AWS Sysops Practice Questions Part 4

How would you restore an EBS snapshot to an EC2 instance?

Choose the correct answer:

You are running a legacy application that has a hard coded IP address in your application. How might you apply high availability to the instance running that application?

Choose the correct answer:

What item, when attached to a subnet, will allow the internal subnet to communicate to external networks?

Choose the 2 correct answers:

You see an increased load on an EC2 instance that is used as a web server. You decide placing the server behind an Elastic Load Balancer and deploying an additional instance should help meet this increased demand on system resources. You deploy the ELB, configure it to listen for traffic on port 80, bring up a second EC2 instance, move both instances behind the load balancer, and provide customers with the ELB’s URL – https://mywebapp-1234567890.us-west-2.elb.amazonaws.com. You immediately begin receiving complaints that customers cannot connect to the web application via the ELB’s URL. Why?

Choose the correct answer:

If we want to be able to monitor billing and cost metrics, what AWS services do we need to enable and use together?

Choose the correct answer

In your LAMP application, you have some developers that say they would like access to your logs. However, since you are using an AWS Auto Scaling group, your instances are constantly being re-created. What would you do to make sure that these developers can access these log files?

Choose the correct answer:

You run a stateless web application with the following components: an Elastic Load Balancer, three Web/Application servers on EC2, and a MySQL RDS database with 5000 Provisioned IOPS. Average response time for users is increasing. Looking at CloudWatch, you observe 95% CPU usage on the Web/Application servers and 20% CPU usage on the database. The average number of database disk operations varies between 2000 and 2500. How would you improve performance? (Choose Two)

Choose the 2 correct answers:

Your applications in AWS need to authenticate against LDAP credentials that are in your on-premises data center. You need low latency between the AWS app authenticating between AWS and your on- premises network. How can you achieve this?

Choose the correct answer:

You have been tasked with identifying an appropriate storage solution for a NoSQL database that requires random I/O reads of greater than 10,000 4kB IOPS. Which EC2 option will meet this requirement?

Choose the correct answer:

You have enabled a CloudWatch metric on your Redis ElastiCache cluster. Your alarm is triggered due to an increased amount of evictions. How might you go about solving the increased eviction errors from the ElastiCache cluster?

Choose the correct answer:

True or False: Read replicas can be a read replica of another read replica.

Choose the correct answer:

You have decided to extend your on-site data center to Amazon Web Servers by creating a VPC. You already have multiple DNS servers on the premises. You are using these DNS servers to host DNS records for your internal applications. You have a corporate security network policy that says that a DNS name for an internal application can only be resolved internally and never publicly over the internet. Your existing on-premises data center is already connected to your VPC using IPSec VPN.

You are deploying new applications within your AWS service that need to resolve these new applications by name. How might you set up the scalable DNS architecture?

Choose the correct answer:

You manage EC2 instances in two different VPCs and you would like instances in both VPCs to be able to easily communicate with each other. You are considering using VPC peering. Will this work? (Choose Two)

Choose the 2 correct answers:

What is the result of the following bucket policy?
{
“Statement”: [
{
“Sid”: “Sid2”,
“Action”: “s3:*”,
“Effect”: “Allow”,
“Resource”: “arn:aws:s3:::mybucket/*.”,
“Condition”: {
“ArnEquals”: {
“s3:prefix”: “finance_”
}
},
“Principal”: {
“AWS”: [
“*”
]
}
}
]
}

Choose the correct answer:

You notice that several of your AWS environment’s CloudWatch metrics are hovering near a value of 100. Which of these are you least concerned about?

Choose the correct answer:

Your company is being audited by a third party IT auditing service; they have asked you for details about the physical network and virtualization infrastructure. What to you tell them?

Choose the correct answer:

Which of the following is a security best practice for an AWS environment?

Choose the correct answer:

We have terminated an instance in which we have an EBS attached volume. What do we do now if we need to access the important data that was on this volume if we created this instance with the default storage options?

Choose the correct answer:

We have a two-tiered application with the following components. We have an ELB, three web/application servers on EC2, and one MySQL RDS database. When our load grows, the database queries take longer and slow down the overall response time for the user request.

Which three options would we choose to speed up performance?

