EMT Practice Test

1. Question Content...

---

Question1: You are running a database on an EC2 instance, with the data stored on Elastic Block Store (EBS) for persistence At times throughout the day, you are seeing large variance in the response times of the database queries Looking into the instance with the isolate command you see a lot of wait time on the disk volume that the database's data is stored on.
What two ways can you improve the performance of the database's storage while maintaining the current persistence of the data? Choose 2 answers

Question2: Amazon Cognito supports web identity federation through _____.

Question3: A sysops administrator is trying to deploy a new Amazon EC2 instance using the AWS Management Console, but the instance is failing to launch.
What could be causing this problem? (Choose two.)

Question4: An enterprise is using federated Security Assertion Markup Language (SAML) to access the AWS Management Console.
How should the SAML assertion mapping be configured?

Question5: A SysOps Administrator is notified that an Amazon EC2 instance has stopped responding. The AWS Management Console indicates that the system checks are failing.
What should the SysOps Administrator do first to resolve this issue?

Question6: Which of the following services can receive an alert from CloudWatch?

Question7: A SysOps Administrator maintains several Amazon EC2 instances that do not have access to the public internet. To patch operating systems, the instances require outbound internet connectivity.
For security reasons, the instances should not be reachable from the public Internet.
The Administrator deploys a NAT instance, updates the security groups, and configures the appropriate routes within the route table. However, the instances are still unable to reach the Internet.
What should be done to resolve the issue?

Question8: A user is trying to aggregate all the CloudWatch metric data of the last 1 week.
Which of the below mentioned statistics is not available for the user as a part of data aggregation?

Question9: An organization has created 10 IAM users.
The organization wants each of the IAM users to have access to a separate DyanmoDB table.
All the users are added to the same group and the organization wants to setup a group level policy for this.
How can the organization achieve this?

Question10: A user is trying to understand the detailed CloudWatch monitoring concept.
Which of the below mentioned services does not provide detailed monitoring with CloudWatch?

Question11: As part of an operational audit, an Administrator is tasked with showing that all security responsibilities under the customer's control are properly executed.
Which of the following items is the customer responsible for providing to the auditor? (Select TWO.)

Question12: When you put objects in Amazon S3, what is the indication that an object was successfully stored?

Question13: Pricing is ____ consumed for EC2 instances.

Question14: A user is launching an instance with EC2. Which options below should the user consider before launching an instance?

Question15: What is a placement group?

Question16: A SysOps Administrator is in the process of setting up a new AWS Storage Gateway. The Storage Gateway activation is failing when the Administrator attempts to activate the Storage Gateway from the Storage Gateway console.
What are the potential causes of this error? (Choose two.)

Question17: A user has created a queue named "awsmodule" with SQS.
One of the consumers of queue is down for 3 days and then becomes available.
Will that component receive message from queue?

Question18: The Security team has decided that there will be no public internet access to HTTP (TCP port 80) because if it is moving to HTTPS for all incoming web traffic. The team has asked a SysOps Administrator to provide a report on any security groups that are not compliant.
What should the SysOps Administrator do to provide near real-time compliance reporting?

Question19: An application stores data in an Amazon RDS database instance. Automated RDS snapshots are taken during specified backup windows every night. In addition, a SysOps Administrator takes monthly manual RDS snapshots. During a maintenance window, the RDS instance was accidentally deleted. How can the Administrator restore the DRS database instance?

Question20: A SysOps Administrator is running an auto-scaled application behind a Classic Load Balncer.
Scaling out is triggered when the CPUUtilization instance metric is more than 75% across the Auto Scaling group. The Administrator noticed aggressive scaling out and after discussing with developers, an application memory leak is suspected causing aggressive garbage collection cycle.
How can the Administrator troubleshoot the application without triggering the scaling process?

Question21: Which AWS service offers cost optimization by launching instances automatically only when needed?

Question22: Bob is an IAM user who has access to the EC2 services. Admin is an IAM user who has access to all the AWS services including IAM. Can Bob change his own password?

Question23: An application accesses data through a file system interface. The application runs on Amazon EC2 instances in multiple Availability Zones, all of which must share the same data. While the amount of data is currently small, the company anticipates that it will grow to tens of terabytes over the lifetime of the application.
What is the MOST scalable storage solution to fulfill the requirement?

Question24: A user runs the command "dd if=/dev/zero of=/dev/xvdfbs=1M" on a fresh blank EBS volume attached to a Linux instance.
Which of the below mentioned activities is the user performing with the command given above?

Question25: You can configure Amazon CloudFront to deliver access logs per ________ to an Amazon S3 bucket of your choice.

Question26: A sys admin has created a shopping cart application and hosted it on EC2.
The EC2 instances are running behind ELB.
The admin wants to ensure that the end user request will always go to the EC2 instance where the user session has been created.
How can the admin configure this?

Question27: A user has created an ELB with three instances.
How many security groups will ELB create by default?

Question28: A company runs a web application that users access using the domain name www.example.com.
The company manages the domain name using Amazon Route 53. The company created an Amazon CloudFront distribution in front of the application and would like www.example.com to access the application though CloudFront.
What is the MOST cost-effective way to achieve this?

