[Nov 04, 2021] Valid AWS-SysOps Test Answers & Amazon AWS-SysOps Exam PDF
Realistic AWS-SysOps Exam Dumps with Accurate & Updated Questions
Who are the potential candidates?
The Amazon AWS Certified SysOps Administrator – Associate certification and its exam is intended for the Systems Administrators who carry out the system operations roles. These specialists have a minimum of one year of experience in deploying, operating, and managing Amazon Web Services as well as at least one year of work experience in the above-mentioned role.
NEW QUESTION 355
What is the maximum size of an object in Amazon S3?
- A. 500 MB
- B. Unlimited
- C. 4 TB
- D. 5 TB
Answer: D
Explanation:
Explanation/Reference:
Explanation:
5TB is the maximum size of an object in Amazon S3.
The total volume of data and number of objects you can store are unlimited. Individual Amazon S3 objects can range in size from a minimum of 0 bytes to a maximum of 5 terabytes. The largest object that can be uploaded in a single PUT is 5 gigabytes. For objects larger than 100 megabytes, custom-ers should consider using the Multipart Upload capability.
Reference:
http://aws.amazon.com/s3/faqs/#How_much_data_can_I_store
NEW QUESTION 356
A SysOps Administrator has created an Amazon EC2 instance using an AWS CloudFormation template in the us-east-1 Region. The Administrator finds that this template has failed to create an EC2 instance in the us- west-2 Region.
What is one cause for this failure?
- A. The Amazon Machine Image (AMI) ID referenced in the CloudFormation template could not be found in the us-west-2 Region.
- B. The IAM user was not created in the specified Region.
- C. The cfn-init script did not execute during resource provisioning in the us-west-2 Region.
- D. Resources tags defined in the CloudFormation template are specific to the us-east-1 Region.
Answer: A
Explanation:
Explanation/Reference: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/deploying.applications.html
NEW QUESTION 357
A user has enabled detailed CloudWatch metric monitoring on an Auto Scaling group.
Which of the below mentioned metrics will help the user identify the total number of instances in an Auto Scaling group cluding pending, terminating and running instances?
- A. GroupSumInstances
- B. It is not possible to get a count of all the three metrics together.
The user has to find the individual number of running, terminating and pending instances and sum it - C. GroupTotalInstances
- D. GroupInstancesCount
Answer: C
Explanation:
CloudWatch is used to monitor AWS as well as the custom services. For Auto Scaling, CloudWatch provides various metrics to get the group information, such as the Number of Pending, Running or Terminating instances at any moment. If the user wants to get the total number of Running, Pending and Terminating instances at any moment, he can use the GroupTotalInstances metric.
NEW QUESTION 358
A SysOps Administrator is responsible for managing a set of 12.micro Amazon EC2 instances. The Administrator wants to automatically reboot any instance that exceeds 80% CPU utilization.
Which of these solutions would meet the requirements?
- A. Create an Amazon CloudWatch alarm on the CPUCreditBalance metric and specify a terminate alarm action.
- B. Create an Amazon CloudWatch alarm on the CPUUtilization metric and specify a reboot alarm action.
- C. Create an Amazon CloudWatch alarm on the CPUCreditBalance metric and specify a reboot alarm action.
- D. Create an Amazon CloudWatch alarm on the CPUUtilization metric and specify a terminate alarm action.
Answer: B
NEW QUESTION 359
A user has configured CloudWatch monitoring on an EBS backed EC2 instance. If the user has not attached any additional device, which of the below mentioned metrics will always show a 0 value?
- A. NetworkIn
- B. CPUUtilization
- C. DiskReadBytes
- D. NetworkOut
Answer: C
Explanation:
Explanation/Reference:
Explanation:
CloudWatch is used to monitor AWS as the well custom services. For EC2 when the user is monitoring the EC2 instances, it will capture the 7 Instance level and 3 system check parameters for the EC2 instance.
Since this is an EBS backed instance, it will not have ephermal storage attached to it. Out of the 7 EC2 metrics, the 4 metrics DiskReadOps, DiskWriteOps, DiskReadBytes and DiskWriteBytes are disk related data and available only when there is ephermal storage attached to an instance. For an EBS backed instance without any additional device, this data will be 0.
NEW QUESTION 360
___________ is a task coordination and state management service for cloud applications.
- A. Amazon SES
- B. Amazon FPS
- C. Amazon SNS
- D. Amazon SWF
Answer: D
Explanation:
Amazon Simple Workflow (Amazon SWF) is a task coordination and state management service for cloud applications. With Amazon SWF, you can stop writing complex glue-code and state machinery and invest more in the business logic that makes your applications unique.
Reference: http://aws.amazon.com/swf/
NEW QUESTION 361
A company has an AWS account for each department and wants to consolidate billing and reduce overhead.
The company wants to make sure that the finance team is denied from accessing services other than Amazon EC2, the security team is denied from accessing services other than AWS CloudTrail, and IT can access any resource.
Which solution meets these requirements with the LEAST amount of operational overhead?
