Exams > Amazon > AWS-SysOps: AWS Certified SysOps Administrator
AWS-SysOps: AWS Certified SysOps Administrator
Page 7 out of 91 pages Questions 61-70 out of 910 questions
Question#61

A user has setup an EBS backed instance and attached 2 EBS volumes to it. The user has setup a CloudWatch alarm on each volume for the disk data. The user has stopped the EC2 instance and detached the EBS volumes. What will be the status of the alarms on the EBS volume?

  • A. OK
  • B. Insufficient Data
  • C. Alarm
  • D. The EBS cannot be detached until all the alarms are removed
Discover Answer Hide Answer

B
Amazon CloudWatch alarm watches a single metric over a time period that the user specifies and performs one or more actions based on the value of the metric relative to a given threshold over a number of time periods. Alarms invoke actions only for sustained state changes. There are three states of the alarm: OK, Alarm and Insufficient data. In this case since the EBS is detached and inactive the state will be Insufficient.

Question#62

A user has launched an EC2 instance from an instance store backed AMI. The infrastructure team wants to create an AMI from the running instance. Which of the below mentioned credentials is not required while creating the AMI?

  • A. AWS account ID
  • B. X.509 certificate and private key
  • C. AWS login ID to login to the console
  • D. Access key and secret access key
Discover Answer Hide Answer

C
When the user has launched an EC2 instance from an instance store backed AMI and the admin team wants to create an AMI from it, the user needs to setup the
AWS AMI or the API tools first. Once the tool is setup the user will need the following credentials:
AWS account ID;
AWS access and secret access key;
X.509 certificate with private key.

Question#63

A user has configured an SSL listener at ELB as well as on the back-end instances. Which of the below mentioned statements helps the user understand ELB traffic handling with respect to the SSL listener?

  • A. It is not possible to have the SSL listener both at ELB and back-end instances
  • B. ELB will modify headers to add requestor details
  • C. ELB will intercept the request to add the cookie details if sticky session is enabled
  • D. ELB will not modify the headers
Discover Answer Hide Answer

D
When the user has configured Transmission Control Protocol (TCP. or Secure Sockets Layer (SSL. for both front-end and back-end connections of the Elastic
Load Balancer, the load balancer forwards the request to the back-end instances without modifying the request headers unless the proxy header is enabled. SSL does not support sticky sessions. If the user has enabled a proxy protocol it adds the source and destination IP to the header.

Question#64

A user has created a Cloudformation stack. The stack creates AWS services, such as EC2 instances, ELB, AutoScaling, and RDS. While creating the stack it created EC2, ELB and AutoScaling but failed to create RDS. What will Cloudformation do in this scenario?

  • A. Cloudformation can never throw an error after launching a few services since it verifies all the steps before launching
  • B. It will warn the user about the error and ask the user to manually create RDS
  • C. Rollback all the changes and terminate all the created services
  • D. It will wait for the user's input about the error and correct the mistake after the input
Discover Answer Hide Answer

C
AWS Cloudformation is an application management tool which provides application modelling, deployment, configuration, management and related activities. The
AWS Cloudformation stack is a collection of AWS resources which are created and managed as a single unit when AWS CloudFormation instantiates a template.
If any of the services fails to launch, Cloudformation will rollback all the changes and terminate or delete all the created services.

Question#65

A user is trying to launch an EBS backed EC2 instance under free usage. The user wants to achieve encryption of the EBS volume. How can the user encrypt the data at rest?

  • A. Use AWS EBS encryption to encrypt the data at rest
  • B. The user cannot use EBS encryption and has to encrypt the data manually or using a third party tool
  • C. The user has to select the encryption enabled flag while launching the EC2 instance
  • D. Encryption of volume is not available as a part of the free usage tier
Discover Answer Hide Answer

B
AWS EBS supports encryption of the volume while creating new volumes. It supports encryption of the data at rest, the I/O as well as all the snapshots of the EBS volume. The EBS supports encryption for the selected instance type and the newer generation instances, such as m3, c3, cr1, r3, g2. It is not supported with a micro instance.

Question#66

A user has created a VPC with public and private subnets using the VPC wizard. The user has not launched any instance manually and is trying to delete the
VPC. What will happen in this scenario?

