Free preview mode
Enjoy the free questions and consider upgrading to gain full access!
AWS-SysOps
Free trial
Verified
Question 76
An organization is measuring the latency of an application every minute and storing data inside a file in the JSON format. The organization wants to send all latency data to AWS CloudWatch. How can the organization achieve this?
- A: The user has to parse the file before uploading data to CloudWatch
- B: It is not possible to upload the custom data to CloudWatch
- C: The user can supply the file as an input to the CloudWatch command
- D: The user can use the CloudWatch Import command to import data from the file to CloudWatch
Question 77
A user has launched an EBS backed instance with EC2-Classic. The user stops and starts the instance. Which of the below mentioned statements is not true with respect to the stop/start action?
- A: The instance gets new private and public IP addresses
- B: The volume is preserved
- C: The Elastic IP remains associated with the instance
- D: The instance may run on a new host computer
Question 78
A user has launched an RDS postgreSQL DB with AWS. The user did not specify the maintenance window during creation. The user has configured RDS to update the DB instance type from micro to large. If the user wants to have it during the maintenance window, what will AWS do?
- A: AWS will not allow to update the DB until the maintenance window is configured
- B: AWS will select the default maintenance window if the user has not provided it
- C: AWS will ask the user to specify the maintenance window during the update
- D: It is not possible to change the DB size from micro to large with RDS
Question 79
An application that you are managing has EC2 instances & Dynamo OB tables deployed to several AWS Regions in order to monitor the performance of the application globally, you would like to see two graphs:
- Avg CPU Utilization across all EC2 instances
- Number of Throttled Requests for all DynamoDB tables.
How can you accomplish this?
- A: Tag your resources with the application name, and select the tag name as the dimension in the Cloudwatch Management console to view the respective graphs
- B: Use the Cloud Watch CLI tools to pull the respective metrics from each regional endpoint Aggregate the data offline & store it for graphing in CloudWatch.
- C: Add SNMP traps to each instance and DynamoDB table Leverage a central monitoring server to capture data from each instance and table Put the aggregate data into Cloud Watch for graphing.
- D: Add a CloudWatch agent to each instance and attach one to each DynamoDB table. When configuring the agent set the appropriate application name & view the graphs in CloudWatch.
Question 80
A user has created a subnet in VPC and launched an EC2 instance within it. The user has not selected the option to assign the IP address while launching the instance. The user has 3 elastic IPs and is trying to assign one of the Elastic IPs to the VPC instance from the console. The console does not show any instance in the IP assignment screen. What is a possible reason that the instance is unavailable in the assigned IP console?
- A: The IP address may be attached to one of the instances
- B: The IP address belongs to a different zone than the subnet zone
- C: The user has not created an internet gateway
- D: The IP addresses belong to EC2 Classic; so they cannot be assigned to VPC
Question 81
A user has launched multiple EC2 instances for the purpose of development and testing in the same region. The user wants to find the separate cost for the production and development instances. How can the user find the cost distribution?
- A: The user should download the activity report of the EC2 services as it has the instance ID wise data
- B: It is not possible to get the AWS cost usage data of single region instances separately
- C: The user should use Cost Distribution Metadata and AWS detailed billing
- D: The user should use Cost Allocation Tags and AWS billing reports
Question 82
A user has created a VPC with CIDR 20.0.0.0/16 using VPC Wizard. The user has created a public CIDR (20.0.0.0/24) and a VPN only subnet CIDR (20.0.1.0/24) along with the hardware VPN access to connect to the user's data center. Which of the below mentioned components is not present when the VPC is setup with the wizard?
- A: Main route table attached with a VPN only subnet
- B: A NAT instance configured to allow the VPN subnet instances to connect with the internet
- C: Custom route table attached with a public subnet
- D: An internet gateway for a public subnet
Question 83
A user has created a VPC with the public subnet. The user has created a security group for that VPC. Which of the below mentioned statements is true when a security group is created?
- A: It can connect to the AWS services, such as S3 and RDS by default
- B: It will have all the inbound traffic by default
- C: It will have all the outbound traffic by default
- D: It will allow by default traffic to the internet gateway
Question 84
A user has setup an Auto Scaling group. The group has failed to launch a single instance for more than 24 hours. What will happen to Auto Scaling in this condition?
- A: Auto Scaling will keep trying to launch the instance for 72 hours
- B: Auto Scaling will suspend the scaling process
- C: Auto Scaling will start an instance in a separate region
- D: The Auto Scaling group will be terminated automatically
Question 85
A user is planning to set up the Multi AZ feature of RDS. Which of the below mentioned conditions won't take advantage of the Multi AZ feature?
- A: Availability zone outage
- B: A manual failover of the DB instance using Reboot with failover option
- C: Region outage
- D: When the user changes the DB instance's server type
Question 86
An organization has configured Auto Scaling with ELB. One of the instance health check returns the status as Impaired to Auto Scaling. What will Auto Scaling do in this scenario?
- A: Perform a health check until cool down before declaring that the instance has failed
- B: Terminate the instance and launch a new instance
- C: Notify the user using SNS for the failed state
- D: Notify ELB to stop sending traffic to the impaired instance
Question 87
A user is using Cloudformation to launch an EC2 instance and then configure an application after the instance is launched. The user wants the stack creation of
ELB and AutoScaling to wait until the EC2 instance is launched and configured properly. How can the user configure this?
