AWS-SysOps Exam - AWS Certified SysOps Administrator Associate

certleader.com

Q1. - (Topic 1) 

When creation of an EBS snapshot Is initiated but not completed the EBS volume? 

A. Cannot De detached or attached to an EC2 instance until me snapshot completes 

B. Can be used in read-only mode while me snapshot is in progress 

C. Can be used while me snapshot Is in progress 

D. Cannot be used until the snapshot completes 

Answer:

Explanation: Reference: 

http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-copy-snapshot.html 

Q2. - (Topic 3) 

A root account owner is trying to understand the S3 bucket ACL. Which of the below mentioned options cannot be used to grant ACL on the object using the authorized predefined group? 

A. Authenticated user group 

B. All users group 

C. Log Delivery Group 

D. Canonical user group 

Answer:

Explanation: 

An S3 bucket ACL grantee can be an AWS account or one of the predefined Amazon S3 groups. Amazon S3 has a set of predefined groups. When granting account access to a group, the user can specify one of the URLs of that group instead of a canonical user ID. AWS S3 has the following predefined groups: Authenticated Users group: It represents all AWS accounts. All Users group: Access permission to this group allows anyone to access the resource. Log Delivery group: WRITE permission on a bucket enables this group to write server access logs to the bucket. 

Q3. - (Topic 1) 

What is a placement group? 

A. A collection of Auto Scaling groups in the same Region 

B. Feature that enables EC2 instances to interact with each other via nigh bandwidth, low latency connections 

C. A collection of Elastic Load Balancers in the same Region or Availability Zone 

D. A collection of authorized Cloud Front edge locations for a distribution 

Answer:

Explanation: Reference: 

http://aws.amazon.com/ec2/faqs/ 

Q4. - (Topic 2) 

A user is trying to configure the CloudWatch billing alarm. Which of the below mentioned steps should be 

performed by the user for the first time alarm creation in the AWS Account Management section? 

A. Enable Receiving Billing Reports 

B. Enable Receiving Billing Alerts 

C. Enable AWS billing utility 

D. Enable CloudWatch Billing Threshold 

Answer:

Explanation: 

AWS CloudWatch supports enabling the billing alarm on the total AWS charges. Before the user can create an alarm on the estimated charges, he must enable monitoring of the estimated AWS charges, by selecting the option “Enable receiving billing alerts”. It takes about 15 minutes before the user can view the billing data. The user can then create the alarms. 

Q5. - (Topic 1) 

When an EC2 instance that is backed by an S3-based AMI Is terminated, what happens to the data on me root volume? 

A. Data is automatically saved as an E8S volume. 

B. Data is automatically saved as an ESS snapshot. 

C. Data is automatically deleted. 

D. Data is unavailable until the instance is restarted. 

Answer:

Explanation: Reference: 

http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ComponentsAMIs.html 

Q6. - (Topic 1) 

You are designing a system that has a Bastion host. This component needs to be highly available without human intervention. 

Which of the following approaches would you select? 

A. Run the bastion on two instances one in each AZ 

B. Run the bastion on an active Instance in one AZ and have an AMI ready to boot up in the event of failure 

C. Configure the bastion instance in an Auto Scaling group Specify the Auto Scaling group to include multiple AZs but have a min-size of 1 and max-size of 1 

D. Configure an ELB in front of the bastion instance 

Answer:

Q7. - (Topic 1) 

You need to design a VPC for a web-application consisting of an Elastic Load Balancer (ELB). a fleet of web/application servers, and an RDS database The entire Infrastructure must be distributed over 2 availability zones. 

Which VPC configuration works while assuring the database is not available from the Internet? 

A. One public subnet for ELB one public subnet for the web-servers, and one private subnet for the database 

B. One public subnet for ELB two private subnets for the web-servers, two private subnets for RDS 

C. Two public subnets for ELB two private subnets for the web-servers and two private subnets for RDS 

D. Two public subnets for ELB two public subnets for the web-servers, and two public subnets for RDS 

Answer:

Q8. - (Topic 3) 

George has shared an EC2 AMI created in the US East region from his AWS account with Stefano. George copies the same AMI to the US West region. Can Stefano access the copied AMI of George’s account from the US West region? 

A. No, copy AMI does not copy the permission 

B. It is not possible to share the AMI with a specific account 

C. Yes, since copy AMI copies all private account sharing permissions 

D. Yes, since copy AMI copies all the permissions attached with the AMI 

Answer:

Explanation: 

Within EC2, when the user copies an AMI, the new AMI is fully independent of the source AMI; there is no link to the original (source. AMI. AWS does not copy launch the permissions, user-defined tags or the Amazon S3 bucket permissions from the source AMI to the new AMI. Thus, in this case by default Stefano will not have access to the AMI in the US West region. 

Q9. - (Topic 3) 

A user is observing the EC2 CPU utilization metric on CloudWatch. The user has observed some interesting patterns while filtering over the 1 week period for a particular hour. The user wants to zoom that data point to a more granular period. How can the user do that easily with CloudWatch? 

A. The user can zoom a particular period by selecting that period with the mouse and then releasing the mouse 

B. The user can zoom a particular period by double clicking on that period with the mouse 

C. The user can zoom a particular period by specifying the aggregation data for that period 

D. The user can zoom a particular period by specifying the period in the Time Range 

Answer:

Q10. - (Topic 3) 

A user has deployed an application on an EBS backed EC2 instance. For a better performance of application, it requires dedicated EC2 to EBS traffic. How can the user achieve this? 

A. Launch the EC2 instance as EBS dedicated with PIOPS EBS 

B. Launch the EC2 instance as EBS enhanced with PIOPS EBS 

C. Launch the EC2 instance as EBS dedicated with PIOPS EBS 

D. Launch the EC2 instance as EBS optimized with PIOPS EBS 

Answer:

Explanation: 

Any application which has performance sensitive workloads and requires minimal variability with dedicated EC2 to EBS traffic should use provisioned IOPS EBS volumes, which are attached to an EBS-optimized EC2 instance or it should use an instance with 10 Gigabit network connectivity. Launching an instance that is EBSoptimized provides the user with a dedicated connection between the EC2 instance and the EBS volume.