Question29: A company is using AWS Storage Gateway to create block storage volumes and mount them as Internet Small Computer Systems Interface (iSCSI) devices from on-premises servers. As the Storage Gateway has taken on several new projects, some of the Development teams report that the performance of the iSCSI drives has degraded. When checking the Amazon CloudWatch metrics, a SysOps Administrator notices that the CacheHitPercent metric is below 60% and the CachePercentUsed metric is above 90%.
What steps should the Administrator take to increase Storage Gateway performance?

Question30: An Amazon EC2 instance is unable to connect an SMTP server in a different subnet. Other instances are successfully communicating with the SMTP server, however VPC Flow Logs have been enabled on the SMTP server's network interface and show the following information:
2 223342798652 eni-abe77dab 10.1.1.200 10.100.1.10 1123 25 17 70 48252 1515534437
1515535037 REJECT OK
What can be done to correct this problem?

Question31: Recently several critical files were mistakenly deleted from a shared Amazon S3 bucket. A SysOps Administrator needs to prevent accidental deletions from occurring in the future by enabling MFA Delete.
Once enabled, which bucket activities will require MFA authentication? (Choose two.)

Question32: A SysOps Administrator is creating additional Amazon EC2 instances and receives an error.
InstanceLimitExceeded
What is the cause of the issue and how can it be resolved?

Question33: A SysOps Administrator is creating an Amazon EC2 instance and has received an error.
InsufficientInstanceCapacity
What is the cause of the error and how can it be corrected?

Question34: A company is planning to deploy multiple ecommerce websites across the eu-west-1, ap-east-1, and us- west-1 Regions. The websites consist of Amazon S3 buckets, Amazon EC2 instances, Amazon RDS databases, and Elastic Load Balancers.
Which method will accomplish the deployment with the LEAST amount of effort?

Question35: A company issued SSL certificates to its users, and needs to ensure the private keys that are used to sign the certificates are encrypted. The company needs to be able to store the private keys and perform cryptographic signing operations in a secure environment.
Which service should be used to meet these requirements?

Question36: What does the AWS Storage Gateway provide?

Question37: A company has configured a library of IAM roles that grant access to various AWS resources.
Each employee has an AWS IAM user, some of which have the permission to launch Amazon EC2 instances. The SysOps Administrator has attached the following policy to those users:

What would be the result of this policy?

Question38: A company currently has a single AWS account used by all project teams. The company is migrating to a multi-account strategy, where each project team will have its own account. The AWS IAM configuration must have the same roles and policies for each of the accounts.
What is the MOST efficient way to implement and manage these new requirements?

Question39: A user is trying to understand the ACL and policy for an S3 bucket.
Which of the below mentioned policy permissions is equivalent to the WRITE ACL on a bucket?

Question40: A SysOps Administrator receives a connection timeout error when attempting to connect to an Amazon EC2 instance from a home network using SSH. The Administrator was able to connect to this EC2 instance SSH from their office network in the past.
What cause the connection to time out?

Question41: A SysOps Administrator needs to report on Amazon EC2 instance cost by both project and environment (production, staging, development).
Which action would impact the operations team the LEAST?

Question42: A SysOps Administrator is using AWS CloudFormation to deploy resources but would like to manually address any issues that the template encounters.
What should the Administrator add to the template to support the requirement?

Question43: A SysOps Administrator has an AWS Direct Connect connection in place in region us-east-1, between an AWS account and a data center. The Administrator is now required to connect the data to a VPC in another AWS Region, us-west-2, which must have consistent network performance and low-latency. What is the MOST efficient and quickest way to establish this connectivity?

Question44: In the AWS Storage Gateway, using the ____________, you can cost-effectively and durably archive backup data in Amazon Glacier.

Question45: A user is trying to launch an EBS backed EC2 instance under free usage.
The user wants to achieve encryption of the EBS volume.
How can the user encrypt the data at rest?

Question46: A user has created a VPC with the public and private subnets using the VPC wizard.
The VPC has CIDR 20.0.0.0/16.
The public subnet uses CIDR 20.0.1.0/24.
The user is planning to host a web server in the public subnet (port 80. and a DB server in the private subnet (port 3306..
The user is configuring a security group for the public subnet (WebSecGrp. and the private subnet (DBSecGrp..
Which of the below mentioned entries is required in the web server security group (WebSecGrp.?

Question47: A user has configured Auto Scaling with 3 instances.
The user had created a new AMI after updating one of the instances.
If the user wants to terminate two specific instances to ensure that Auto Scaling launches an instances with the new launch configuration, which command should he run?

Question48: A company must ensure that any objects uploaded to an S3 bucket are encrypted.
Which of the following actions will meet this requirement? (Select TWO.)

Question49: An application is being developed that will be served across a fleet of Amazon EC2 instances, which require a consistent view of persistent data. Items stored vary in size from 1KB to 300MB; the items are read frequently, created occasionally, and often require partial changes without conflict. The data store is not expected to grow beyond 2TB, and items will be expired according to age and content type.
Which AWS service solution meets these requirements?

Question50: A SysOps Administrator is maintaining an application that runs on Amazon EC2 instances behind an Application Load Balancer (ALB). Users are reporting errors when attempting to launch the application. The Administrator notices an increase in the HTTPCode_ELB_5xx_Count Amazon CloudWatch metric for the load balancer.
What is a possible cause for this increase?