Choose the 3 correct answers:

A successful systems administrator probably does not need to know how to use a script for:

Choose the correct answer:

Given the following IAM policy:

{
“Version”: “2014-19-17”,
“Statement”: [
{
“Effect”: “Allow”,
“Action”: [
“s3:Get*”, “s3:List*”
],
“Resource”: “*”
},
{
“Effect”: “Allow”,
“Action”: “s3:PutObject”,
“Resource”: “arn:aws:s3:::corporate_bucket/*”
}
]
}

What does the IAM policy allow?

Choose the 2 correct answers:

What is the result of the following bucket policy?

{
“Statement”: [
{
“Sid”: “SID1”,
“Effect”: “Allow”,
“Principal”: {
“AWS”: “*”
},
“Action”: “s3:*”,
“Resource”: “arn:aws:s3:::mybucket/*”,
“Condition”: {
“IpAddress”: {
“aws:SourceIp”: “50.97.0.0/32”
}
}
}
]
}

Choose the correct answer:

Which option below is part of a failover process for a Multi-AZ zone in an RDS instance?

Choose the correct answer:

We have developed a mobile application that gets downloaded several hundred times a week. What authentication method should we enable for the mobile clients to access images that are stored in an AWS S3 bucket that provides us with the highest flexibility and rotates the credentials?

Choose the correct answer:

You have multiple AWS users with access to an Amazon S3 bucket. These users have permission to add and delete objects. If you wanted to prevent accidental deletions, what might you do to prevent these users from performing accidental deletions of an object?

Choose the correct answer:

You maintain an application on AWS to provide development and test platforms for your developers. Currently, both environments consist of an m1.small EC2 instance. Your developers notice performance degradation as they increase network load in the test environment. How would you mitigate these performance issues in the test environment?

Choose the correct answer:

True or False: You can configure an internal elastic load balancer to load balance internal traffic.

Choose the correct answer:

Your supervisor is concerned about losing read access to your RDS database in the unlikely event of an AWS regional failure. You design a plan to create a read replica of the database in another region, but your supervisor sees a problem with this plan. What problem does he see?

Choose the correct answer:

You are uploading 3 gigabytes of data every night to S3 from your on-premises data center. It takes 3 hours to upload and you are uploading it to Amazon S3. You are only using half of your available bandwidth through your internet provider. How might you decrease the amount of time to back up that 3GB of data from your on-premises data center to S3?

Choose the 2 correct answers:

Rule 100 in a NACL associated with subnets A and B denies HTTP traffic from 0.0.0.0/0. Rule 105 in the same NACL allows HTTP traffic from 0.0.0.0/0. EC2 Instances in subnet A are associated with a security group that allows HTTP traffic from 192.168.0.0/24. EC2 Instances in subnet B are associated with a security group that denies HTTP traffic from 128.168.0.0/24. Which of the following statements are true?

Choose the correct answer:

You need to establish a secure backup and archiving solution for your company, using AWS. Documents should be immediately accessible for three months and available for five years for compliance reasons. Which AWS service fulfills these requirements in the most cost-effective way?

Choose the correct answer:

Which of the following CloudWatch metrics require a custom monitoring script to populate the metric?

Choose the 2 correct answers:

What AWS services allow you access to the underlying operating system?

Choose the 3 correct answers:

A colleague noticed that CloudWatch was reporting that there had not been any connections to one of your MySQL databases for several months. You decided to terminate the database. Two months after the database was terminated, you get a phone call from a very upset user who needs information from that database to run end-of-year reports. What can you do?

Choose the correct answer:

You are managing a large magazine application inside Amazon Web Services. Your company posts an article that gets picked up internationally, causing millions of visitors to hit your application. Such a large increase in traffic causes strain on your DB server which is dynamically servicing the blog content. How might you quickly resolve this issue and make the blog post infinitely scaleable?

Choose the correct answer:

Best practice is to pre-warm:

Choose the correct answer:

True or False: When taking a snapshot of an EBS volume there is a performance issue: It decreases the performance due to the increased I/O.

Choose the correct answer:

Your AWS application is set up to use Auto Scaling with an ELB. To be sure that your application is performing its best and the page loads quickly what, precisely, could you monitor in CloudWatch?

Choose the correct answer:

In the shared responsibility model at AWS, what two options are you responsible for instead of Amazon within an audit?

Choose the 2 correct answers:

. Assuming you have kept the default settings and are using the automated backup services provided by AWS, which of the following will retain automated backups?

Choose the correct answer:

Your Infrastructure does not have an Internet gateway attached to any of the subnets. What might you do in order to SSH into your EC2 instances? All other configuration is correct.

