Quiz IT certification exam

Question 1

A SysOps administrator needs to implement a backup strategy for Amazon EC2 resources and Amazon RDS resources. The backup strategy must meet the following retention requirements:

* Daily backups: must be kept for 6 days

* Weekly backups: must be kept for 4 weeks:

* Monthly backups: must be kept for 11 months

* Yearly backups: must be kept for 7 years

Which backup strategy will meet these requirements with the LEAST administrative effort?

Become a Premium Member for full access

Unlock Premium Member

Accepted Answer

Use AWS Backup to create a new backup plan for each retention requirement with a backup frequency of daily, weekly, monthly, or yearly. Set the retention period to match the requirement. Create tags on each resource that needs to be backed up. Set up resource assignment by using the tags.

Answer

Use Amazon Data Lifecycle Manager to create an Amazon Elastic Block Store (Amazon EBS) snapshot policy. Create tags on each resource that needs to be backed up. Create multiple schedules according to the requirements within the policy. Set the appropriate frequency and retention period.

Answer

Create an AWS Lambda function. Program the Lambda function to use native tooling to take backups of file systems in Amazon EC2 and to make copies of databases in Amazon RDS. Create an Amazon EventBridge rule to invoke the Lambda function.

Answer

Use Amazon Data Lifecycle Manager to create an Amazon Elastic Block Store (Amazon EBS) snapshot policy. Create tags on each resource that needs to be backed up. Set up resource assignment by using the tags. Create multiple schedules according to the requirements within the policy. Set the appropriate frequency and retention period. In Amazon RDS, activate automated backups on the required DB instances.

Question 2

A company has multiple AWS accounts. The company uses AWS Organizations with an organizational unit (OU) for the production account and another OU for the development account. Corporate policies state that developers may use only approved AWS services in the production account.What is the MOST operationally efficient solution to control the production account?

Accepted Answer

Create a service control policy (SCP). Apply the SCP to the production OU.

Answer

Create a customer managed policy in AWS Identity and Access Management (IAM). Apply the policy to all users within the production account.

Answer

Create a job function policy in AWS Identity and Access Management (IAM). Apply the policy to all users within the production OU.

Answer

Create an IAM policy. Apply the policy in Amazon API Gateway to restrict the production account.

Question 3

A Sysops administrator configured AWS Backup to capture snapshots from a single Amazon EC2 instance that has one Amazon Elastic Block Store (Amazon EBS) volume attached. On the first snapshot, the EBS volume has 10 GiB of data. On the second snapshot, the EBS volume still contains 10 GiB of data, but 4 GiB have changed. On the third snapshot, 2 GiB of data have been added to the volume, for a total of 12 GiB.How much total storage is required to store these snapshots?

Accepted Answer

16 GiB

Answer

12 GiB

Answer

26 GiB

Answer

32 GiB

Question 4

A company runs an application on Amazon EC2 instances behind an Application Load Balancer. The EC2 instances are in an Auto Scaling group. The application sometimes becomes slow and unresponsive. Amazon CloudWatch metrics show that some EC2 instances are experiencing high CPU load.A SysOps administrator needs to create a CloudWatch dashboard that can automatically display CPU metrics of all the EC2 instances. The metrics must include new instances that are launched as part of the Auto Scaling group.What should the SysOps administrator do to meet these requirements in the MOST operationally efficient way?

Accepted Answer

Use CloudWatch metrics explorer to filter by the aws:autoscaling:groupName tag and to create a visualization for the CPUUtilization metric. Add the visualization to a CloudWatch dashboard.

Answer

Create a CloudWatch dashboard. Use activity notifications from the Auto Scaling group to invoke a custom AWS Lambda function. Use the Lambda function to update the CloudWatch dashboard to monitor the CPUUtilization metric for the new instance IDs.

Answer

Create a CloudWatch dashboard. Run a custom script on each EC2 instance to stream the CPU utilization to the dashboard.

Answer

Use CloudWatch metrics explorer to filter by instance state and to create a visualization for the CPUUtilization metric. Add the visualization to a CloudWatch dashboard.

Question 5

A company is creating a new multi-account environment in AWS Organizations. The company will use AWS Control Tower to deploy the environment. Users must be able to create resources in approved AWS Regions only. The company must configure and govern all accounts by using a standard baseline configuration Which combination of steps will meet these requirements in the MOST operationally efficient way? (Select TWO.)

Accepted Answer

Implement a service control policy (SCP) to deny any access to AWS based on the requested Region.

Accepted Answer

Modify the AWS Control Tower landing zone settings to govern the approved Regions.

Answer

Create a permission set and a custom permissions policy in AWS IAM Identity Center (AWS Single Sign-On) for each user to prevent each user from creating resources in unapproved Regions.