Question51: An organization wants to move to Cloud.
They are looking for a secure encrypted database storage option.
Which of the below mentioned AWS functionalities helps them to achieve this?

Question52: A SysOps Administrator has an AWS CloudFormation template of the company's existing infrastructure in us-west-2. The Administrator attempts to use the template to launch a new stack in eu-west-1, but the stack only partially deploys, receives an error message, and then rolls back.
Why would this template fail to deploy? (Choose two.)

Question53: An organization has configured the custom metric upload with CloudWatch.
The organization has given permission to its employees to upload data using CLI as well SDK.
How can the user track the calls made to CloudWatch?

Question54: A user is planning to set up the Multi AZ feature of RDS.
Which of the below mentioned conditions won't take advantage of the Multi AZ feature?

Question55: A user has launched a Windows based EC2 instance.
However, the instance has some issues and the user wants to check the log.
When the user checks the Instance console output from the AWS console, what will it display?

Question56: A company manages multiple AWS accounts and wants to provide access to AWS from a single management account using an existing on-premises Microsoft Active Directory domain.
Which solution will meet these requirements with the LEAST amount of effort?

Question57: An existing data management application is running on a single Amazon EC2 instance and needs to be moved to a new AWS Region in another AWS account.
How can a SysOps Administrator achieve this while maintaining the security of the application?

Question58: You have a proprietary data store on-premises that must be backed up daily by dumping the data store contents to a single compressed 50GB file and sending the file to AWS.
Your SLAs state that any dump file backed up within the past 7 days can be retrieved within 2 hours.
Your compliance department has stated that all data must be held indefinitely.
The time required to restore the data store from a backup is approximately 1 hour.
Your on-premise network connection is capable of sustaining 1gbps to AWS.
Which backup methods to AWS would be most cost-effective while still meeting all of your requirements?

Question59: Elasticity is one of the benefits of using Elastic Beanstalk. Which of the following best describes the concept of elasticity?

Question60: A company Development team to access the AWS Management Console. A System Administrator has been asked to find a solution so that the Developers can sign in to the console using Active Directory (AD) credentials and not as IAM users.
What steps should the Systems Administrator take to enable functionality?

Question61: A company website hosts patches for software that is sold globally. The website runs in AWS and performs well until a large software patch is released. The flood of downloads puts a strain on the web servers and leads to a poor customer experience.
What can the SysOps Administrator propose to enhance customer experience, create a more available web platform, and keep costs low?

Question62: Can you configure multiple Load Balancers with a single Auto Scaling group?

Question63: Pass4test has three AWS accounts. They have created separate IAM users within each account.
Pass4test wants a single IAM login URL such as https://pass4test.signin.aws.amazon.com/console/ for use by IAM users in all three accounts.
How can this be achieved?

Question64: A company is running an Oracle database engine that handles heavy online transaction processing (OLTP) structured data traffic.
How can a SysOps administrator ensure that the database has high availability?

Question65: A company wants to ensure that each department operates within their own isolated environment, and they are only able to use pre-approved services.
How can this requirement be met?

Question66: A company runs an image-processing application on a serverless infrastructure. Each processing job runs in a single AWS Lambda execution. A sysops administrator is tasked with ensuring there is enough capacity to run 500 simultaneous jobs even if other Lambda functions are being run for other applications. The administrator has already increased service limits within the Region.
Which action should be taken?

Question67: A company needs to monitor the read and write IOPs metrics for their AWS MySQL RDS instance and send real-time alerts to their operations team. Which AWS services can accomplish this? Choose 2 answers

Question68: Your business is building a new application that will store its entire customer database on a RDS MySQL database, and will have various applications and users that will query that data for different purposes. Large analytics jobs on the database are likely to cause other applications to not be able to get the query results they need to, before time out.
Also, as your data grows, these analytics jobs will start to take more time, increasing the negative effect on the other applications.
How do you solve the contention issues between these different workloads on the same data?

Question69: A user has setup a billing alarm using CloudWatch for $200.
The usage of AWS exceeded $200 after some days.
The user wants to increase the limit from $200 to $400.
What should the user do?

Question70: InfoSec is concerned that an employee may expose sensitive data in an Amazon S3 bucket.
How can this concern be addressed without putting undue restrictions on users?

Question71: A user has launched two EBS backed EC2 instances in the US-East-1a region.
The user wants to change the zone of one of the instances.
How can the user change it?

Question72: A user has setup an RDS DB with Oracle.
The user wants to get notifications when someone modifies the security group of that DB.
How can the user configure that?

Question73: A user is trying to setup a security policy for ELB.
The user wants ELB to meet the cipher supported by the client by configuring the server order preference in ELB security policy.
Which of the below mentioned preconfigured policies supports this feature?

Question74: A company has mandated the use of multi-factor authentication (MFA) for all IAM users, and requires users to make all API-calls using the CLI. However, users are not prompted to enter MFA tokens, and are able to run CLI commands without MFA. In an attempt to enforce MFA, the company attached an IAM policy to all users that denies API calls that have not been authenticated with MFA.
What additional step must be taken to ensure that API calls are authenticated using MFA?

Question75: A SysOps Administrator created an AWS CloudFormation template for the first time. The stack failed with a status of ROLLBACK_COMPLETE. The Administrator identified and resolved the template issue causing the failure.
How should the Administrator continue with the stack deployment?