- A. Place each department into an organizational unit (OU) within AWS Organizations and use IAM policies to determine which resources they can access.
- B. Create a role for each department within AWS IAM and assign each role the necessary permissions.
- C. Create a user for each department within AWS IAM and assign each user the necessary permissions.
- D. Implement service control policies within AWS Organizations to determine which resources each department can access.
Answer: D
NEW QUESTION 362
A company uses many Amazon Elastic Block Store (Amazon EBS) volumes. The company wants to use Amazon Data Lifecycle Manager (Amazon DLM) to manage the lifecycle of EBS snapshots that have tags of "Production" and "Compliance".
Which combination of the following are needed to turn on this feature? (Choose two.)
- A. A minimum storage requirement of 5 GB
- B. One IAM role for Amazon DLM and another IAM role for the users
- C. A minimum baseline performance of 3 IOPS/GB
- D. Tagging of the EBS volumes
- E. Encryption of the EBS volumes
Answer: B,D
NEW QUESTION 363
An organization is planning to create a user with IAM. They are trying to understand the limitations of IAM so that they can plan accordingly. Which of the below mentioned statements is not true with respect to the limitations of IAM?
- A. The organization can create 100 groups per AWS account
- B. One AWS account can have 250 roles
- C. One IAM user can be a part of a maximum of 5 groups
- D. One AWS account can have a maximum of 5000 IAM users
Answer: C
Explanation:
Explanation
AWS Identity and Access Management is a web service which allows organizations to manage users and user permissions for various AWS services. The default maximums for each of the IAM entities is given below:
Groups per AWS account: 100
Users per AWS account: 5000
Roles per AWS account: 250
Number of groups per user: 10 (that is, one user can be part of these many groups.
NEW QUESTION 364
A company is planning to expand into an additional AWS region for disaster recovery purposes.
the company uses AWS CloudFormation, and its infrastructure is well-defined as code. The company would like to reuse as much of its existing code as possible when deploying resources to additional Regions.
A SysOps Administrator is reviewing how Amazon Machine Images (AMIs) are selected in AWS CloudFormation, but is having trouble making the same stack work in the new Region.
Which action would make it easier to manage multiple Regions?
- A. Create a Mappings section in the stack, and define the Region to AMI associations.
- B. Duplicate the stack so unique AMI names can be coded into the appropriate stack.
- C. Create an alias for each AMI so that an AMI can be referenced by a common name across Regions.
- D. Name each AMI in the new Region exactly the same as the equivalent AMI in the first Region.
Answer: A
Explanation:
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sharing-amis.html
NEW QUESTION 365
A user needs to put sensitive data in an Amazon S3 bucket that can be accessed through an S3 VPC endpoint only. The user must ensure that resources in the VPC can only access the single S3 bucket.
Which combination of actions will meet the requirements? (select TWO.)
- A. Configure the bucket policy to only allow access through the S3 Private Endpoint.
- B. Configure the VPC endpoint policy to only allow the VPC to access the specific S3 bucket.
- C. Modify the VPC endpoint policy on the bucket to only allow the VPC to access it.
- D. Configure the IAM policy attached to the S3 bucket to only allow access from the specific VPC.
- E. Modify the VPC peering configuration to only allow access to the S3 private Endpoint.
Answer: B,C
Explanation:
Explanation/Reference: https://docs.aws.amazon.com/AmazonS3/latest/dev/example-bucket-policies-vpc-endpoint.html
NEW QUESTION 366
A user has launched 10 instances from the same AMI ID using Auto Scaling.
The user is trying to see the average CPU utilization across all instances of the last 2 weeks under the CloudWatch console.
How can the user achieve this?
- A. It is not possible to see the average CPU utilization of the same AMI ID since the instance ID is different
- B. View the Auto Scaling CPU metrics
- C. The user has to use the CloudWatchanalyser to find the average data across instances
- D. Aggregate the data over the instance AMI ID
Answer: B
Explanation:
You can aggregate statistics for the EC2 instances in an Auto Scaling group. Note that Amazon CloudWatch cannot aggregate data across regions. Metrics are completely separate between regions.
http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/GetMetricAutoScalingGroup.html
NEW QUESTION 367
A user has hosted an application on EC2 instances. The EC2 instances are configured with ELB and Auto Scaling. The application server session time out is 2 hours. The user wants to configure connection draining to ensure that all in-flight requests are supported by ELB even though the instance is being deregistered. What time out period should the user specify for connection draining?
- A. 30 minutes
- B. 5 minutes
- C. 1 hour
- D. 2 hours
Answer: C
Explanation:
Explanation
When you enable connection draining, you can specify a maximum time for the load balancer to keep connections alive before reporting the instance as de-registered. The maximum timeout value can be set between 1 and 3,600 seconds (the default is 300 seconds). When the maximum time limit is reached, the load balancer forcibly closes connections to the de-registering instance.
NEW QUESTION 368
Which of the following are the customer's responsibilities, according to the AWS Shared Responsibility Security Model? (Choose two.)