Answer

Deploy AWS Config rules in each AWS account to govern the account's security compliance and to delete any resources that are created in unapproved Regions.

Answer

Deploy AWS Lambda functions to configure security settings across all accounts in the organization and to delete any resources that are created in unapproved Regions.

Question 6

A company's SysOps administrator manages a fleet of hundreds of Amazon EC2 instances that run Windows-based workloads and Linux-based workloads. Each EC2 instance has a tag that identifies its operating system. All the EC2 instances run AWS Systems Manager Session Manager.A zero-day vulnerability is reported, and no patches are available. The company's security team provides code for all the relevant operating systems to reduce the risk of the vulnerability. The SysOps administrator needs to implement the code on the EC2 instances and must provide a report that shows that the code has successfully run on all the instances.What should the SysOps administrator do to meet these requirements as quickly as possible?

Accepted Answer

Use Systems Manager Run Command. Choose either the AWS-RunShellScript document or the AWS-RunPowerShellScript document. Configure Run Command with the code from the security team. Specify the operating system tag in the Targets parameter. Run the command. Provide the command history's evidence to the security team.

Answer

Create an AWS Lambda function that connects to the EC2 instances through Session Manager. Configure the Lambda function to identify the operating system, run the code from the security team, and return the results to an Amazon RDS DB instance. Query the DB instance for the results. Provide the results as evidence to the security team.

Answer

Log on to each EC2 instance. Run the code from the security team on each EC2 instance. Copy and paste the results of each run into a single spreadsheet. Provide the spreadsheet as evidence to the security team.

Answer

Update the launch templates of the EC2 instances to include the code from the security team in the user data. Relaunch the EC2 instances by using the updated launch templates. Retrieve the EC2 instance logs of each instance. Provide the EC2 instance logs as evidence to the security team.

Question 7

Accompany wants to monitor the number of Amazon EC2 instances that it is running. The company also wants to automate a service quota increase when the number of instances reaches a specific threshold.Which solution meets these requirements?

Accepted Answer

Create an Amazon CloudWatch alarm to monitor Service Quotas. Configure the alarm to invoke an AWS Lambda function to request a quota increase when the alarm reaches the threshold.

Answer

Create an AWS Config rule to monitor Service Quotas. Call an AWS Lambda function to remediate the action and increase the quota.

Answer

Create an Amazon CloudWateh alarm to monitor the AWS Health Dashboard. Configure the alarm to invoke an AWS Lambda function to request a quota increase when the alarm reaches the threshold.

Answer

Create an Amazon CloudWatch alarm to monitor AWS Trusted Advisor service quotas. Configure the alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to increase the quota.

Question 8

A company uses AWS Organizations to manage its multi-account environment. The organization contains a dedicated account for security and a dedicated account for logging. A SysOps administrator needs to implement a centralized solution that provides alerts when a resource metric in any account crosses a standard defined threshold.Which solution will meet these requirements?

Accepted Answer

Deploy an AWS CloudFormation stack set to the accounts in the organization. Use a template that creates the required Amazon CloudWatch alarms and references an Amazon Simple Notification Service (Amazon SNS) topic in the logging account with publish permissions for all the accounts.

Answer

Deploy an AWS CloudFormation stack in each account. Use the stack to deploy the required Amazon CloudWalch alarms and the required Amazon Simple Notification Service (Amazon SNS) topic.

Answer

Deploy an AWS Lambda function on a cron job in each account. Configure the Lambda function to read resources that are in the account and to invoke an Amazon Simple Notification Service (Amazon SNS) topic if any metrics cross the defined threshold.

Answer

Deploy an AWS CloudFormation change set to the organization. Use a template to create the required Amazon CloudWatch alarms and to send alerts to a verified Amazon Simple Email Service (Amazon SES) identity.

Question 9

A company has developed a service that is deployed on a fleet of Linux-based Amazon EC2 instances that are in an Auto Scaling group. The service occasionally fails unexpectedly because of an error in the application code. The company's engineering team determines that resolving the underlying cause of the service failure could take several weeks.A SysOps administrator needs to create a solution to automate recovery if the service crashes on any of the EC2 instances.Which solutions will meet this requirement? (Select TWO.)

Accepted Answer

Install the Amazon CloudWatch agent on the EC2 instances. Configure the CloudWatch agent to monitor the service. Set the CloudWatch action to restart if the service health check fails.

Accepted Answer

Tag the EC2 instances. Use AWS Systems Manager State Manager to create an association that uses the AWS-RunSheIIScript document. Configure the association command with a script that checks if the service is running and that starts the service if the service is not running. For targets, specify the EC2 instance tag. Schedule the association to run every 5 minutes.

Answer

Tag the EC2 instances. Create an AWS Lambda function that uses AWS Systems Manager Session Manager to log in to the tagged EC2 instances and restart the service. Schedule the Lambda function to run every 5 minutes.