Choose the correct answer:

What might be the cause of an EC2 instance not launching in an auto-scaling group?

Choose the 3 correct answers:

You have enabled a CloudWatch metric on your MemCached ElastiCache cluster. Your alarm is triggered due to an increased amount of evictions. How might you go about solving the increased eviction errors from the ElastiCache cluster? (Choose Two)

Choose the 2 correct answers:

How might you assign permissions to an EC2 instance so that the EC2 custom CloudWatch metric scripts can send the required data to Amazon CloudWatch?

Choose the correct answer:

Your RDS database is experiencing high levels of read requests during the business day and performance is slowing down. You have already verified that the source of the congestion is not backups taking place during the business day, as automatic backups are not enabled. Which of the following is the first step you can take toward resolving the issue?

Choose the correct answer:

Which features can be used to restrict access to data in S3?

Choose the 3 correct answers:

What happens during a failover process in a Multi-AZ with AWS RDS instance?

Choose the correct answer:

True or False: In a Network ACL an explicit Deny always overrides an explicit Allow.

Choose the correct answer:

If you configure a VPC with an Internet gateway that has a private and a public subnet, is each in its own Availability Zone and is using a dual-tunnel VPN between the Virtual Private Gateway and the router in the private data center. You want to make sure that you do not have a potential single point of failure in this design. Which option would you get rid of to make sure we achieve this above environment?

Choose the correct answer:

You have been asked to maintain a small AWS environment consisting of five on-demand EC2 web server instances. Traffic from the Internet is distributed to these servers via an Elastic Load Balancer. Your supervisor is not pleased with a recent AWS bill. Assuming a consistent, moderately high load on the web servers, what option should you recommend to reduce the cost for this environment without negatively affecting availability?

Choose the correct answer:

You are running an EC2 instance serving a website with an SSL certificate. Your CPU utilization is constantly high. How might you resolve this issue?

Choose the correct answer:

We need to run a business intelligence application against our production database. This application requires near real time data from the database. How might we configure our RDS setup so that our application does not increase I/O load against our production database?

Choose the correct answer:

When managing our VPC in an AWS region, we want to give other teams access to create their own instances and modify the security groups inside subnets dedicated to their teams. We have to make sure the development team can NOT do anything in their subnets that could allow their instances to impact production instances in the production subnets.

What can we do to separate out our VPC so that instances that the dev team can access can never interfere or interact with the ones within our production?

Choose the correct answer:

Your EC2 instance has a system static check error with an error message of loss of network connectivity. What is the best way to attempt to resolve the EC2 instance status check error?

Choose the 2 correct answers:

A deny overrides an allow in which circumstances?

Choose the correct answer:

What is the most likely reason you are being charged for an instance you launched from a free-tier eligible AMI?

Choose the correct answer:

True or False: Read replicas can have Multi Availability Zones enabled.

Choose the correct answer:

In order for reserved instances to reduce the cost of running instances, those instances must match the exact specifications of the reserved instance including: Region, Availability Zone, and instance type.

Choose the correct answer:

Your website is hosted on 10 EC2 instances in five regions around the globe, with two instances per region. How could you configure your site to maintain availability with minimum downtime if one of the five regions was to lose network connectivity for an extended period?

Choose the correct answer:

When working with Amazon RDS, by default, AWS is responsible for implementing which two management-related activities?

Choose the 2 correct answers:

What would be a reason you would upgrade to Direct Connect instead of a traditional VPN connection?

Choose the correct answer:

Your supervisor sends you a list of several processes in your AWS environment that she would like you to automate via scripts. Which of the following list items should you set as the highest priority?

Choose the correct answer:

Your company is setting up an application that is used to share files. Because these files are important for the sales team, the application must be highly available. Which AWS-specific storage option would you set up for low cost, reliability, and scaling?

Choose the correct answer:

True or False: AWS is solely responsible for the security on the guest operating system.

Choose the correct answer:

Your company has decided to deploy a “Pilot Light” AWS environment to keep minimal resources in AWS with the intention of rapidly expanding the environment in the event of a disaster in your on-premises Datacenter. Which of the following services will you likely not make use of?

Choose the correct answer:

Which of the following could be a procedure to disaster recovery as it relates to RDS?

Choose the correct answer:

True or False: By using NACLs at the subnet level, you can create security entries to ensure that other applications such as development applications do not accidentally have any malicious effects against your primary application.