Question76: A SysOps Administrator is asked to create an Amazon VPC IPv4 subnet that will support a minimum of 30 network resources simultaneously.
What is the minimum CIDR netmask that will sustain this requirement?

Question77: A SysOps Administrator is maintaining an application running on Amazon EBS-backed Amazon EC2 instances in an Amazon EC2 Auto Scaling group. The application is set to automatically terminate unhealthy instances. The Administrator wants to preserve application logs from these instances for future analysis.
Which action will accomplish this?

Question78: A SysOps Administrator is writing a utility that publishes resources from an AWS Lambda function in AWS account A to an Amazon S3 bucket in AWS Account B.
The Lambda function is able to successfully write new objects to the S3 bucket, but IAM users in Account B are unable to delete objects written to the bucket by Account A.
Which step will fix this issue?

Question79: The Database Administration team is interested in performing manual backups of an Amazon RDS Oracle DB instance.
What steps should be taken to perform the backups?

Question80: A company received its latest bill with a large increase in the number of requests against Amazon SQS as compared to the month prior. The company is not aware of any changes in its SQS usage. The company is concerned about the cost increase and who or what was making these calls.
What should the SysOps Administrator use to validate the calls made to SQS?

Question81: A placement group in Amazon EC2 can

Question82: When performing an audit on an S3 bucket, a SysOps Administrator discovered that Amazon CloudWatch reports that there are 12,345,678 objects in the bucket, whereas the AWS CLI reports that there are 98,765,432 objects in the same bucket.
Which Amazon S3 feature can the SysOps Administrator use to obtain the definitive answer to the number of objects in the bucket?

Question83: A company three-tier web application is not performing as well as expected. A manager has asked a System Administrator to analyser all the system involved and identity where the performance bottleneck exist.
Which AWS service can be help find bottleneck?

Question84: A SysOps Administrator noticed that the cache hit ratio for an Amazon CloudFront distribution is less than 10%. Which collection of configuration changes will increase the cache hit ratio for the distribution? (Select two.)

Question85: A user has launched an EBS backed instance with EC2-Classic.
The user stops and starts the instance.
Which of the below mentioned statements is not true with respect to the stop/start action?

Question86: An organization has created one IAM user and applied the below mentioned policy to the user.
What entitlements do the IAM users avail with this policy?
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": "ec2:Describe*",
"Resource": "*"
},
{
"Effect": "Allow"
"Action": [
"cloudwatch:ListMetrics",
"cloudwatch:GetMetricStatistics",
"cloudwatch:Describe*"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": "autoscaling:Describe*",
"Resource": "*"
}
]
}

Question87: An application running on Amazon EC2 instances in an Auto Scaling group across multiple Availability Zones was deployed using an AWS CloudFormation template. The SysOps team has patched the Amazon Machine Image (AMI) version and must update all the EC2 instances to use the new AMI.
How can the SysOps Administrator use CloudFormation to apply the new AMI while maintaining a minimum level of active instances to ensure service continuity?

Question88: A user has enabled the CloudWatch alarm to estimate the usage charges. If the user disables monitoring of the estimated charges but does not delete the billing alert from the AWS account, what will happen?

Question89: AMIs can be ______________.

Question90: A user is having data generated randomly based on a certain event.
The user wants to upload that data to CloudWatch.
It may happen that event may not have data generated for some period due to andomness.
Which of the below mentioned options is a recommended option for this case?

Question91: A user has a weighing plant.
The user measures the weight of some goods every 5 minutes and sends data to AWS CloudWatch for monitoring and tracking.
Which of the below mentioned parameters is mandatory for the user to include in the request list?

Question92: A SysOps Administrator receives reports of an Auto Scaling group failing to scale when the nodes running Amazon Linux in the cluster are constrained by high memory utilization.
What should the Administrator do to enable scaling to better adapt to the high memory utilization?

Question93: A company's use of AWS Cloud services is quickly growing, so a SysOps Administrator has been asked to generate details of daily spending to share with management.
Which method should the Administrator choose to produce this data?

Question94: A financial service company is running distributed computing software to manage a fleet of 20 servers for their calculations. There are 2 control nodes and 18 worker nodes to run the calculations. Worker nodes can be automatically started by the control nodes when required.
Currently, all nodes are running on demand, and the worker nodes are used for approximately 4 hours each day.
Which combination of actions will be MOST cost-effective? (Choose two.)

Question95: A fleet of servers must send local logs to Amazon CloudWatch.
How should the servers be configured to meet this requirement?

Question96: A user is trying to setup a recurring Auto Scaling process.
The user has setup one process to scale up every day at 8 am and scale down at 7 PM.
The user is trying to setup another recurring process which scales up on the 1st of every month at
8 AM and scales down the same day at 7 PM.
What will Auto Scaling do in this scenario?

Question97: You have a server with a 5O0GB Amazon EBS data volume.
The volume is 80% full.
You need to back up the volume at regular intervals and be able to re-create the volume in a new Availability Zone in the shortest time possible.
All applications using the volume can be paused for a period of a few minutes with no discernible user impact.
Which of the following backup methods will best fulfill your requirements?

Question98: Which two AWS services provide out-of-the-box user configurable automatic backup-as-a-service and backup rotation options? (Choose two.)