Answer

Update the EC2 user data that is specified in the Auto Scaling group's launch template to include a script that runs on a cron schedule every 5 minutes.

Answer

Update the EC2 user data that is specified in the Auto Scaling group's launch template to ensure that the service runs during startup. Redeploy all the EC2 instances in the Auto Scaling group with the updated launch template.

Question 10

A SysOps administrator must analyze Amazon CloudWatch logs across 10 AWS Lambda functions for historical errors. The logs are in JSON format and are stored in Amazon S3. Errors sometimes do not appear in the same field, but all errors begin with the same string prefix.What is the MOST operationally efficient way for the SysOps administrator to analyze the log files?

Accepted Answer

Use Amazon CloudWatch Logs Insights to write a query to search for errors. Run the query across all log groups of interest.

Answer

Use S3 Select to write a query to search for errors. Run the query across all log groups of interest.

Answer

Create an AWS Glue processing job to index the logs of interest. Run a query in Amazon Athena to search for errors.

Answer

Use Amazon CloudWatch Contributor Insights to create a rule. Apply the rule across all log groups of interest.

Question 11

A company needs to deploy instances of an application and associated infrastructure to multiple AWS Regions. The company wants to use a single AWS CloudFormation template to achieve this goal. The company uses AWS Organizations and wants to administer and run this template from a central administration account.What should a SysOps administrator do to meet these requirements?

Accepted Answer

Create a CloudFormation stack set that includes service-managed permissions. Deploy the stack set into the required accounts and Regions from the central administration account.

Answer

Create a CloudFormation template that is stored in Amazon S3. Configure Cross-Region Replication (CRR) on the S3 bucket. Reference the required accounts and remote Regions in the input template parameters.

Answer

In the central administration account, create a CloudFormation primary template that loads CloudFormation nested stacks from Amazon S3 buckets in the target Regions.

Answer

Create CloudFormation nested stacks by using a primary template in the central administration account. Configure the required accounts and Regions for deployment of the nested stacks.

Question 12

A company decides to stop non-production Amazon EC2 instances during the EC2 instances. The company's IT manager must receive notification in near real time whenever an EC2 instance that has an environment type tag value of non-production is started during the night.Which solution will meet this requirement with the MOST operational efficiency?

Accepted Answer

Create an Amazon EventBridge rule that includes the EC2 Instance State-change Notification event type. Filter the event to capture only the running state. Create an AWS Lambda function as a target of the rule. Configure the Lambda function to check the current time and the EC2 instances' tags to determine the environment type. Create an Amazon Simple Notification Service (Amazon SNS) topic as a target of the Lambda function for notifications. Subscribe the IT manager's email address to the SNS topic.

Answer

Configure an AWS Lambda function with an SMTP client library. Subscribe the Lambda function to the AWS Health Dashboard to receive notification whenever an EC2 instance is in the running state. Configure the Lambda function to use Amazon Pinpoint to send email notifications to the IT manager. Deploy a second Lambda function to throttle calls from the first Lambda function during the daytime.

Answer

Deploy an AWS Lambda function that queries the Amazon EC2 API to determine the state of each EC2 instance. Use the EC2 instance scheduler to configure the Lambda function to run every minute during the night and to send an email notification to the IT manager for each non-production EC2 instance that is in the running state.

Answer

Store the EC2 instance metadata, including the environment type, in an Amazon DynamoDB table. Deploy a custom application to an EC2 instance. Configure the custom application to poll the DynamoDB data every minute during the night and to query the Amazon EC2 API to determine the state of each instance. Additionally, configure the custom application to send an email notification to the IT manager for each non-production EC2 instance that is in the running state.

Question 13

A SysOps administrator must configure Amazon S3 to host a simple nonproduction webpage. The SysOps administrator has created an empty S3 bucket from the AWS Management Console. The S3 bucket has the default configuration in place.Which combination of actions should the SysOps administrator take to complete this process? (Choose two.)

Accepted Answer

Turn off the 'Block all public access' setting. Set a bucket policy that allows 'Principal': the s3:GetObject action.

Accepted Answer

Create an index.html document. Configure static website hosting, and upload the index document to the S3 bucket.

Answer

Configure the S3 bucket by using the 'Redirect requests for an object' functionality to point to the bucket root URL.

Answer

Turn off the 'Block all public access' setting. Allow public access by using a bucket ACL that contains WEBSITE.

Answer

Turn off the 'Block all public access' setting. Allow public access by using a bucket ACL that allows access to the AuthenticatedUsers grantee.

Question 14

A company is experiencing issues with legacy software running on Amazon EC2 instances. Errors occur when the total CPU utilization on the EC2 instances exceeds 80%. A short-term solution is required while the software is being rewritten. A SysOps administrator is tasked with creating a solution to restart the instances when the CPU utilization rises above 80%.Which solution meets these requirements with the LEAST operational overhead?