Choose the correct answer:

You manage a social media website on EC2 instances in an Auto Scaling group. You have configured your Auto Scaling group to deploy one new EC2 instance when CPU utilization is greater than 90% for 3 consecutive periods of 10 minutes. You notice that between 6:00 pm and 10:00 pm every night, you see a gradual increase in traffic to your website. Although Auto Scaling launches several new instances every night, some users complain they are seeing timeouts when trying to load the index page during those hours. What is the least cost-effective way to resolve this problem?

Choose the correct answer:

We have a web application that is using Auto Scaling and an ELB. We would like to monitor the application to make sure that it maintains a good quality of service for our customers, defined by the application’s page load time.

What metic within CloudWatch can we use for this?

Choose the correct answer

True or False: By default, there is no route between the subnets in a VPC.

Choose the correct answer:

True or False: If Multi-AZ is enabled and automated backups occur on your instance, your application will experience performance issues due to the increased I/O of the automated backup.

Choose the correct answer : 

True or False: RDS Read Replicas are Synchronous in their replications.

Choose the correct answer:

You manage a technology blog website on EC2 instances in an Auto Scaling group behind an Elastic Load Balancer. Traffic volume to the site is consistently low, except during several weeks of the year when major technology conferences are occurring, when traffic increases 300 percent. What is the least advisable way to manage this environment?

Choose the correct answer:

What is the result of the following bucket policy?

{
“Statement”: [
{
“Sid”: “Sid1”,
“Action”: “s3:*”,
“Effect”: “Allow”,
“Resource”: “arn:aws:s3:::mybucket/*.”,
“Principal”: {
{“AWS”: [“arn:aws:iam::5555555555:user/jeff”]}
}
},
{
“Sid”: “Sid2”,
“Action”: “s3:*”,
“Effect”: “Deny”,
“Resource”: “arn:aws:s3:::mybucket/*”,
“Principal”: {
“AWS”: [
“*”
]
}
}
]
}

Choose the correct answer:

What is the result of the following bucket policy?

{
“Statement”: [
{
“Sid”: “Sid1”,
“Action”: “s3:*”,
“Effect”: “Allow”,
“Resource”: “arn:aws:s3:::mybucket/*.”,
“Principal”: {
{“AWS”: [“arn:aws:iam::5555555555:user/jeff”]}
}
},
{
“Sid”: “Sid2”,
“Action”: “s3:*”,
“Effect”: “Deny”,
“Resource”: “arn:aws:s3:::mybucket/*”,
“Principal”: {
“AWS”: [
“*”
]
}
}
]
}

Choose the correct answer:

Which of the following would you be likely to schedule during a maintenance window (rather than during business hours) when working in a Multi-AZ RDS environment?

Choose the correct answer:

Assuming you have kept the default settings and have taken manual snapshots, which of the following manual snapshots will be retained?

Choose the 2 correct answers:

True or False: Multi-AZ RDS replications of data are asynchronous.

Choose the correct answer:

Which of the following will cause a noticeable performance impact on an RDS Multi-AZ deployment?

Choose the correct answer:

In your infrastructure, you are running a corporate application using a T2.Small instance. You are also using a NAT instance so that your private instances can reach out to the internet without being publicly available. What is one thing that we should do to speed up bandwidth and performance?

Choose the correct answer:

You support a website with a large user base concentrated on the east coast, but very few users outside of that region. Traffic load is much heavier on the site during business hours so you are planning to implement Auto Scaling to optimize the number of running EC2 instances to meet the traffic load throughout the day. You are also looking for a solution to distribute traffic evenly among those instances. Which of the following solutions will distribute traffic most evenly among the EC2 instances hosting this website in the US-East-1 region?

Choose the correct answer:

Which one of the below setups would need a custom CloudWatch metric in which to monitor?

Choose the correct answer:

What sort of host might you set up in your AWS environment that can be used as a way to “hop” into your environment to gain access to secure servers within a private subnet?

Choose the correct answer:

We are preparing for our regular scheduled security assessment. What two configuration management practices should our organization have implemented?

Choose the 2 correct answers:

A colleague noticed that CloudWatch was reporting that there had not been any connections to one of your MySQL databases for several months. You decided to terminate the database. Two months after the database was terminated, you get a phone call from a very upset user who needs information from that database to run end-of-year reports. You are hopeful that you can restore the database to full functionality from snapshot, but your database administrator is not quite as confident. Why?

