION 252
A user has launched 10 instances from the same AMI ID using Auto Scaling. The user is trying to see the
average CPU utilization across all instances of the last 2 weeks under the CloudWatch console. How can
the user achieve this?
- A. The user has to use the CloudWatch analyser to find the average data across instances
- B. It is not possible to see the average CPU utilization of the same AMI ID since the instance ID is
different - C. Aggregate the data over the instance AMI ID
- D. View the Auto Scaling CPU metrics
Answer: C
Explanation:
Amazon CloudWatch is basically a metrics repository. Either the user can send the custom data or an
AWS product can put metrics into the repository, and the user can retrieve the statistics based on those
metrics. The statistics are metric data aggregations over specified periods of time. Aggregations are
made using the namespace, metric name, dimensions, and the data point unit of measure, within the time
period that is specified by the user. To aggregate the data across instances launched with AMI, the user
should select the AMI ID under EC2 metrics and select the aggregate average to view the data.
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/US_SingleMetricPerAMI.html
NEW QUESTION 253
You have decided to change the Instance type for instances running in your application tier that are using Auto
Scaling.
In which area below would you change the instance type definition?
- A. Auto Scaling tags
- B. Auto Scaling group
- C. Auto Scaling launch configuration
- D. Auto Scaling policy
Answer: C
Explanation:
http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/WhatIsAutoScaling.html
NEW QUESTION 254
A user is running one instance for only 3 hours every day. The user wants to save some cost with the instance.
Which of the below mentioned Reserved Instance categories is advised in this case?
- A. The user should use the AWS high utilized RI
- B. The user should use the AWS low utilized RI
- C. The user should use the AWS medium utilized RI
- D. The user should not use RI; instead only go with the on-demand pricing
Answer: D
Explanation:
Explanation
The AWS Reserved Instance provides the user with an option to save some money by paying a one-time fixed amount and then save on the hourly rate. It is advisable that if the user is having 30% or more usage of an instance per day, he should go for a RI. If the user is going to use an EC2 instance for more than 2200-2500 hours per year, RI will help the user save some cost. Here, the instance is not going to run for less than 1500 hours. Thus, it is advisable that the user should use the on-demand pricing.
NEW QUESTION 255
An organization (Account ID 123412341234. has attached the below mentioned IAM policy to a user. What does this policy statement entitle the user to perform?
"Statement": [
{
"Sid": "AllowUsersAllActionsForCredentials",
"Effect": "Allow",
"Action": [
"iam:*AccessKey*",
],
"Resource": ["arn:aws:iam:: 123412341234:user/${aws:username}"]
}
]
- A. 0
- B. 0
- C. 0
- D. 0
Answer: D
Explanation:
AWS Identity and Access Management is a web service which allows organizations to manage
users and user permissions for various AWS services. If the organization (Account ID
123412341234. wants some of their users to manage keys (access and secret access keys. of all
IAM users, the organization should set the below mentioned policy which entitles the IAM user to
modify keys of all IAM users with CLI, SDK or API.
"Statement": [
{
"Sid": "AllowUsersAllActionsForCredentials",
"Effect": "Allow",
"Action": [
"iam:*AccessKey*",
],
"Resource": ["arn:aws:iam:: 123412341234:user/${aws:username}"]
}
]
NEW QUESTION 256
With the threat of ransomware viruses encrypting and holding company data hostage, which action should be taken to protect an Amazon S3 bucket?
- A. Enable snapshots on the bucket
- B. Deny Post, Put, and Delete on the bucket
- C. Enable server-side encryption on the bucket
- D. Enable Amazon S3 versioning on the bucket
Answer: C
NEW QUESTION 257
An Amazon EC2 instance is unable to connect an SMTP server in a different subnet. Other instances are successfully communicating with the SMTP server, however VPC Flow Logs have been enabled on the SMTP server's network interface and show the following information:
2 223342798652 eni-abe77dab 10.1.1.200 10.100.1.10 1123 25 17 70 48252 1515534437 1515535037 REJECT OK What can be done to correct this problem?
- A. Install an email client on the instance to ensure that it communicates correctly on TCP port 25 to the SMTP server.
- B. Add the instance to the security group for the SMTP server and ensure that is permitted to communicate over TCP port 25.
- C. Add a rule to the security group for the instance to explicitly permit TCP port 25 outbound to any address.
- D. Disable the iptables service on the SMTP server so that the instance can properly communicate over the network.
Answer: C
NEW QUESTION 258
A company wants to ensure that each operation within their own isolated environment, and that they are only able to use pre-approved services.
How can this requirement be met?
- A. Request that each department create and manage its own AWS account and the resources within it.
- B. Create 1AM roles for each department, and set policies that grant access to specific AWS services.
- C. Set up an AWS Organization to create accounts for each department and apply service control policies to control access to AWS services.
- D. Use the AWS Service Catalog to create catalogs of AWS services that are approved for use by each department.
Answer: C
NEW QUESTION 259
A company uses multiple accounts for its applications. Account A manages the company's Amazon Route 53 domains and hosted zones. Account B uses a load balancer fronting the company's web servers How can the company use Route 53 to point to the load balancer in the MOST cost-effective and efficient manner?
- A. Create an Amazon EC2 proxy in Account A that forwards requests to Account B
- B. Create a load balancer in Account A that points to the load balancer in Account B
- C. Create a CNAME record in Account A pointing to an alias record to the toad balancer in Account B
- D. Create an alias record in Account A pointing to the load balancer in Account B
Answer: D
NEW QUESTION 260
A company is using AWS Storage Gateway to create block storage volumes and mount them as Internet Small Computer Systems Interface (iSCSI) devices from on-premises servers. As the Storage Gateway has taken on several new projects, some of the Development teams report that the performance of the iSCSI drives has degraded. When checking the Amazon CloudWatch metrics, a SysOps Administrator notices that the CacheHitPercent metric is below 60% and the CachePercentUsed metric is above 90%.
What steps should the Administrator take to increase Storage Gateway performance?
- A. Change the default block size for the Storage Gateway from 64 KB to 128 KB, 256 KB, or 512 KB to improve I/O performance.
- B. Ensure that the physical disks for the Storage Gateway are in a RAID 1 configuration to allow higher throughput.
- C. Create a larger disk for the cached volume. In the AWS Management Console, edit the local disks, then select the new disk as the cached volume.
- D. Take point-in-time snapshots of all the volumes in Storage Gateway, flush the cache completely, then restore the volumes from the clean snapshots.
Answer: C
NEW QUESTION 261
In configuring an Amazon Route 53 health check, a SysOps Administrator selects `Yes' to the String Matching option in the Advanced Configuration section. In the Search String box, the Administrator types the following text: /html.
This is to ensure that the entire page is loading during the health check. Within 5 minutes of enabling the health check, the Administrator receives an alert stating that the check failed.
However, when the Administrator navigates to the page, it loads successfully.
What is the MOST likely cause of this false alarm?
- A. The search string must be escaped with a backslash (\) before the forward slash (/).
- B. The search string must be put in quotes.
- C. The search string is not in the first 5120 bytes of the tested page.
- D. The search string is not HTML-encoded.
Answer: D
NEW QUESTION 262
A SysOps Administrator has been able to consolidate multiple, secure websites onto a single server, and each site is running on a different port. The Administrator now wants to start a duplicate server in a second Availability Zone and put both behind a load balancer for high availability.
What would be the command line necessary to deploy one of the sites' certificates to the load balancer?
- A. Option B
- B. Option D
- C. Option C
- D. Option A
Answer: A
Explanation:
Explanation
Reference
https://docs.aws.amazon.com/ko_kr/cli/latest/reference/elb/set-load-balancer-listener-sslcertificate.html
NEW QUESTION 263
A SysOps Administrator is using AWS CloudFormation to deploy resources but would like to manually address any issues that the template encounters.
What should the Administrator add to the template to support the requirement?
- A. Enable Termination Protection on the stack
- B. Set the DeleteStack API action to "No"
- C. Restrict the IAM permissions for CloudFormation to delete resources
- D. Set the OnFailure parameter to "DO_NOTHING"
Answer: A
Explanation:
Explanation/Reference: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/troubleshooting.html
NEW QUESTION 264
A user has configured ELB with SSL using a security policy for secure negotiation between the client and load balancer.
Which of the below mentioned security policies is supported by ELB?
- A. Dynamic Security Policy
- B. Default Security Policy
- C. Predefined Security Policy
- D. All the other options
Answer: C
Explanation:
Elastic Load Balancing uses a Secure Socket Layer (SSL. negotiation configuration which is known as a Security Policy. It is used to negotiate the SSL connections between a client and the load balancer. ELB supports two policies:
Predefined Security Policy, which comes with predefined cipher and SSL protocols; Custom Security Policy, which allows the user to configure a policy.
NEW QUESTION 265
A user is trying to connect to a running EC2 instance using SSH. However, the user gets a Host key not found error. Which of the below mentioned options is a possible reason for rejection?
- A. The instance CPU is heavily loaded
- B. The access key to connect to the instance is wrong
- C. The security group is not configured properly
- D. The user has provided the wrong user name for the OS login
Answer: D
Explanation:
If the user is trying to connect to a Linux EC2 instance and receives the Host Key not found error the probable reasons are: The private key pair is not right The user name to login is wrong
NEW QUESTION 266
......
Endnotes
The AWS Certified SysOps Administrator – Associate (SOA-C01) exam is taken by hundreds of IT professionals worldwide. Its simplified process and the readily available preparation materials make it one of the most popular tests for systems administrators. Even so its level of difficulty is high and it demands thorough knowledge and dedicated preparation, the perks of being AWS certified are worth all the efforts.
Amazon AWS-SysOps Dumps Cover Real Exam Questions: https://examsboost.validbraindumps.com/AWS-SysOps-exam-prep.html