Accepted Answer

Add an Amazon CloudWatch alarm for CPU utilization and configure the alarm action to reboot the EC2 instances.

Answer

Write a script that monitors the CPU utilization of the EC2 instances and reboots the instances when utilization exceeds 80%. Run the script as a cron job.

Answer

Create an Amazon EventBridge rule using the predefined patterns for CPU utilization of the EC2 instances. When utilization exceeds 80%, invoke an AWS Lambda function to restart the instances.

Answer

Add an Amazon CloudWatch alarm for CPU utilization and configure an AWS Systems Manager Automation runbook to reboot the EC2 instances when utilization exceeds 80%.

Question 15

ASysOps administrator configures an application to run on Amazon EC2 instances behind an Application Load Balancer (ALB) in a simple scaling Auto Scaling group with the default settings. The Auto Scaling group is configured to use the RequestCountPerTarget metric for scaling. The SysOps administrator notices that the RequestCountPerTarget metric exceeded the specified limit twice in 180 seconds.How will the number of EC2 instances in this Auto Scaling group be affected in this scenario?

Accepted Answer

The Auto Scaling group will launch one EC2 instance and will wait for the default cooldown period before launching another instance.

Answer

The Auto Scaling group will launch an additional EC2 instance every time the RequestCountPerTarget metric exceeds the predefined limit.

Answer

The Auto Scaling group will send an alert to the ALB to rebalance the traffic and not add new EC2 instances until the load is normalized.

Answer

The Auto Scaling group will try to distribute the traffic among all EC2 instances before launching another instance.

Question 16

A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The company uses Amazon Route 53 to route traffic.The company also has a static website that is configured in an Amazon S3 bucket.A SysOps administrator must use the static website as a backup to the web application. The failover to the static website must be fully automated.Which combination of actions will meet these requirements? (Choose two.)

Accepted Answer

Create a primary failover routing policy record. Configure the value to be the ALB. Associate the record with a Route 53 health check.

Accepted Answer

Create a secondary failover routing policy record. Configure the value to be the static website.

Answer

Create a primary failover routing policy record. Configure the value to be the ALB.

Answer

Create an AWS Lambda function to switch from the primary website to the secondary website when the health check fails.

Answer

Create a secondary failover routing policy record. Configure the value to be the static website. Associate the record with a Route 53 health check.

Question 17

A company has an application that uses a scheduled AWS Lambda function to retrieve datasets from external sources over the internet. The function is not associated with a VPC. The company is modifying the application to store the information that the Lambda function retrieves on an Amazon RDS DB instance in a private subnet. The VPC has two public subnets and two private subnets.A SysOps administrator must deploy a solution that allows the Lambda function to access the new database and continue to access the internet.Which solution meets these requirements?

Accepted Answer

Reconfigure the Lambda function for VPC access. Add NAT gateways to the public subnets in the VPAdd route table entries in the private subnets to route through the NAT gateways to the internet. Attach the function to the private subnets that support the database. Associate a security group with the function. Configure the security group outbound rules to allow Lambda to access the internet.

Answer

Create a new Lambda function with VPC access and an Elastic IP address. Attach the function to public subnets in two Availability Zones. Associate a security group with the Elastic IP address. Configure the security group outbound rules to allow Lambda to access the required resources.

Answer

Create a new Lambda function with VPC access and two public IP addresses. Attach the function to public subnets in the same Availability Zones that the database uses. Associate a security group with the function. Configure the security group inbound rules to allow Lambda to access the required resources.

Answer

Reconfigure the Lambda function for VPC access. Attach the function to the private subnets. Add route table entries in the private subnets to route through the internet gateway to the internet. Associate a security group with the subnets. Configure the security group inbound rules to allow Lambda to access the required resources through the internet gateway.

Question 18

A company is running distributed computing software to manage a fleet of 20 Amazon EC2 instances for calculations. The fleet includes 2 control nodes and 18 task nodes to run the calculations. Control nodes can automatically start the task nodes.Currently, all the nodes run on demand. The control nodes must be available 24 hours a day, 7 days a week. The task nodes run for 4 hours each day. A SysOps administrator needs to optimize the cost of this solution.Which combination of actions will meet these requirements? (Choose two.)

Accepted Answer

Purchase EC2 Instance Savings Plans for the control nodes.

Accepted Answer

Use Spot Instances for the task nodes. Use On-Demand Instances if there is no Spot availability.

Answer

Use Dedicated Hosts for the control nodes.

Answer

Use Reserved Instances for the task nodes.

Answer

Use Spot Instances for the control nodes. Use On-Demand Instances if there is no Spot availability.