Choose the correct answer:

Select all that apply: Per the AWS Acceptable Use Policy, penetration testing of EC2 instances:

Choose the correct answer:

Your company’s compliance department mandates that within your multi-national organization, all data for customers in the UK must never leave UK servers and networks. Similarly, US data must never leave US servers and networks without explicit authorization first. What do we have to do to comply with this requirement in our web-based applications running on AWS in EC2? The user has already set up a user profile that states their geographic location.

Choose the correct answer:

What would we need to attach to a Bastion host or NAT host to a primary host for high availability in the event that the primary host went down and that traffic coming in would establish to a backup Bastion host?

Choose the correct answer:

Which of the following services have automated backups?

Choose the 3 correct answers:

You have been tasked by your manager to build a tiered storage setup for database backups and their logs. These backups must be archived to a durable solution. After 10 days, the backups can then be archived to a lower priced storage tier. The data, however, must be retained for compliance policies. Which tiered storage solution would help you save cost, and still meet this compliance policy?

Choose the correct answer:

You want to run a web application in which application servers on an instance of EC2 are in an Auto Scaling group spread across two Availability Zones. Monitoring over the last six months, we notice that only one of our web servers is needed to handle our minimum load. During our core utilization hours (8-8 M-F), mostly five to six web servers are needed to handle the minimum load. Four to five days a year, the number of web servers required can go up to 18 servers.

What choice would mostly reduce our costs providing full availability?

Choose the correct answer:

You have an Amazon VPC that has a private subnet and a public subnet, in which you have a NAT instance server. You have created a group of EC2 instances that configure themselves at startup via downloading a bootstrapping script from S3 that deploys an application via GIT.

Which one of the following setups would give us the highest level of security?

Choose the correct answer:

You patch the operating system on an EC2 instance and issue a reboot command from inside the instance’s OS. After disconnecting from the instance and waiting several minutes, you notice that you still cannot successfully ping the instance’s public IP address. What is the most likely reason for this?

Choose the correct answer:

You are running an application on an EC2 instance that needs access to stored images on Amazon S3. What would be the best practice for allowing API access from the EC2 instance to Amazon S3?

Choose the correct answer:

Which of the following statements is true?

Choose the 2 correct answers:

Your company’s website is hosted on several EC2 instances behind an Elastic Load Balancer. Every time the development team deploys a new upgrade to the web application, the support desk begins receiving calls of customers being disconnected from their sessions. Customers’ session data is very important, as it contains their shopping cart information, and this information is lost when the customers’ sessions are disconnected. Which of the following steps can be taken to prevent customers’ shopping cart data from being lost without affecting website availability? (Choose Two)

Choose the 2 correct answers:

You manage a popular blog website on EC2 instances in an Auto Scaling group. You notice that between 8:00 am and 8:00 pm, you see a 50% increase in traffic to your website. In addition, there are occasional random 1- to 2-hour spikes in traffic and some users are seeing timeouts when trying to load the index page during those spikes. What is the least cost-effective way to manage this Auto Scaling group?

Choose the correct answer:

You have an Elastic Load Balancer with an Auto Scaling group for your application. You also have 4 running instances with Auto Scaling. All of these instances are running in the same Availability Zone. Some instances within the zone are not highly available. What could be the cause? (Choose Two)

Choose the 2 correct answers:

Your RDS instance is consistently maxed out on its resource utilization. What are multiple ways to solve this issue?

Choose the 3 correct answers:

Instance A and instance B are running in two different subnets, A and B, of a VPC. Instance A is not able to ping instance B. What are two possible reasons for this?

Choose the 2 correct answers:

You have created an application that utilizes Auto Scaling behind an Elastic Load Balancer. You notice that users are not evenly distributing sessions on the newly spun up instances. What could be a reason that your users’ web sessions are stuck on one instance and not using others?

Choose the correct answer:

You notice that several of your AWS environment’s CloudWatch metrics consistently have a value of zero. Which of these are you most likely to be concerned about and take action on?

Choose the correct answer:

Which of the following can be overridden at the EC2 instance level?

Choose the 2 correct answers:

For which of the following reasons would you not contact AWS?

Choose the correct answer:

We have a customer that has a web application that uses cookie-based sessions to see if users are logged in. This uses AWS Elastic Load Balancing and Auto Scaling. When our load on the application increases, then Auto Scaling launches new instances for us, so load on the other instances does not decrease; therefore, all our existing users still experience slow response time.

What could be the cause of this?

Choose the correct answer: