AWS Certified SysOps Administrator Associate Practice Exam Part 1 Quiz Format

An organization would like to set up an option for its Developers to receive an email whenever production Amazon EC2 instances are running over 80% CPU.
How can this be accomplished using Amazon Cloudwatch Alarm?

After installing and configuring the Amazon Cloudwatch agent on an EC2 instance, the anticipated system logs are not being received by cloudwatch logs.
Which the following are likely to be the cause of this problem ? ( SELECT TWO)

An organization finds that a high number of gp2 Amazon EBS volumes are running out of space.
Which solution will provide the LEAST disruption with minimal effort?

A company is planning to expand into additional AWS Region for disaster recovery purposes. The company use AWS Cloudformation and it infrastructure is well-defined as code. The company would like to reuse as much of its existing code as possible when deploying resources to additional regions.
A SysOps Administrator is reviewing how AMIs are selected in AWS Cloudformation but is having trouble making the same stack work in new region.
Which action would be made it easier to manage multiple Regions ?

An application is being developed that will be served access a fleet of EC2 instances, which require a consistent view of persistent data. Items stored vary in size from 1KB to 300MB; the items are read frequently, created occasionally and often require partial changes without conflict. The data is not expected to grow beyond 2TB, and items will be expired according to age and content type.
Which AWS solutions meets these requirements?

A company is concerned about a security vulnerability impacting it Linux operating system.
What should the SysOps Administrator do to alleviate this concern?

A company has an application that is running on an EC2 instance in one Availability Zone. A SysOps Administrator has been tasked with making the application highly available. The administrator created a launch configuration from the running EC2 instance. The administrator also properly configured a load balancer.
What step should the administrator complete next to make the application is highly available ?

A company IT security team is performing an audit of the AWS environment to determine which servers need to be patched and where additional security need to be added.
The company is responsible for which of the following ? (SELECT TWO)

The Infosec team has asked the SysOps Administrator to perform some hardening on the company Amazon RDS database instances.
Based on the requirement, what actions should be recommended for the start of security review ? ( Select TWO )

A SysOps administrator must take a team’s single AWS Cloudformation template and split into smaller, service specific templates. All of the services in template reference a single, shared Amazon S3 bucket.
What should the Administrator do to ensure that this S3 bucket can be referenced by all the service templates?

A Company web application runs on Amazon EC2 instances behind an ELB Application Load Balancer. The EC2 instances run in an EC2 auto scaling group across multiple Availability Zones. Data is stored in an Amazon Elastic Cache for Redis cluster and an Amazon RDS DB instance. Company policy requires all system patching to take place at mid night on Tuesday.
Which resources will need to have a maintenance
window configured for midnight on Tuesday? (Select TWO)

A Sysops administrator needs to confirm that security best practices are being followed with the AWS root account user.
How should the Administrator ensure that this is done?

A SysOps Administrator must provide data to show the overall usage of Amazon EC2 instances within each department and must determine if the purchased Reserved instances are being used effectively.
What service should be used to provide the necessary information?

While setting up an AWS managed VPN connection, a Sysops Administrator creates a customer gateway resources in AWS. The customer gateway device reside in a data center with a Nat gateway in front of it.
What address should be used to create customer gateway resource?

A SysOps Administrator has configured a Cloudwatch agent to send custom metrics to Amazon Cloudwatch and is now assembling a cloudwatch dashboard to display these metrics.
What steps should the Administrator take to complete this task?

Recently several critical files were mistakenly deleted from a shared Amazon S3 bucket. A SysOps Administrator tasked prevent mistaken occuring in the future by enabling MFA Delete.
Once enabled, which bucket activities will require MFA authentication? (SELECT TWO)

An organizational audit uncovered an existing Amazon RDS Database that is not currently configured for high availability database, it must be configured for high availability as soon as possible.
How can this requirement be met?

The networking team has created a VPC in an AWS account. The application team has asked for access resources in other account. The SysOps Administrator has created the VPC peering connection between both accounts, but the resource in one VPC cannot connect to resources in the other VPC
What could be causing this issue?

A System Administrator is responsible for maintaining custom, approved AMIs for a company. The AMIs must be shared to other AWS Account.
How can the Administrator address this issue?

The Accounting Department would like to receive billing updates more than once a month. They would like the updates to be maintenanced
with a spreadsheet application.
How can this request be fulfilled?

A SysOps Administrator must generate a report that provides a breakdown of all API activity by a specify user over call API action
Given that AWS Cloudtrail was enabled, how can this report be generated?