Question 19

A company has a secure website running on Amazon EC2 instances behind an Application Load Balancer (ALB). An SSL certificate from AWS Certificate Manager (ACM) is used on the ALB. Users with legacy web browsers are experiencing issues with the website.How should the SysOps administrator resolve these issues in the MOST operationally efficient manner?

Accepted Answer

Update the SSL negotiation configuration of the ALB with a security policy that contains ciphers for legacy web browsers.

Answer

Create a new SSL certificate in ACM and install the new certificate on the ALB to support legacy web browsers.

Answer

Create a second ALB and install a custom SSL certificate with a different domain name on the second ALB to support legacy web browsers.

Answer

Remove the ALB from the configuration and install a custom SSL certificate on each web server.

Question 20

A Sysops administrator launches an Amazon EC2 instance from a Windows Amazon Machine Image (AMI). The EC2 instance includes additional Amazon Elastic Block Store (Amazon EBS) volumes. When the instance is launched, none of the additional Amazon Elastic Block Store (Amazon EBS) volumes are initialized and ready for use through a drive letter. The SysOps administrator needs to automate the EBS volume initialization.Which solution will meet these requirements in the MOST operationally efficient way?

Accepted Answer

Add the secondary volume configuration to the DriveLetterMappingConfig.json file. Configure the InitializeDisks.ps1 Windows PowerShell script to run at launch. Create a new AMI from the running EC2 instance.

Answer

Create an Amazon EventBridge rule. Configure an AWS Systems Manager Automation runbook as a target of the EventBridge rule to initialize the disks after an EC2 instance launch event.

Answer

Create an AmazolkventBridge rule. Configure an AWS Lambda function as a target of the EventBridge rule to initialize the drives after the AMI is launched.

Answer

Create an AWS Config rule to automatically initialize the EBS volumes on Windows EC2 instances.

Question 21

A company has a cluster of Linux Amazon EC2 Spot Instances that read many files from and write many files to attached Amazon Elastic Block Store (Amazon EBS) volumes. The EC2 instances are frequently started and stopped. As part of the process when an EC2 instance starts, an EBS volume is restored from a snapshot.EBS volumes that are restored from snapshots are experiencing initial performance that is lower than expected. The company's workload needs almost all the provisioned IOPS on the attached EBS volumes. The EC2 instances are unable to support the workload when the performance of the EBS volumes is too low. A SysOps administrator must implement a solution to ensure that the EBS volumes provide the expected performance when they are restored from snapshots.Which solution will meet these requirements?

Accepted Answer

Configure fast snapshot restore (FSR) on the snapshots that are used.

Answer

Restore each snapshot onto an unencrypted EBS volume. Encrypt the EBS volume when the performance stabilizes.

Answer

Format the EBS volumes as XFS file systems before restoring the snapshots.

Answer

Increase the Linux read-ahead buffer to 1 MiB.

Question 22

A SysOps administrator launches an Amazon EC2 instance in a private subnet of a VPC. When the SysOps administrator attempts a curl command from the command line of the EC2 instance, the SysOps administrator cannot connect to https:www.example.com.What should the SysOps administrator do to resolve this issue?

Accepted Answer

Ensure that there is an outbound security group for port 443 to 0.0.0.0/0.

Answer

Ensure that there is an inbound security group for port 443 from 0.0.0.0/0.

Answer

Ensure that there is an outbound network ACL for ephemeral ports 1024-66535 to 0.0.0.0/0.

Answer

Ensure that there is an outbound network ACL for port 80 to 0.0.0.0/0.

Question 23

A company has several business units that want to use Amazon EC2. The company wants to require all business units to provision their EC2 instances by using only approved EC2 instance configurations.What should a SysOps administrator do to implement this requirement?

Accepted Answer

Publish a product and launch constraint role for EC2 instances by using AWS Service Catalog. Allow the business units to perform actions in AWS Service Catalog only.

Answer

Create an EC2 instance launch configuration. Allow the business units to launch EC2 instances by specifying this launch configuration in the AWS Management Console.

Answer

Develop an IAM policy that limits the business units to provision EC2 instances only. Instruct the business units to launch instances by using an AWS CloudFormation template.

Answer

Share an AWS CloudFormation template with the business units. Instruct the business units to pass a role to AWS CloudFormation to allow the service to manage EC2 instances.

Question 24

A company is supposed to receive a data file every hour in an Amazon S3 bucket. An S3 event notification invokes an AWS Lambda function each time a file arrives. The function processes the data for use by an application.The application team notices that sometimes the file does not arrive. The application team wants to receive a notification whenever the file does not arrive.What is the MOST operationally efficient solution that meets these requirements?

Accepted Answer

Create an Amazon CloudWatch alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to alert the application team when the Invocations metric of the Lambda function is zero for an hour. Configure the alarm to treat missing data as breaching.