Question99: A user is trying to connect to a running EC2 instance using SSH.
However, the user gets a Host key not found error.
Which of the below mentioned options is a possible reason for rejection?

Question100: A user has created a VPC with CIDR 20.0.0.0/24.
The user has used all the IPs of CIDR and wants to increase the size of the VPC.
The user has two subnets: public (20.0.0.0/28. and private (20.0.1.0/28..
How can the user change the size of the VPC?

Question101: A medical imaging company needs to process large amounts of imaging data in real time using a specific instance type. The company wants to guarantee sufficient resource capacity for 1 year.
Which action will meet these requirements in the MOST cost-effective manner?

Question102: A media company produces new video files on-premises every day with a total size of around
100GBS after compression
All files have a size of 1-2 GB and need to be uploaded to Amazon S3 every night in a fixed time window between 3am and 5am Current upload takes almost 3 hours, although less than half of the available bandwidth is used.
What step(s) would ensure that the file uploads are able to complete in the allotted time window?

Question103: A web application runs on Amazon EC2 instances and accesses external services. The external services require authentication credentials. The application is deployed using AWS CloudFormation to three separate environments: development, test, and production. Each environment requires unique credentials for external services.
What option securely provides the application with the needed credentials while requiring MINIMAL administrative overhead?

Question104: Which of the following steps are required to configure SAML 2.0 for federated access to AWS?
(Choose two.)

Question105: Which of the following programming languages is not supported by Amazon's Elastic Beanstalk?

Question106: A security policy allows instances in the Production and Development accounts to write application logs to an Amazon S3 bucket belonging to the Security team's account. Only the Security team should be allowed to delete logs from the S3 bucket.
Using the "myAppRole" EC2 role, the production and development teams report that the application servers are not able to write to the S3 bucket.
Which changes need to be made to the policy to allow the application logs to be written to the S3 bucket?
Production Account: 111111111111
Dev Account: 222222222222
Security Account: 555555555555

Question107: _________ is a fast, reliable, scalable, fully managed message queuing service.

Question108: Is it possible to access S3 objects from the Internet?

Question109: A sys admin is using server side encryption with AWS S3.
Which of the below mentioned statements helps the user understand the S3 encryption functionality?

Question110: A user has enabled termination protection on an EC2 instance.
The user has also set Instance initiated shutdown behaviour to terminate.
When the user shuts down the instance from the OS, what will happen?

Question111: A SysOps Administrator has configured a CloudWatch agent to send custom metrics to Amazon CloudWatch and is now assembling a CloudWatch dashboard to display these metrics.
What steps should be the Administrator take to complete this task?

Question112: A SysOps Administrator has been asked to configure user-defined cost allocation tags for a new AWS account. The company is using AWS Organizations for account management.
What should the Administrator do to enable user-defined cost allocation tags?

Question113: What does Amazon SES provide?

Question114: A SysOps Administrator has received a request to enable access logging for a Network Load Balancer and is setting up an Amazon S3 bucket to store the logs.
What are the MINIMUM requirements for the S3 bucket? (Choose two.)

Question115: Which of the following terms is NOT a key CloudWatch concept?

Question116: While creating the wait condition resource in AWS CloudFormation, a SysOps Administrator receives the error "received 0 signals out of the 1 expected from the EC2 instance".
What steps should be taken to troubleshoot this issue? (Choose two.)

Question117: An organization has two AWS accounts: Development and Production. A SysOps Administrator manages access of IAM users to both accounts. Some IAM users in Development should have access to certain resources in Production.
How can this be accomplished?

Question118: A user has created a VPC with CIDR 20.0.0.0/16 using VPC Wizard.
The user has created a public CIDR (20.0.0.0/24. and a VPN only subnet CIDR (20.0.1.0/24.
along with the hardware VPN access to connect to the user's data centre.
Which of the below mentioned components is not present when the VPC is setup with the wizard?

Question119: A company website hosts patches for software that is sold globally. The website rules in AWS perform will until large software patch is released. The flood of download puts a strain on the web servers and leads to a poor customer experience.
What can the SysOps Administrator propose to enhance customer experience, create a more available platform, and keep costs low?

Question120: A company must ensure that any objects upload to an bucket are encrypted.
Which of the following actions will meet this requirement? (Select TWO.)

Question121: A user is planning to setup notifications on the RDS DB for a snapshot.
Which of the below mentioned event categories is not supported by RDS for this snapshot source type?

Question122: The SysOps Administrator must integrate an existing on-premises asymmetrical key management system into an AWS services platform.
How can the Administrator meet this requirement?

Question123: A user has created an Auto Scaling group using CLI.
The user wants to enable CloudWatch detailed monitoring for that group.
How can the user configure this?

Question124: A company has a business application hosted on Amazon EC2 instances behind an Application Load Balancer. Amazon CloudWatch metrics show that the CPU utilization on the EC2 instances is very high. There are also reports from users that receive HTTP 503 and 504 errors when they try to connect to the application.
Which action will resolve these issues?

Question125: A user is trying to setup a scheduled scaling activity using Auto Scaling.
The user wants to setup the recurring schedule.
Which of the below mentioned parameters is not required in this case?

Question126: A user has received a message from the support team that an issue occurred 1 week back between 3 AM to 4 AM and the EC2 server was not reachable.
The user is checking the CloudWatch metrics of that instance.
How can the user find the data easily using the CloudWatch console?

