AWS Certified SysOps Administrator – Associate475 questions across 48 pages are complete and free, with no account or card.
475 questions in this bank
Free access · progress saved on this device
A SysOps administrator is notified that an Amazon EC2 instance has stopped responding. The AWS Management Console indicates that the system checks are failing. What should the administrator do first to resolve this issue?
Answer: B
A software development company has multiple developers who work on the same product. Each developer must have their own development environments, and these development environments must be identical. Each development environment consists of Amazon EC2 instances and an Amazon RDS DB instance. The development environments should be created only when necessary, and they must be terminated each night to minimize costs. What is the MOST operationally efficient solution that meets these requirements?
Answer: B
B - https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-run-lambda-schedule.html + https://aws.amazon.com/blogs/mt/using-aws-lambda-to-decommission-products-provisioned-from-an-aws-service-catalog-portfolio/ Ideally you want to delete the Stack, not just the EC2 and RDS instances. Persistant EBS volumes and snapshots may still exist that can incurr cost.
Source: Adapted from community discussion — Finger41
A company has a stateful web application that is hosted on Amazon EC2 instances in an Auto Scaling group. The instances run behind an Application Load Balancer (ALB) that has a single target group. The ALB is configured as the origin in an Amazon CloudFront distribution. Users are reporting random logouts from the web application. Which combination of actions should a SysOps administrator take to resolve this problem? (Choose two.)
Answer: BE
Answer is B and E. Refer url : https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Cookies.html You can configure each cache behavior to do one of the following: Forward all cookies to your origin – CloudFront includes all cookies sent by the viewer when it forwards requests to the origin. https://docs.aws.amazon.com/elasticloadbalancing/latest/application/sticky-sessions.html By default, an Application Load Balancer routes each request independently to a registered target based on the chosen load-balancing algorithm.
Source: Adapted from community discussion — jkwek
A company is partnering with an external vendor to provide data processing services. For this integration, the vendor must host the company's data in an Amazon S3 bucket in the vendor's AWS account. The vendor is allowing the company to provide an AWS Key Management Service (AWS KMS) key to encrypt the company's data. The vendor has provided an IAM role Amazon Resources Name (ARN) to the company for this integration. What should a SysOps administrator do to configure this integration?
Answer: A
The vendor is required to host the S3 bucket. It holds the company's data. The vendor wants to use a company-provided key to encrypt the data. So the company needs to create the new key and then provide access to that key from the IAM role which was provided by the vendor. (Answer: A) D - Can't be D as that would mean the company is hosting the data (not the vendor). D is hosting the data at the company and providing access to the data to the vendor.
Source: Adapted from community discussion — fedorian
A SysOps administrator is using AWS Systems Manager Patch Manager to patch a fleet of Amazon EC2 instances. The SysOps administrator has configured a patch baseline and a maintenance window. The SysOps administrator also has used an instance tag to identify which instances to patch. The SysOps administrator must give Systems Manager the ability to access the EC2 instances. Which additional action must the SysOps administrator perform to meet this requirement?
Answer: B
By default, AWS Systems Manager doesn't have permission to perform actions on your instances. Grant access by using an AWS Identity and Access Management (IAM) instance profile. An instance profile is a container that passes IAM role information to an Amazon Elastic Compute Cloud (Amazon EC2) instance at launch. You can create an instance profile for Systems Manager by attaching one or more IAM policies that define the necessary permissions to a new role or to a role you already created. https://docs.aws.amazon.com/systems-manager/latest/userguide/setup-instance-profile.html
Source: Adapted from community discussion — princajen
A company hosts its website on Amazon EC2 instances in the us-east-1 Region. The company is preparing to extend its website into the eu-central-1 Region, but the database must remain only in us-east-1. After deployment, the EC2 instances in eu-central-1 are unable to connect to the database in us-east-1. What is the MOST operationally efficient solution that will resolve this connectivity issue?
Answer: A
Correct answer is A! VPN options are out of the question. We are left with add the IP address or a security group rule, but since you cannont create a security group rule that references a peer VPC security group, than the answer is clearly A.
Source: Adapted from community discussion — princajen
A company wants to create an automated solution for all accounts managed by AWS Organizations to detect any security groups that use 0.0.0.0/0 as the source address for inbound traffic. The company also wants to automatically remediate any noncompliant security groups by restricting access to a specific CIDR block that corresponds with the company's intranet. Which set of actions should the SysOps administrator take to create a solution?
Answer: A
why A : AWS Config Rule: AWS Config rule that checks for security groups why not D : SCPs are more suited for controlling access to AWS services and actions, not for specific security group configuration checks
Source: Adapted from community discussion — jipark
A company requires that all activity in its AWS account be logged using AWS CloudTrail. Additionally, a SysOps administrator must know when CloudTrail log files are modified or deleted. How should the SysOps administrator meet these requirements?
Answer: A
The answer is A! The CloudTrail Processing Library is a Java library that provides an easy way to process AWS CloudTrail logs. You provide configuration details about your CloudTrail SQS queue and write code to process events. The CloudTrail Processing Library does the rest. It polls your Amazon SQS queue, reads and parses queue messages, downloads CloudTrail log files, parses events in the log files, and passes the events to your code as Java objects. https://docs.aws.amazon.com/awscloudtrail/latest/userguide/use-the-cloudtrail-processing-library.html
Source: Adapted from community discussion — princajen
A company is planning to host its stateful web-based applications on AWS. A SysOps administrator is using an Auto Scaling group of Amazon EC2 instances. The web applications will run 24 hours a day, 7 days a week throughout the year. The company must be able to change the instance type within the same instance family later in the year based on the traffic and usage patterns. Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?
Answer: A
The questions says: "must be able to change the instance TYPE within the SAME instance FAMILY". Note that the question says TYPE, and not SIZE. According to https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ri-modifying.html, You can "Change the instance SIZE within the same instance family and generation" and "For example, you can modify a Reserved Instance from t2.small to t2.large because they're both in the same T2 family and generation. But you can't modify a Reserved Instance from T2 to M2 or from T2 to T3, because in both these examples, the target instance family and generation are not the same as the original Reserved Instance." In the above example: General Purpose Family, TYPE T, Generation 2, SIZE small (T2.large) (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html#AvailableInstanceTypes) Convert it to T2.large. This is same TYPE (T2), different SIZE (large). Hence, Standard would cover it. However, if I want to change T3.small, this would be a different TYPE (T3) within the same family (General Purpose). Hope this example helps claryifing.
Source: Adapted from community discussion — foreverlearner
An application runs on Amazon EC2 instances in an Auto Scaling group. Following the deployment of a new feature on the EC2 instances, some instances were marked as unhealthy and then replaced by the Auto Scaling group. The EC2 instances terminated before a SysOps administrator could determine the cause of the health status changes. To troubleshoot this issue, the SysOps administrator wants to ensure that an AWS Lambda function is invoked in this situation. How should the SysOps administrator meet these requirements?
Answer: C
A is Wrong because Instance scale-in protection does not protect Auto Scaling instances from the following: Health check replacement if the instance fails health checks C is the Correct Answers -- When a scale-in event occurs, a lifecycle hook pauses the instance before it is terminated and sends you a notification using Amazon EventBridge. While the instance is in the wait state, you can invoke an AWS Lambda function or connect to the instance to download logs or other data before the instance is fully terminated. https://docs.aws.amazon.com/autoscaling/ec2/userguide/lifecycle-hooks.html
Source: Adapted from community discussion — Atown
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SOA-C02 practice, question 441. 475 questions available.
Version 1.0.0. How we source questions