Answer

Add an S3 Lifecycle rule on the S3 bucket with a scope that is limited to objects that were created in the last hour. Configure another S3 event notification to be invoked by the lifecycle transition when the number of objects transitioned is zero. Publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to notify the application team.

Answer

Configure another S3 event notification to invoke a Lambda function that posts a message to an Amazon Simple Queue Service (Amazon SQS) queue. Create an Amazon CloudWatch alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to notify the application team when the ApproximateAgeOfOldestMessage metric of the queue is greater than 1 hour.

Answer

Create a new Lambda function to get the timestamp of the newest file in the S3 bucket. If the timestamp is more than 1 hour ago, publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to notify the application team. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke the new function hourly.

Question 25

A global company operates out of five AWS Regions. A SysOps administrator wants to identify all the company's tagged and untagged Amazon EC2 instances.The company requires the output to display the instance ID and tags.What is the MOST operationally efficient way for the SysOps administrator to meet these requirements?

Accepted Answer

Use Tag Editor in AWS Resource Groups. Select all Regions, and choose a resource type of AWS::EC2::Instance.

Answer

Create a tag-based resource group in AWS Resource Groups.

Answer

Use AWS Trusted Advisor. Export the EC2 On-Demand Instances check results from Trusted Advisor.

Answer

Use Cost Explorer. Choose a service type of EC2-Instances, and group by Resource.

Question 26

A SysOps administrator needs to control access to groups of Amazon EC2 instances using AWS Systems Manager Session Manager. Specific tags on the EC2 instances have already been added.Which additional actions should the administrator take to control access? (Choose two.)

Accepted Answer

Attach an IAM policy to the users or groups that require access to the EC2 instances.

Accepted Answer

Create an IAM policy that grants access to any EC2 instances with a tag specified in the Condition element.

Answer

Attach an IAM role to control access to the EC2 instances.

Answer

Create a placement group for the EC2 instances and add a specific tag.

Answer

Create a service account and attach it to the EC2 instances that need to be controlled.

Question 27

An application runs on Amazon EC2 instances in an Auto Scaling group. Following the deployment of a new feature on the EC2 instances, some instances were marked as unhealthy and then replaced by the Auto Scaling group. The EC2 instances terminated before a SysOps administrator could determine the cause of the health status changes. To troubleshoot this issue, the SysOps administrator wants to ensure that an AWS Lambda function is invoked in this situation.How should the SysOps administrator meet these requirements?

Accepted Answer

Add a lifecycle hook to the Auto Scaling group to invoke the Lambda function through Amazon EventBridge (Amazon CloudWatch Events).

Answer

Activate the instance scale-in protection setting for the Auto Scaling group. Invoke the Lambda function through Amazon EventBridge (Amazon CloudWatch Events).

Answer

Activate the instance scale-in protection setting for the Auto Scaling group. Invoke the Lambda function through Amazon Route 53.

Answer

Add a lifecycle hook to the Auto Scaling group to invoke the Lambda function through Amazon Route 53.

Question 28

A company hosts an internal application on Amazon EC2 On-Demand Instances behind an Application Load Balancer (ALB). The instances are in an Amazon EC2 Auto Scaling group. Employees use the application to provide product prices to potential customers. The Auto Scaling group is configured with a dynamic scaling policy and tracks average CPU utilization of the instances.Employees have noticed that sometimes the application becomes slow or unresponsive. A SysOps administrator finds that some instances are experiencing a high CPU load. The Auto Scaling group cannot scale out because the company is reaching the EC2 instance service quota.The SysOps administrator needs to implement a solution that provides a notification when the company reaches 70% or more of thte EC2 instance service quota.Which solution will meet these requirements in the MOST operationally efficient manner?

Accepted Answer

Use the Service Quotas console to create an Amazon CloudWatch alarm for the EC2 instances. Configure the alarm with quota utilization equal to or greater than 70%. Configure the alarm to publish an Amazon Simple Notification Service (Amazon SNS) notification when the alarm enters ALARM state.

Answer

Create an AWS Lambda function that lists the EC2 instances, counts the EC2 instances, and compares the total number against the applied quota value by using the Service Quotas API. Configure the Lambda function to publish an Amazon Simple Notification Service (Amazon SNS) notification if the quota utilization is equal to or greater than 70%. Create an Amazon EventBridge rule to invoke the Lambda function.

Answer

Create an AWS Lambda function that lists the EC2 instances, counts the EC2 instances, and compares the total number against the applied quota value by using the Amazon CloudWatch Metrics API. Configure the Lambda function to publish an Amazon Simple Notification Service (Amazon SNS) notification if the quota utilization is equal to or greater than 70%. Create an Amazon EventBridge rule to invoke the Lambda function.