- A: It is not possible that the stack creation will wait until one service is created and launched
- B: The user can use the HoldCondition resource to wait for the creation of the other dependent resources
- C: The user can use the DependentCondition resource to hold the creation of the other dependent resources
- D: The user can use the WaitCondition resource to hold the creation of the other dependent resources
Question 88
An organization has configured two single availability zones. The Auto Scaling groups are configured in separate zones. The user wants to merge the groups such that one group spans across multiple zones. How can the user configure this?
- A: Run the command as-join-auto-scaling-group to join the two groups
- B: Run the command as-update-auto-scaling-group to configure one group to span across zones and delete the other group
- C: Run the command as-copy-auto-scaling-group to join the two groups
- D: Run the command as-merge-auto-scaling-group to merge the groups
Question 89
An AWS account wants to be part of the consolidated billing of his organization's payee account. How can the owner of that account achieve this?
- A: The payee account has to request AWS support to link the other accounts with his account
- B: The owner of the linked account should add the payee account to his master account list from the billing console
- C: The payee account will send a request to the linked account to be a part of consolidated billing
- D: The owner of the linked account requests the payee account to add his account to consolidated billing
Question 90
When assessing an organization s use of AWS API access credentials which of the following three credentials should be evaluated? (Choose three.)
- A: Key pairs
- B: Console passwords
- C: Access keys
- D: Signing certificates
- E: Security Group memberships
Question 91
A sysadmin has created the below mentioned policy on an S3 bucket named cloudacademy. What does this policy define?
- A: It will make the cloudacademy bucket as well as all its objects as public
- B: It will allow everyone to view the ACL of the bucket
- C: It will give an error as no object is defined as part of the policy while the action defines the rule about the object
- D: It will make the cloudacademy bucket as public
Question 92
A user has launched two EBS backed EC2 instances in the US-East-1a region. The user wants to change the zone of one of the instances. How can the user change it?
- A: The zone can only be modified using the AWS CLI
- B: Create an AMI of the running instance and launch the instance in a separate AZ
- C: Stop one of the instances and change the availability zone
- D: From the AWS EC2 console, select the Actions - > Change zones and specify the new zone
Question 93
An organization (account ID 123412341234) has configured the IAM policy to allow the user to modify his credentials. What will the below mentioned statement allow the user to perform?
- A: The IAM policy will throw an error due to an invalid resource name
- B: The IAM policy will allow the user to subscribe to any IAM group
- C: Allow the IAM user to update the membership of the group called TestingGroup
- D: Allow the IAM user to delete the TestingGroup
Question 94
A user has configured ELB with two EBS backed instances. The user has stopped the instances for 1 week to save costs. The user restarts the instances after 1 week. Which of the below mentioned statements will help the user to understand the ELB and instance registration better?
- A: There is no way to register the stopped instances with ELB
- B: The user cannot stop the instances if they are registered with ELB
- C: If the instances have the same Elastic IP assigned after reboot they will be registered with ELB
- D: The instances will automatically get registered with ELB
Question 95
A user is trying to connect to a running EC2 instance using SSH. However, the user gets a Host key not found error. Which of the below mentioned options is a possible reason for rejection?
- A: The user has provided the wrong user name for the OS login
- B: The instance CPU is heavily loaded
- C: The security group is not configured properly
- D: The access key to connect to the instance is wrong
Question 96
A user has hosted an application on EC2 instances. The EC2 instances are configured with ELB and Auto Scaling. The application server session time out is 2 hours. The user wants to configure connection draining to ensure that all in-flight requests are supported by ELB even though the instance is being deregistered.
What time out period should the user specify for connection draining?
- A: 5 minutes
- B: 1 hour
- C: 30 minutes
- D: 2 hours
Question 97
A user is using the AWS EC2. The user wants to make so that when there is an issue in the EC2 server, such as instance status failed, it should start a new instance in the user's private cloud. Which AWS service helps to achieve this automation?
- A: AWS CloudWatch + Cloudformation
- B: AWS CloudWatch + AWS AutoScaling + AWS ELB
- C: AWS CloudWatch + AWS VPC
- D: AWS CloudWatch + AWS SNS
Question 98
A sys admin has enabled logging on ELB. Which of the below mentioned fields will not be a part of the log file name?
- A: Load Balancer IP
- B: EC2 instance IP
- C: S3 bucket name
- D: Random string
Question 99
A user has created a queue named awsmodule with SQS. One of the consumers of queue is down for 3 days and then becomes available. Will that component receive message from queue?
- A: Yes, since SQS by default stores message for 4 days
- B: No, since SQS by default stores message for 1 day only
- C: No, since SQS sends message to consumers who are available that time
- D: Yes, since SQS will not delete message until it is delivered to all consumers
Question 100
An organization has setup multiple IAM users. The organization wants that each IAM user accesses the IAM console only within the organization and not from outside. How can it achieve this?
- A: Create an IAM policy with the security group and use that security group for AWS console login
- B: Create an IAM policy with a condition which denies access when the IP address range is not from the organization
- C: Configure the EC2 instance security group which allows traffic only from the organization's IP range
- D: Create an IAM policy with VPC and allow a secure gateway between the organization and AWS Console
Free preview mode
Enjoy the free questions and consider upgrading to gain full access!