Question127: A SysOps Administrator created an Amazon VPC with an IPv6 CIDR block, which requires access to the internet. However, access from the internet towards the VPC is prohibited. After adding and configuring the required components to the VPC, the Administrator is unable to connect to any of the domains that reside on the internet.
What additional route destination rule should the Administrator add to the route tables?

Question128: Users are struggling to connect to a single public-facing development web server using its public IP address on a unique port number of 8181. The security group is correctly configured to allow access on that port, and the network ACLs are using the default configuration. Which log type will confirm whether users are trying to connect to the correct port?

Question129: A SysOps Administrator management a fleet of instance store-backed Amazon Linux EC2 instances. The SSH key used to access these instances has been lost.
How can SSH access be restored?

Question130: The fastest way to load 300 TB of data to AWS is _____.

Question131: A SysOps Administrator is reviewing AWS Trusted warnings and encounters a warning for an S3 bucket policy that has open access permissions. While discussing the issue the bucket owner, the Administrator realizes the S3 bucket is an origin for an Amazon CloudFront web distribution.
Which action should the Administrator take to ensure that users access objects in Amazon S3 by using only CloudFront URLs?

Question132: A user has enabled detailed CloudWatch metric monitoring on an Auto Scaling group.
Which of the below mentioned metrics will help the user identify the total number of instances in an Auto Scaling group cluding pending, terminating and running instances?

Question133: A Security team is concerned about the potential of intellectual property leaking to the internet. A SysOps Administrator is tasked with identifying controls to address the potential problem. The servers in question reside in a VPC and cannot be allowed to send traffic to the internet.
How can these requirements be met?

Question134: You need to set up security for your VPC and you know that Amazon VPC provides two features that you can use to increase security for your VPC: Security groups and network access control lists (ACLs). You start to look into security groups first. Which statement below is incorrect in relation to security groups?

Question135: According to the shared responsibility model, for which of the following Amazon EC2 activities is AWS responsible? (Choose two.)

Question136: A user is aware that a huge download is occurring on his instance. He has already set the Auto Scaling policy to increase the instance count when the network I/O increases beyond a certain limit. How can the user ensure that this temporary event does not result in scaling?

Question137: You run a web application where web servers on EC2 Instances are In an Auto Scaling group Monitoring over the last 6 months shows that 6 web servers are necessary to handle the minimum load During the day up to 12 servers are needed Five to six days per year, the number of web servers required might go up to 15.
What would you recommend to minimize costs while being able to provide hill availability?

Question138: A SysOps Administrator found that a newly-deployed Amazon EC2 application server is unable to connect to an existing Amazon RDS database. After enabling VPC Flow Logs and confirming that the flow log is active on the console, the log group cannot be located in Amazon CloudWatch.
What are the MOST likely reasons for this situation? (Select TWO.)

Question139: A company has a VoIP application deployed on AWS. The application is accessed by employees in a remote office and is extremely sensitive to any latency and packets loss. Minimize latency and packet loos is a higher priority than minimizing cost.
Employees are reporting occasional difficulties accessing the application. The Local Network Engineer has completed thorough troubleshooting on the LAN and unable to identify any signs of congestion or equipment failure that may be causing the issue. What is the BEST way to address the connectivity issues between the remote office and the application?

Question140: A SysOps Administrator needs to retrieve a file from the GLACIER storage class of Amazon S3.
The Administrator wants to receive an Amazon SNS notification when the file is available for access.
What action should be taken to accomplish this?

Question141: A user has configured ELB with Auto Scaling.
The user suspended the Auto Scaling AddToLoadBalancer (which adds instances to the load balancer. process for a while.
What will happen to the instances launched during the suspension period?

Question142: The InfoSec team has asked the SysOps Administrator to perform some hardening on the company Amazon RDS database instances.
Based on this requirement, what actions should be recommended for the start of the security review? (Choose two.)

Question143: A web application runs on Amazon EC2 instances with public IPs assigned behind an Application Load Balancer. The instances run in an Auto Scaling group across multiple Availability Zones.
The application stores data in an Amazon RDS Multi-AZ DB instance. The Application Load Balancer, EC2 instances, and RDS DB instance all run in separate sets of subnets. The EC2 instances can communicate with the DB instance, but cannot connect with external services.
What is the MOST likely solution?

Question144: In Amazon VPC, the ______ encryption function is used to ensure privacy among both IKE and IPsec Security Associations.

Question145: An HTTP web application is launched on Amazon EC2 instances behind an ELB Application Load Balancer. The EC2 instances run across multiple Availability Zones. A network ACL and a security group for the load balancer and EC2 instances allow inbound traffic on port 80. After launch, the website cannot be reached over the internet.
What additional step should be taken?

Question146: As part of a federated identity configuration, an IAM policy is created and attached to an IAM role.
Who is responsible for creating the IAM policy and attaching it to the IAM role, according to the shared responsibility model?

Question147: A SysOps Administrator must take a team's single existing AWS CloudFormation template and split it into smaller, service-specific templates. All of the services in the template a single, shared Amazon S3 bucket.
What should the Administrator do to ensure that this S3 bucket can be referenced by all the service templates?

Question148: Which of the following statements is true of IAM?