Answer

Create an Amazon CloudWatch alarm. Configure the alarm with a threshold of 70% for the CPUUtilization metric for the EC2 instances. Configure the alarm to publish an Amazon Simple Notification Service (Amazon SNS) notification when the alarm enters ALARM state.

Question 29

A company wants to track its expenditures for Amazon EC2 and Amazon RDS within AWS. The company decides to implement more rigorous tagging requirements for resources in its AWS accounts. A SysOps administrator needs to identify all noncompliant resources.What is the MOST operationally efficient solution that meets these requirements?

Accepted Answer

Create a rule in AWS Config with the required-tags managed rule to evaluate all resources for the specified tags.

Answer

Create a rule in Amazon EventBridge (Amazon CloudWatch Events) that invokes a custom AWS Lambda function that will evaluate all created or updated resources for the specified tags.

Answer

Create a rule in AWS Config that invokes a custom AWS Lambda function that will evaluate all resources for the specified tags.

Answer

Create a rule in Amazon EventBridge (Amazon CloudWatch Events) with a managed rule to evaluate all created or updated resources for the specified tags.

Question 30

A user is connected to an Amazon EC2 instance in a private subnet. The user is unable to access the internet from the instance by using the following curl command: curl http:/www.example.com.A SysOps administrator reviews the VPC configuration and learns the following information:* The private subnet has a route to a NAT gateway for CIDR 0.0.0.0/0* The outbound security group for the EC2 instance contains one rule: outbound for port 443 to CIDR 0.0.0.0/0* The inbound security group for the EC2 instance allows ports 22 and 443 from the user's IP address.* The inbound network ACL for the subnet allows port 22 and port range 1024-65535 from CIDR 0.0.0.0/0Which action will allow the user to complete the curl request successfully?

Accepted Answer

Add an additional outbound security group rule for port 80 to CIDR 0.0.0.0/0.

Answer

Add an additional inbound network ACL rule for port 80 to CIDR 0.0.0.0/0.

Answer

Add an additional inbound security group rule for port 80 to CIDR 0.0.0.0/0.

Answer

Add an additional outbound security group rule for port 80 to the user's IP address.

Question 31

A SysOps administrator needs to configure the Amazon Route 53 hosted zone for example.com and www.example.com to point to an Application Load Balancer (ALB). Which combination of actions should the SysOps administrator take to meet these requirements? (Select TWO.)

Accepted Answer

Configure an alias record for example.com to point to the CNAME of the ALB.

Accepted Answer

Configure an alias record for www.example.com to point to the Route 53 example.com record.

Answer

Configure anArecordforexample.com to point to the IP address of the ALB.

Answer

Configure an A record for www.example.com to point to the IP address of the ALB.

Answer

Configure a CNAME record for example com to point to the CNAME of the ALB.

Question 32

A SysOps administrator deployed a three-tier web application to a OA environment and is now evaluating the high availability of the application. The SysOps administrator notices that, when they simulate an unavailable Availability Zone, the application fails to respond. The application stores data in Amazon RDS and Amazon DynamoDB.How should the SysOps administrator resolve this issue?

Accepted Answer

Enable Multi-AZ for the RDS instance.

Answer

Add addilional subnets lo the RDS instance subnet group.

Answer

Add an Elastic Load Balancer in front of the RDS instance.

Answer

Distribute the data in DynamoDB across Availability Zones.

Question 33

A company wants to reduce costs for jobs that can be completed at any time. The jobs currently run by using multiple Amazon EC2 On-Demand Instances, and the jobs take slightly less than 2 hours to complete. If a job fails for any reason, it must be restarted from the beginning.Which solution will meet these requirements MOST cost-effectively?

Accepted Answer

Submit a request for Spot Instances with a defined duration for the jobs.

Answer

Purchase Reserved Instances for the jobs.

Answer

Submit a request for a one-time Spot Instance for the jobs.

Answer

Use a mixture of On-Demand Instances and Spot Instances for the jobs.

Question 34

A company runs a worker process on three Amazon EC2 instances. The instances are in an Auto Scaling group that is configured to use a simple scaling policy. The instances process messages from an Amazon Simple Queue Service (Amazon SOS) queue.Random periods of increased messages are causing a decrease in the performance of the worker process. A SysOps administrator must scale the instances to accommodate the increased number of messages.Which solution will meet these requirements?

Accepted Answer

Use CloudWatch to create a metric math expression to calculate the approximate number of messages visible in the SQS queue for each instance. Create a target tracking scaling policy for the metric math expression to modify the Auto Scaling group.

Answer

Use CloudWatch to create a metric math expression to calculate the approximate age of the oldest message in the SQS queue. Create a target tracking scaling policy for the metric math expression to modify the Auto Scaling group.

Answer

Create an Application Load Balancer (ALB). Attach the ALB to the Auto Scaling group. Create a target tracking scaling policy for the ALBRequestCountPerTarget metric to modify the Auto Scaling group.

