Exams > Amazon > AWS-SysOps: AWS Certified SysOps Administrator
AWS-SysOps: AWS Certified SysOps Administrator
Page 3 out of 91 pages Questions 21-30 out of 910 questions
Question#21

A user has received a message from the support team that an issue occurred 1 week back between 3 AM to 4 AM and the EC2 server was not reachable. The user is checking the CloudWatch metrics of that instance. How can the user find the data easily using the CloudWatch console?

  • A. The user can find the data by giving the exact values in the time Tab under CloudWatch metrics
  • B. The user can find the data by filtering values of the last 1 week for a 1 hour period in the Relative tab under CloudWatch metrics
  • C. It is not possible to find the exact time from the console. The user has to use CLI to provide the specific time
  • D. The user can find the data by giving the exact values in the Absolute tab under CloudWatch metrics
Discover Answer Hide Answer

D
If the user is viewing the data inside the CloudWatch console, the console provides options to filter values either using the relative period, such as days /hours or using the Absolute tab where the user can provide data with a specific date and time. The console also provides the option to search using the local timezone under the time range caption in the console.

Question#22

A user has setup Auto Scaling with ELB on the EC2 instances. The user wants to configure that whenever the CPU utilization is below 10%, Auto Scaling should remove one instance. How can the user configure this?

  • A. The user can get an email using SNS when the CPU utilization is less than 10%. The user can use the desired capacity of Auto Scaling to remove the instance
  • B. Use CloudWatch to monitor the data and Auto Scaling to remove the instances using scheduled actions
  • C. Configure CloudWatch to send a notification to Auto Scaling Launch configuration when the CPU utilization is less than 10% and configure the Auto Scaling policy to remove the instance
  • D. Configure CloudWatch to send a notification to the Auto Scaling group when the CPU Utilization is less than 10% and configure the Auto Scaling policy to remove the instance
Discover Answer Hide Answer

D
Amazon CloudWatch alarms watch a single metric over a time period that the user specifies and performs one or more actions based on the value of the metric relative to a given threshold over a number of time periods. The user can setup to receive a notification on the Auto Scaling group with the CloudWatch alarm when the CPU utilization is below a certain threshold. The user can configure the Auto Scaling policy to take action for removing the instance. When the CPU utilization is below 10% CloudWatch will send an alarm to the Auto Scaling group to execute the policy.

Question#23

A user has enabled detailed CloudWatch metric monitoring on an Auto Scaling group. Which of the below mentioned metrics will help the user identify the total number of instances in an Auto Scaling group including pending, terminating and running instances?

  • A. GroupTotalInstances
  • B. GroupSumInstances
  • C. It is not possible to get a count of all the three metrics together. The user has to find the individual number of running, terminating and pending instances and sum it
  • D. GroupInstancesCount
Discover Answer Hide Answer

A
CloudWatch is used to monitor AWS as well as the custom services. For Auto Scaling, CloudWatch provides various metrics to get the group information, such as the Number of Pending, Running or Terminating instances at any moment. If the user wants to get the total number of Running, Pending and Terminating instances at any moment, he can use the GroupTotalInstances metric.

Question#24

A user is trying to configure the CloudWatch billing alarm. Which of the below mentioned steps should be performed by the user for the first time alarm creation in the AWS Account Management section?

  • A. Enable Receiving Billing Reports
  • B. Enable Receiving Billing Alerts
  • C. Enable AWS billing utility
  • D. Enable CloudWatch Billing Threshold
Discover Answer Hide Answer

B
AWS CloudWatch supports enabling the billing alarm on the total AWS charges. Before the user can create an alarm on the estimated charges, he must enable monitoring of the estimated AWS charges, by selecting the option ג€Enable receiving billing alertsג€. It takes about 15 minutes before the user can view the billing data. The user can then create the alarms.

Question#25

A user is checking the CloudWatch metrics from the AWS console. The user notices that the CloudWatch data is coming in UTC. The user wants to convert the data to a local time zone. How can the user perform this?