When the AWS Cloud Infrastructure experiences an event that may impact an organization, which AWS service can be show up resources are affected ?

A company in running a social media site on EC2 instance. The application store data in an Amazon RDS for MySQL and store read caching by using an Elastic Cache for Redis (cluster mode enabled) cluster to improve read times. A Social event is coming and SysOps Administrator expects website traffic to triple.
What can a SysOps Administrator do to ensure improved read times for users during the social event?

A SysOps Administrator is managing a MemCached cluster in Amazon ElasticCache. The cluster has been ready for capacity with a large instance type with more memory.
What should the Administrator use to make this change?

A Company hosts its website on Amazon EC2 instances behind an Application Load Balancer. The company wants to point its domain zone apex to the website
Which type of record should be used to meet these requirements?

A SysOps Administrator has an AWS Direct Connect connection in place in region us-east-1, between an AWS account and a data center. The Administrator is now required to connect the data to a VPC in another AWS Region, us-west-2, which must have consistent network performance and low-latency
What is the MOST efficient and quickest way to establish this connectivity?

A web-commerce application stores its data in an Amazon Aurora DB cluster with an Aurora replica. The application displays shopping cart information by reading data from the reader endpoint. When monitoring the Aurora database, the SysOps Administrator sees the AuroraReplicaLagMaximum metric for a single replica is high.
What behavior is the application MOST likely exhibiting to users?

A SysOps Administrator is troubleshooting Amazon EC2 connectivity issues to the Internet. The EC2 Instance is in private subnet is applied to the subnet of the EC2 instance.
Destination – 10.2.0.0/16
Target – local
Status – Active
Propagated – No
———————————-
Destination – 0.0.0.0/0
Target – nat-xxxxxx
Status – Blackhole
Propagated – No
What has caused the connectivity issue?

An Amazon EBS Volume attached to an EC2 instance was recently modified. Part of the modification included increasing capacity. Administrator notices that the increased storage capacity is not reflected in the file system.
Which step should the Administrator complete to use the increased storage capacity?

During a security investigation it is determined that there is a coordinated attack on the web application deployed in Amazon EC2 Instance through malformed HTTP headers
What AWS service or feature would prevent this traffic from reaching the EC instances?

A SysOps Administrator is notified that a security vulnerability affects a version of MySQL RDS database cluster. Who is responsible for ensuring that is the patch is applied to the MySQL cluster?

A SysOps Administrator has implemented an Auto Scaling group with a step scaling policy. The Administrator notices that the additional instances have not been included in the aggregated metrics.
Why are the additional instances missing from the aggregated metrics?

A SysOps Administrator is creating additional Amazon EC2 instances and received an InstanceLimitExceeded error
What is the cause of the issue and how can it be resolved?

A SysOps Administrator must devise a strategy for enforcing tagging of all EC2 instances and Amazon Elastic Block store (EBS) volumes.
What action can the Administrator take to implement this for real-time enforcement?

A company’s customers are reporting increased latency while accessing static web content from Amazon S3. A SysOps Administrator observed a very high rate of read operations on a particular S3 bucket
What will minimize latency by reducing load on the S3 bucket?

An e-commerce company wants to lower costs on its nightly jobs that aggregate the current day’s sales and store the results in Amazon S3. The jobs are currently run using multiple on-demand instances and the job take just under 2 hours to complete. If a job fails for any reason, it needs to be restarted from the beginning.
What method is the MOST cost effective based on these requirements?

A SysOps Administrator is implementing SSL for a domain of an internet facing application running behind an Application Load Balancer. The Administrator decides to use SSL certificate from Amazon Certificate Manager (ACM) to secure it. Upon creating request for the ALB is fails and the error message “Domain not allowed” is displayed.
How can the Administrator fix the issue?

Malicious traffic is reaching company web servers. A SysOps Administrator is tasked with blocking this traffic. The malicious traffic request is addresses and represents much higher traffic than is typically seen from legitimate users.
How should the Administrator protect the web servers?

A SysOps Administrator created an Amazon VPC with an IPV6 CIDR block, which requires access to the internet. However access from internet to VPC is prohibited. After adding and configuring the required components to the VPC. The Administrator is unable to connect from private subnet to the internet.
What additional route destination rule should the Administrator add to the route tables?

A fleet of servers must send local logs to Amazon Cloudwatch
How should the servers be configured to meet these requirements ?