Answer

Create an Application Load Balancer (ALB). Attach the ALB to the Auto Scaling group. Create a scheduled scaling policy for the Auto Scaling group.

Question 35

A company's security policy states that connecting to Amazon EC2 instances is not permitted through SSH and RDP. If access is required, authorized staff can connect to instances by using AWS Systems Manager Session Manager.Users report that they are unable to connect to one specific Amazon EC2 instance that is running Ubuntu and has AWS Systems Manager Agent (SSM Agent) pre-installed These users are able to use Session Manager to connect to other instances in the same subnet, and they are in an 1AM group that has Session Manager permission for all instances.What should a SysOps administrator do to resolve this issue?

Accepted Answer

Assign the AmazonSSMManagedlnstanceCore managed policy to the EC2 instance profile for the Ubuntu instance.

Answer

Add an inbound rule for port 22 in the security group associated with the Ubuntu instance.

Answer

Configure the SSM Agent to log in with a user name of 'ubuntu'.

Answer

Generate a new key pair, configure Session Manager to use this new key pair, and provide the private key to the users.

Question 36

A fleet of servers must send local logs to Amazon CloudWatch. How should the servers be configured to meet this requirement?

Accepted Answer

Install and configure the unified CloudWatch agent.

Answer

Configure AWS Config to forward events to CloudWatch.

Answer

Configure a Simple Network Management Protocol {SNMP) agent to forward events to CloudWatch.

Answer

Install and configure the Amazon Inspector agent.

Question 37

A company has 50 AWS accounts and wants to create an identical Amazon VPC in each account. Any changes the company makes to the VPCs in the future must be implemented on every VPC.What is the MOST operationally efficient method to deploy and update the VPCs in each account?

Accepted Answer

Create an AWS Cloud Formation template that defines the VPC. Create an AWS CloudFormation StackSet based on the template. Deploy the template to all accounts using the stack set.

Answer

Create an AWS Cloud Formation template that defines the VPC. Sign in to the AWS Management Console under each account. Create a stack from the template.

Answer

Create a shell script that configures the VPC using the AWS CLI. Provide a list of accounts to the shell script from a text file. Create the VPC in every account in the list.

Answer

Create an AWS Lambda function that configures the VPC. Store the account information in Amazon DynamoDB. Grant Lambda access to the DynamoDB table. Create the VPC in every account in the list.

Question 38

A company runs a web application on three Amazon EC2 instances behind an Application Load Balancer (ALB). Web traffic increases significantly during the same 9-hour period every day and causes a decrease in the application's performance. A SysOps administrator must scale the application ahead of the changes in demand to accommodate the increased traffic.Which solution will meet these requirements?

Accepted Answer

Deploy the application to an EC2 Auto Scaling group that uses a scheduled scaling policy. Attach the ALB to the Auto Scaling group.

Answer

Create an Amazon CloudWatch alarm to monitor application latency. Configure an alarm action to increase the size of each EC2 instance if the latency threshold is reached.

Answer

Create an Amazon EventBridge rule to monitor application latency. Configure the rule to add an EC2 instance to the ALB if the latency threshold is reached

Answer

Deploy the application to an EC2 Auto Scaling group that uses a target tracking scaling policy. Attach the ALB to the Auto Scaling group.

Question 39

A company deployed a new web application on multiple Amazon EC2 instances behind an Application Load Balancer (ALB). The EC2 instances run in an Auto Scaling group. Users report that they are frequently being prompted to log in.What should a SysOps administrator do to resolve this issue?

Accepted Answer

Redeploy the EC2 instances in a spread placement group.

Answer

Configure an Amazon CloudFront distribution with the ALB as the origin.

Answer

Enable sticky sessions (session affinity) for the target group of EC2 instances.

Answer

Replace the ALB with a Network Load Balancer.

Question 40

A SysOps administrator manages the caching of an Amazon CloudFront distribution that serves pages of a website. The SysOps administrator needs to configure the distribution so that the TTL of individual pages can vary. The TTL of the individual pages must remain within the maximum TTL and the minimum TTL that are set for the distribution.Which solution will meet these requirements?

Accepted Answer

Add a Cache-Control: max-age directive to the object at the origin when content is being returned to CloudFront.

Answer

Create an AWS Lambda function that calls the Create Invalid at ion API operation when a change in cache time is necessary.

Answer

Add a no-cache header through a Lambda@Edge function in response to the Viewer response.

Answer

Add an Expires header through a CloudFront function in response to the Viewer response.

Amazon SOA-C02 Practice Test 8

Amazon SOA-C02 Practice Tests

Amazon SOA-C02 Practice Test 8

Question

Amazon SOA-C02 Practice Tests

Practice Tests