  • A. In the CloudWatch dashboard the user should set the local time zone so that CloudWatch shows the data only in the local time zone
  • B. In the CloudWatch console select the local time zone under the Time Range tab to view the data as per the local timezone
  • C. The CloudWatch data is always in UTC; the user has to manually convert the data
  • D. The user should have send the local time zone while uploading the data so that CloudWatch will show the data only in the local time zone
Discover Answer Hide Answer

B
If the user is viewing the data inside the CloudWatch console, the console provides options to filter values either using the relative period, such as days/hours or using the Absolute tab where the user can provide data with a specific date and time. The console also provides the option to search using the local time zone under the time range caption in the console because the time range tab allows the user to change the time zone.

Question#26

An organization (Account ID 123412341234. has attached the below mentioned IAM policy to a user. What does this policy statement entitle the user to perform?

  • A. The policy allows the IAM user to modify all IAM users' access keys using the console, SDK, CLI or APIs
  • B. The policy allows the IAM user to modify all IAM users' credentials using the console, SDK, CLI or APIs
  • C. The policy allows the IAM user to modify all credentials using only the console
  • D. The policy allows the IAM user to modify the IAM user's own credentials using the console, SDK, CLI or APIs
Discover Answer Hide Answer

A
AWS Identity and Access Management is a web service which allows organizations to manage users and user permissions for various AWS services. If the organization (Account ID 123412341234. wants some of their users to manage keys (access and secret access keys. of all IAM users, the organization should set the below mentioned policy which entitles the IAM user to modify keys of all IAM users with CLI, SDK or API.

Question#27

A user is trying to connect to a running EC2 instance using SSH. However, the user gets a connection time out error. Which of the below mentioned options is not a possible reason for rejection?

  • A. The access key to connect to the instance is wrong
  • B. The security group is not configured properly
  • C. The private key used to launch the instance is not correct
  • D. The instance CPU is heavily loaded
Discover Answer Hide Answer

A
If the user is trying to connect to a Linux EC2 instance and receives the connection time out error the probable reasons are:
Security group is not configured with the SSH port
The private key pair is not right

The user name to login is wrong -
The instance CPU is heavily loaded, so it does not allow more connections

Question#28

A user has configured Elastic Load Balancing by enabling a Secure Socket Layer (SSL) negotiation configuration known as a Security Policy. Which of the below mentioned options is not part of this secure policy while negotiating the SSL connection between the user and the client?

  • A. SSL Protocols
  • B. Client Order Preference
  • C. SSL Ciphers
  • D. Server Order Preference
Discover Answer Hide Answer

B
Elastic Load Balancing uses a Secure Socket Layer (SSL) negotiation configuration which is known as a Security Policy. It is used to negotiate the SSL connections between a client and the load balancer. A security policy is a combination of SSL Protocols, SSL Ciphers, and the Server Order Preference option.

Question#29

A user has configured CloudWatch monitoring on an EBS backed EC2 instance. If the user has not attached any additional device, which of the below mentioned metrics will always show a 0 value?

  • A. DiskReadBytes
  • B. NetworkIn
  • C. NetworkOut
  • D. CPUUtilization
Discover Answer Hide Answer

A
CloudWatch is used to monitor AWS as the well custom services. For EC2 when the user is monitoring the EC2 instances, it will capture the 7 Instance level and 3 system check parameters for the EC2 instance. Since this is an EBS backed instance, it will not have ephemeral storage attached to it. Out of the 7 EC2 metrics, the 4 metrics DiskReadOps, DiskWriteOps, DiskReadBytes and DiskWriteBytes are disk related data and available only when there is ephemeral storage attached to an instance. For an EBS backed instance without any additional device, this data will be 0.

Question#30

A user has launched an EBS backed EC2 instance. What will be the difference while performing the restart or stop/start options on that instance?

  • A. For restart it does not charge for an extra hour, while every stop/start it will be charged as a separate hour
  • B. Every restart is charged by AWS as a separate hour, while multiple start/stop actions during a single hour will be counted as a single hour
  • C. For every restart or start/stop it will be charged as a separate hour
  • D. For restart it charges extra only once, while for every stop/start it will be charged as a separate hour
Discover Answer Hide Answer

A
For an EC2 instance launched with an EBS backed AMI, each time the instance state is changed from stop to start/ running, AWS charges a full instance hour, even if these transitions happen multiple times within a single hour. Anyway, rebooting an instance AWS does not charge a new instance billing hour.

chevron rightPrevious Nextchevron right