Question149: A SysOps Administrator stores crash dump files in Amazon S3. New security and privacy measures require that crash dumps older than 6 months be deleted.
Which approach meets this requirement?

Question150: An organization (account ID 123412341234. has configured the IAM policy to allow the user to modify his credentials.
What will the below mentioned statement allow the user to perform?
{
"Version": "2012-10-17",
"Statement": [{
"Effect": "Allow",
"Action": [
"iam:AddUserToGroup",
"iam:RemoveUserFromGroup",
"iam:GetGroup"
],
"Resource": "arn:aws:iam:: 123412341234:group/TestingGroup"
}]

Question151: An Application Load Balancer (ALB) is configured in front of Amazon EC2 instances. The current target group health check configuration is:
Interval: 30 seconds

Unhealthy threshold: 10

Healthy threshold: 5

Which steps should a SysOps Administrator take to reduce the amount of time needed to remove unhealthy instances? (Choose two.)

Question152: A user is measuring the CPU utilization of a private data centre machine every minute.
The machine provides the aggregate of data every hour, such as Sum of data", "Min value", "Max value, and "Number of Data points".
The user wants to send these values to CloudWatch.
How can the user achieve this?

Question153: A user has configured an HTTPS listener on an ELB.
The user has not configured any security policy which can help to negotiate SSL between the client and ELB.
What will ELB do in this scenario?

Question154: A user has created a queue named "myqueue" in US-East region with AWS SQS.
The user's AWS account ID is 123456789012.
If the user wants to perform some action on this queue, which of the below Queue URL should he use?

Question155: A user is using Cloudformation to launch an EC2 instance and then configure an application after the instance is launched.
The user wants the stack creation of ELB and AutoScaling to wait until the EC2 instance is launched and configured properly.
How can the user configure this?

Question156: An organization created an Amazon Elastic File System (Amazon EFS) volume with a file system ID of fs-85baf1fc, and it is actively used by 10 Amazon EC2 hosts. The organization has become concerned that the file system is not encrypted.
How can this be resolved?

Question157: A VPC is connected to a company data center by a VPN. An Amazon EC2 instance with the IP address 172.31.16.139 is within a private subnet of the VPC. A SysOps Administrator issued a ping command to the EC2 instance from an on-premises computer with the IP address
203.0.113.12 and did not receive an acknowledgment. VPC Flow Logs were enabled and showed the following:

What action will resolve the issue?

Question158: In Amazon CloudFront, if you have chosen On for Logging, the access logs are stored in
_______________.

Question159: An application running on Amazon EC2 allows users to launch batch jobs for data analysis. The jobs are run asynchronously, and the user is notified when they are complete. While multiple jobs can run concurrently, a user's request need not be fulfilled for up to 24 hours. To run a job, the application launches an additional EC2 instance that performs all the analytics calculations. A job takes between 75 and 110 minutes to complete and cannot be interrupted.
What is the MOST cost-effective way to run this workload?

Question160: A user is trying to understand AWS SNS.
To which of the below mentioned end points is SNS unable to send a notification?

Question161: An Applications team has successfully deployed an AWS CloudFormation stack consisting of 30 t2-medium Amazon EC2 instances in the us-west-2 Region. When using the same template to launch a stack in us-east-2, the launch failed and rolled back after launching only 10 EC2 instances.
What is a possible cause of this failure?

Question162: A Storage team wants all data transfers to an Amazon S3 bucket to remain within the AWS network. The team makes all changes to the AWS network infrastructure manually. An S3 VPC endpoint is created, and an endpoint policy with the proper permissions is set up. However, the application running on Amazon EC2 instances in the VPC is still unable to access the S3 bucket endpoint.
What is one cause of this issue?

Question163: A root AWS account owner is trying to understand various options to set the permission to AWS S3.
Which of the below mentioned options is not the right option to grant permission for S3?

Question164: A user has configured the Auto Scaling group with the minimum capacity as 3 and the maximum capacity as 5.
When the user configures the AS group, how many instances will Auto Scaling launch?

Question165: A company's customers are reporting increased latency while accessing static web contact from Amazon S3. A SysOps Administrator a very high rate of read operations on a particular S3 bucket. What will minimize latency by reducing lead on the S3 bucket?

Question166: Does Amazon RDS support SSL encryption for SQL Server DB Instances?

Question167: A SysOps Administrator is deploying a website with dynamic content. Company policy requires that users from certain countries or regions cannot access the web content and should receive an error page.
Which of the following can be used to implement this policy? (Choose two.)

Question168: Your VPC automatically comes with a modifiable default network ACL, which by default _____.

Question169: A user has created a VPC with public and private subnets using the VPC wizard.
Which of the below mentioned statements is true in this scenario?

Question170: An organization has launched 5 instances: 2 for production and 3 for testing.
The organization wants that one particular group of IAM users should only access the test instances and not the production ones.
How can the organization set that as a part of the policy?

Question171: A SySOps Administrator is managing an AWS account where Developers are authorized to launch Amazon EC2 instances to test new code. To limit costs, the Administrator must ensure that the EC2 instances in the account are terminated 24 hours after launch.
How should the Administrator meet these requirements?

Question172: A user has enabled versioning on an S3 bucket.
The user is using server side encryption for data at rest.
If the user is supplying his own keys for encryption (SSE-C., what is recommended to the user for the purpose of security?

