AWS Certified SysOps Administrator Associate Practice Exam Part 2 Quiz Format

A company data retention policy dictates that backups be stored for exactly two years. After that the data must be deleted.
How can Amazon EBS snapshots be managed to conform to this data retention policy?

In configuring an Amazon Route 53 health check, a SysOps Administrator selects ‘Yes’ to the String Matching option in the Advanced Configuration section. In the Search String box, the Administrator types the following text: /html. This is to ensure that the entire page is loading during the health check. Within 5 minutes of enabling the health check, the Administrator receives an alert stating that the check failed. However, when the Administrator navigates to the page, it loads successfully.
What is the Most likely cause of this false alarm?

A SysOps Administrator must ensure that AWS Cloudformation deployment changes are properly backend for governance
Which AWS Service should be used to accomplish this?

A Developer created an AWS Lambda function and has asked the SysOps Administrator to make the function run in every 15 minutes .
What is the MOST efficient way to accomplish this request?

A SysOps Administrator is analyzing how Reserved Instance discounts are allocated to Amazon EC2 instances across multiple AWS Account.
Which AWS tool will provide the details necessary to understand the billing charges?

A SysOps Administrator wants to prevent Developer from accidentally terminating Amazon EC2 instance.
How can this be accomplished?

An organization has developed a new memory intensive application that is deployed to a large Amazon EC2. The application is exhaustion, so the development team wants to monitor memory usage by using Amazon Cloudwatch
What is the MOST efficient way to accomplish this goal?

An organization has been running their website on several m2 Linux instances behind a classic load balancer for two years. Application load has been constant and predictable.
What should the organization do to reduce costs?

A SysOps Administrator has written an AWS Lambda function to launch new Amazon EC2 instances and deployed it in the us-east-1 region. The Administrator tested it by launching a new t2 nano instance in the us-east-1 region and it performed as expected. However, when the region name was updated in the Lambda function to launch an EC2 instance in the us-west-1 region, it failed.
What is causing this error?

A Company backs up data from data center using a tape gateway on AWS Storage Gateway. The SysOps Administrator must stop a running storage gateway.
What process will protect data integrity?

A SysOps Administrator is responsible for a legacy, CPU heavy application. The application can only be scaled vertical. Currently application running on t2.large Amazon EC2 instance. The system is showing 90% CPU usage and significant performance latency.
What change should be made to alleviate the performance problem?

A SysOps Administrator runs a web application that is using a microservices approach whereby different responsibilities of the application have been divided in a separate microservice running on a different Amazon EC2 instance. The Administrator has been tasked with reconfiguring the infrastructure to support this approach.
How can the Administrator accomplish this with the LEAST administrative overhead?

An organization is concerned that its Amazon RDS databases are not protected. The solution to address this issue must be low cost, protect against table corruption that could be overlooked for several days, and must offer a 30-day window of protection
How can these requirement must be met?

A company with a dozens of AWS Account wants to ensure that governance rules are being applied across all accounts. The CIO has recommended that AWS Config rules be deployed using an AWS Cloudformation template.
How should the requirements be met?

A Company must ensures that any objects uploaded to an s3 bucket must be encrypted
Which of the following actions will meet the requirement? ( SELECT TWO)

Based on the AWS Shared Responsibility Model, which of the following actions are the responsibility of the customer for an Aurora database?

A Company would like to review each change in the infrastructure before deploying updates in its AWS Cloudformation stacks
Which action will allow an Administrator to understand the impact of these changes before implement?

An organization is running multiple applications for their customers. Each application is deployed by running a base AWS CloudFormation template that configures a new VPC. All applications are run in the same AWS account and AWS Region. A SysOps Administrator has noticed that when trying to deploy the same AWS CloudFormation stack, it fails to deploy.
What is likely to be the problem?

A SysOps Administrator found that newly-deployed Amazon EC2 application server is unable to connect to an Amazon RDS database. VPC Flow Logs and confirming that the flow log is active on the console, the log group cannot be located on Amazon Cloudwatch
What are the MOST likely reasons for this situation? (SELECT TWO)

A company has mandated the use of multi-factor authentication (MFA) for all IAM users, and requires users to make all API-calls using the CLI. However, users are not prompted to enter MFA tokens, and are able to run CLI commands without MFA. In an attempt to enforce MFA, the company attached an IAM policy to all users that denies API calls that have not been authenticated with MFA.
What additional step must be taken to ensure that API calls are authenticated using MFA?

An application running on Amazon EC2 allows users to launch batch jobs for data analysis. The jobs are run asynchronously, and the user is notified when they are complete. While multiple jobs can run concurrently, a user’s request need not be fulfilled for up to 24 hours. To run a job, the application launches an additional EC2 instance that performs all the analytics calculations. A job takes between 75 and 110 minutes to complete and cannot be interrupted.
What is the MOST cost-effective way to run this workload?