  • A. It will not allow to delete the VPC as it has subnets with route tables
  • B. It will not allow to delete the VPC since it has a running route instance
  • C. It will terminate the VPC along with all the instances launched by the wizard
  • D. It will not allow to delete the VPC since it has a running NAT instance
Discover Answer Hide Answer

D
A Virtual Private Cloud (VPC) is a virtual network dedicated to the user's AWS account. A user can create a subnet with VPC and launch instances inside that subnet. If the user has created a public private subnet, the instances in the public subnet can receive inbound traffic directly from the Internet, whereas the instances in the private subnet cannot. If these subnets are created with Wizard, AWS will create a NAT instance with an elastic IP. If the user is trying to delete the VPC it will not allow as the NAT instance is still running.

Question#67

An organization is measuring the latency of an application every minute and storing data inside a file in the JSON format. The organization wants to send all latency data to AWS CloudWatch. How can the organization achieve this?

  • A. The user has to parse the file before uploading data to CloudWatch
  • B. It is not possible to upload the custom data to CloudWatch
  • C. The user can supply the file as an input to the CloudWatch command
  • D. The user can use the CloudWatch Import command to import data from the file to CloudWatch
Discover Answer Hide Answer

C
AWS CloudWatch supports the custom metrics. The user can always capture the custom data and upload the data to CloudWatch using CLI or APIs. The user always has to include the namespace as part of the request. If the user wants to upload the custom data from a file, he can supply file name along with the parameter -- metric-data to command put-metric-data.

Question#68

A user has launched an EBS backed instance with EC2-Classic. The user stops and starts the instance. Which of the below mentioned statements is not true with respect to the stop/start action?

  • A. The instance gets new private and public IP addresses
  • B. The volume is preserved
  • C. The Elastic IP remains associated with the instance
  • D. The instance may run on a new host computer
Discover Answer Hide Answer

C
A user can always stop/start an EBS backed EC2 instance. When the user stops the instance, it first enters the stopping state, and then the stopped state. AWS does not charge the running cost but charges only for the EBS storage cost. If the instance is running in EC2-Classic, it receives a new private IP address; as the
Elastic IP address (EIP. associated with the instance is no longer associated with that instance.

Question#69

A user has launched an RDS postgreSQL DB with AWS. The user did not specify the maintenance window during creation. The user has configured RDS to update the DB instance type from micro to large. If the user wants to have it during the maintenance window, what will AWS do?

  • A. AWS will not allow to update the DB until the maintenance window is configured
  • B. AWS will select the default maintenance window if the user has not provided it
  • C. AWS will ask the user to specify the maintenance window during the update
  • D. It is not possible to change the DB size from micro to large with RDS
Discover Answer Hide Answer

B
AWS RDS has a compulsory maintenance window which by default is 30 minutes. If the user does not specify the maintenance window during the creation of
RDS then AWS will select a 30-minute maintenance window randomly from an 8-hour block of time per region. In this case, Amazon RDS assigns a 30-minute maintenance window on a randomly selected day of the week.

Question#70

A user has created a subnet in VPC and launched an EC2 instance within it. The user has not selected the option to assign the IP address while launching the instance. The user has 3 elastic IPs and is trying to assign one of the Elastic IPs to the VPC instance from the console. The console does not show any instance in the IP assignment screen. What is a possible reason that the instance is unavailable in the assigned IP console?

  • A. The IP address may be attached to one of the instances
  • B. The IP address belongs to a different zone than the subnet zone
  • C. The user has not created an internet gateway
  • D. The IP addresses belong to EC2 Classic; so they cannot be assigned to VPC
Discover Answer Hide Answer

D
A Virtual Private Cloud (VPC) is a virtual network dedicated to the user's AWS account. A user can create a subnet with VPC and launch instances inside that subnet. When the user is launching an instance he needs to select an option which attaches a public IP to the instance. If the user has not selected the option to attach the public IP, then it will only have a private IP when launched. If the user wants to connect to an instance from the Internet, he should create an elastic IP with VPC. If the elastic IP is a part of EC2 Classic, it cannot be assigned to a VPC instance.

chevron rightPrevious Nextchevron right