- A. Hypervisor updates and configuration
- B. Client-side data encryption and data integrity authentication
- C. Physical media destruction
- D. Operating system, network, and firewall configuration
- E. AWS data center access logs
Answer: B,D
Explanation:
Explanation/Reference:
Reference: https://cloudacademy.com/blog/aws-shared-responsibility-model-security/
NEW QUESTION 369
A user has created a VPC with public and private subnets using the VPC wizard. The VPC has CIDR
20.0.0.0/16. The private subnet uses CIDR 20.0.0.0/24 . The NAT instance ID is i-a12345. Which of the below mentioned entries are required in the main route table attached with the private subnet to allow instances to connect with the internet?
- A. Destination: 20.0.0.0/0 and Target: 80
- B. Destination: 20.0.0.0/24 and Target: i-a12345
- C. Destination: 20.0.0.0/0 and Target: i-a12345
- D. Destination: 0.0.0.0/0 and Target: i-a12345
Answer: D
Explanation:
Explanation/Reference:
Explanation:
A user can create a subnet with VPC and launch instances inside that subnet. If the user has created a public private subnet, the instances in the public subnet can receive inbound traffic directly from the Internet, whereas the instances in the private subnet cannot. If these subnets are created with Wizard, AWS will create two route tables and attach to the subnets. The main route table will have the entry
"Destination: 0.0.0.0/0 and Target: ia12345", which allows all the instances in the private subnet to connect to the internet using NAT.
NEW QUESTION 370
Your mission is to create a lights-out datacenter environment, and you plan to use AWS OpsWorks to accomplish this.
First you created a stack and added an App Server layer with an instance running in it.
Next you added an application to the instance, and now you need to deploy a MySQL RDS database instance.
Which of the following answers accurately describe how to add a backend database server to an OpsWorks stack? (Choose three.)
- A. Cookbook attributes are stored in a repository, so OpsWorks requires that the "password":
"your_password" attribute for the RDS instance must be encrypted using at least a 256-bit key. - B. The variables that characterize the RDS database connection--host, user, and so on--are set using the corresponding values from the deploy JSON's [:depioy][:app_name][:database] attributes.
- C. Add a new database layer and then add recipes to the deploy actions of the database and App Server layers.
- D. Use OpsWorks' "Clone Stack" feature to create a second RDS stack in another Availability Zone for redundancy in the event of a failure in the Primary AZ.
To switch to the secondary RDS instance, set the [:database] attributes to values that are appropriate for your server which you can do by using custom JSON. - E. Set up the connection between the app server and the RDS layer by using a custom recipe.
The recipe configures the app server as required, typically by creating a configuration file.
The recipe gets the connection data such as the host and database name from a set of attributes in the stack configuration and deployment JSON that AWS OpsWorks installs on every instance.
Answer: B,C,E
NEW QUESTION 371
A company has a web application that is experiencing performance problems many times each night. A root cause analysis reveals spikes in CPU utilization that last 5 minutes on an Amazon EC2 Linux instance A SysOps administrator is tasked with finding the process ID (PID) of the service or process that is consuming more CPU.
How can the administrator accomplish this with the LEAST amount of effort?
- A. Log in to the EC2 Linux instance using a .pem key each night and then run the top command.
- B. Use the default Amazon CloudWatch CPU utilization metric to capture the PID in the Cloud Watch dashboard.
- C. Configure the procstat plugin to collect and send CPU metrics for the running processes.
- D. Configure an AWS Lambda function in Python 3.7 to run every minute to capture the PID and send a notification.
Answer: A
NEW QUESTION 372
......
How to study the AWS Certified SysOps Administrator - Associate Exam
A broad range of AWS Certified SysOps Administrator-Associate dumps for AWS Accredited Developer-Professional Certification have been recognized for certification issues. The reality that students need to prepare attentively does not make certificates easy. It also takes a long time to learn from AWS Accredited Developer-Professional. Therefore, we design various AWS Certified SysOps Administrator-Associate dumps pdf of AWS Accredited Developer professional questions while we understand student specifications. Our items, like the study guide, help students complete examinations. Every examen includes answers and questions that help students pass their final test. You will pass the test after you have taken and learned our modules. But it doesn’t end there; thanks to our full guides, you will still be good in your career. You will produce your goods in the future. To plan any material for you, we have an advanced method. In the development of and commodity, we have used the latest details.
An effort is so hard that even the students' nerves can be shattered. Our waste management systems are so legitimate and best that you have no pain to pass your AWS accredited Developer Professional. AWS Certified SysOps Administrator-Associate practice tests are easy to use so that anyone can appreciate them. In such dynamic areas, where qualification requires a lot of studies, planning, and focus, no one likes loss.
Candidates who want to find more about how to configure and manage AWS systems should take the AWS SysOps Administrator – Associate certification.
AWS-SysOps Exam Dumps - PDF Questions and Testing Engine: https://www.exam4tests.com/AWS-SysOps-valid-braindumps.html
AWS-SysOps Dumps - The Sure Way To Pass Exam: https://drive.google.com/open?id=1L2TjX2KMVjhQjxa2Cfz3foEN_HmRJCOt