An organization has two AWS accounts Development and Production. A SysOps Administrator manages access via IAM. Users require in Development should have access to certain resource in Production.
How can this be accomplished?

A SysOps Administrator has been able to consolidate multiple secure websites onto a single servers and each site is running on a different port. The Administrator now wants to start a duplicate server in a second Availability Zone and put both behind a Load Balancer for high availability.
What would be the command line necessary to deploy one of the sites certificates to the load balancer?

An application resides on multiple EC2 instances in public subnets in two Availability Zones. To improve security
Application Load Balancer (ALB) in separate subnets and pointed the DNS at the ALB instead of EC2 instances.
After the change, traffic is not reaching the instances and an error is being returned from the ALB
What steps must a SysOps Administrator take to resolve this issue and improve the security of the application? (SELECT TWO)

A company is received its latest bill with a large increase in the number of request against Amazon SQS as API call action. Admin need to know of any major changes in it SQS usage. The company is concerned about the cost increase and who or what was missing the calls.
What should the SysOps Administrator use to validate the calls made to SQS?

After a particularly high AWS bill, an organization wants to review the use of AWS Services
What AWS Service will allow the SysOps Administrator to quickly view this information to share it and will also forecast equipment ?

A SysOps Administrator must find a way to setup alerts when Amazon EC2 service limit are close to being reached?
How can the Administrator achieve this requirement?

A SysOps Administrator is reviewing AWS Trusted Advisor warnings and encounters a warning for an S3 bucket policy that discussing the issue with the bucket owner, the Administrator realizes the S3 bucket is an origin for an Amazon Cloudfront
Which action should the Administrator take to ensure that users access objects in Amazon S3 by using only Cloudfront URL?

An Auto Scaling group scales up and down based on Average CPU Utilization. The alarms is set to trigger a scaling when CPU exceeds 80% for 5 minutes. Currently, the average CPU has been 95% for over two hours and new instances are not being added
What could be the issue?

The Database Administrator team is interested in performing manual backups of an Amazon RDS Oracle DB instance.
What step should be taken to perform the backups?

A Company has created a separate AWS account for all development work to protect the production environment. In the development environment users request permission to manipulate IAM policies and roles. Corporate policies require that developers are blocked from accessing services.
What is the BEST way to grant the developers privileges in the development account while still complying with corporate policies?

A Company has a web application that runs on both on-premises and on Amazon EC2 instances. Over time both the on-premises server and EC2 instances is crashing. A SysOps Administrator suspects a memory leak in the application and wants unified method to monitor memory utilization.
How can the Administrator track both the EC2 memory utilization and on-premises server memory utilization over time?

A SysOps Administrator is using AWS Cloudformation to deploy resources but would like to manually address any errors the template encounters.
What should the Administrator add to the template to support the requirement?

A Company’s application stores documents within an Amazon S3 bucket. The application is running on Amazon EC2 in a VPC. A recent change in security requirements states that traffic between the company’s application and the S3 bucket must never leave the Amazon network.
What AWS feature can provide this functionality?

An organization with a large IT department has decided to migrate to AWS . With different jobs functions in departments and is not desirable to give all users access to all AWS resources. Currently the organization handles access via LDAP group membership.
What the best method to allow access using current LDAP credentials ?

An Sysops Administrator must set up notifications for whenever combined billing exceeds a certain threshold for all AWS account within company. The Administrator has set up AWS Organizations and enabled Consolidate billing.
Which additionals steps must the Administrator perform to setup the billing alerts?

An organization has been running their website on several m2 Linux instance behind a classic load balancer for more than two years. Traffic and utilization have been constant and predictable.
What should the organization do to reduce cost ?

An application developers are reporting access denied errors when trying to list the content in s3 bucket with IAM Role ARN “arn:aws:iam:11111111:user/application”. The following s3 bucket policy:
{
“Id”: “S3BucketPolicy”,
“Versions”: “2012-10-17”,
“Statement”: [
{
“Sid”: “List”,
“Action”: {
“s3: List*”
},
“Effect”: “Allow”,
“Resources”: {
“arn:aws:s3:::bucketname/*”
},
“Principal”: {
“AWS”: {
“arn:aws:iam::11111111:user/application”
}
}
}
}
}
How should a SysOps Administrator modify the S3 bucket policy to fix the issue?

A Company creates custom AMI images by launching new Amazon EC2 instance from an Amazon Cloudformation template. AMI images is installed software through AWS OpsWorks and take image of each EC2 instance. The process of installing software take a long times, the process stalls due to installations errors.
The SysOps administrator must modify the Cloudformation Template so if the process stalls, stacks will rollback.
Based on the requirements, what should be added to the template?

A Company static website hosted on Amazon S3 was launched recently and is being used. Currently users are experiencing 503 services unavailable errors.
Why are these errors occuring?