Question173: A user is planning to use AWS services for his web application.
If the user is trying to set up his own billing management system for AWS, how can he configure it?

Question174: A company's web application runs on Amazon EC2 instances behind an ELB Application Load Balancer. The EC2 instances run in an EC2 Auto Scaling group across multiple Availability Zones. Data is stored in an Amazon ElastiCache for Redis cluster and an Amazon RDS DB instance. Company policy requires all system patching to take place at midnight on Tuesday.
Which resources will need to have a maintenance window configured for midnight on Tuesday?
(Choose two.)

Question175: What is Amazon Import/Export?

Question176: An organization has configured two single availability zones.
The Auto Scaling groups are configured in separate zones.
The user wants to merge the groups such that one group spans across multiple zones.
How can the user configure this?

Question177: In EC2, what happens to the data in an instance store if an instance reboots (either intentionally or unintentionally)?

Question178: A SysOps Administrator has been able to consolidate multiple, secure websites onto a single server, and each site is running on a different port. The Administrator now wants to start a duplicate server in a second Availability Zone and put both behind a load balancer for high availability.
What would be the command line necessary to deploy one of the sites' certificates to the load balancer?

Question179: You have a business-to-business web application running in a VPC consisting of an Elastic Load Balancer (ELB), web servers, application servers and a database.
Your web application should only accept traffic from pre-defined customer IP addresses.
Which two options meet this security requirement? (Choose two.)

Question180: A company has an application that is running on an EC2 instance in one Availability Zone.
A SysOps Administrator has been tasked with making the application highly available. The Administrator created a launch configuration from the running EC2 instance. The Administrator also properly configured a load balancer.
What step should the Administrator complete next to make the application highly available?

Question181: A user has created a VPC with a public subnet.
The user has terminated all the instances which are part of the subnet.
Which of the below mentioned statements is true with respect to this scenario?

Question182: A user has setup connection draining with ELB to allow in-flight requests to continue while the instance is being deregistered through Auto Scaling.
If the user has not specified the draining time, how long will ELB allow inflight requests traffic to continue?

Question183: A Developers that an Amazon EC2 instance has failed. The developer reports that all the data was stored on the root volume is now gone.
What is the expiation for this issue?

Question184: An organization has been running their website on several m2 Linux instances behind a Classic Load Balancer for more than two years. Traffic and utilization have been constant and predictable.
What should the organization do to reduce costs?

Question185: An organization has hired an external firm to audit unauthorized changes on the company's AWS environment, the external auditor needs appropriate access.
How can this be accomplished?

Question186: A Development team is designing an application that processes sensitive information within a hybrid deployment. The team needs to ensure the application data is protected both in transit and at rest.
Which combination of actions should be taken to accomplish this? (Choose two.)

Question187: A custom network ACL that you create ____ until you add rules, and is not associated with a subnet until you explicitly associate it with one.

Question188: In Amazon S3, what is the document that defines who can access a particular bucket or object called?

Question189: A company has created an online retail application that is hosted on a fleet of Amazon EC2 instances behind an ELB Application Load Balancer. User authentication is handled at the individual EC2 instance level. Once a user is authenticated; all requests from that user must go to the same EC2 instance. What should the SysOps Administrator enable to meet these requirements?

Question190: What does enabling a sticky sessions with ELB do?

Question191: A sys admin has created the below mentioned policy and applied to an S3 object named aws.jpg.
The aws.jpg is inside a bucket named cloudacademy.
What does this policy define?
"Statement": [{
"Sid": "Stmt1388811069831",
"Effect": "Allow",
"Principal": { "AWS": "*"},
"Action": [ "s3:GetObjectAcl", "s3:ListBucket", "s3:GetObject"],
"Resource": [ "arn:aws:s3:::cloudacademy/*.jpg"]
}]

Question192: A security researcher has published a new Common Vulnerabilities and Exposures (CVE) report that impacts a popular operating system. A SysOps Administrator is concerned with the new CVE report and wants to patch the company's systems immediately. The administrator contacts AWS Support and requests the patch be applied to all Amazon EC2 instances.
How will AWS respond to this request?

Question193: You are building an online store on AWS that uses SQS to process your customer orders.
Your backend system needs those messages in the same sequence the customer orders have been put in.
How can you achieve that?

Question194: An existing, deployed solution uses Amazon EC2 instances with Amazon EBS General Purpose SSD volumes, am Amazon RDS PostgreSQL database, an Amazon EFS file system, and static objects stored in an Amazon S3 bucket. The Security team now mandates that at-rest encryption be turned on immediately for all aspects of the application, without creating new resources and without any downtime. To satisfy the requirements, which one of these services can the SysOps Administrator enable at-rest encryption on?

Question195: The AWS Key Management Service (AWS KMS) is a managed service that makes it easy for you to create and control the encryption keys used to encrypt your data. AWS KMS is integrated with other AWS services including Amazon EBS, Amazon S3, Amazon Redshift, Elastic Transcoder, Amazon WorkMail, and Amazon RDS to make it simple to encrypt your data with encryption keys that you manage. AWS KMS is also integrated with AWS CloudTrail to provide you with key usage logs to help meet your regulatory and compliance needs. Which of the following types of cryptography keys is supported by AWS KMS currently?

Question196: An Amazon EBS volume attached to an EC2 instance was recently modified. Part of the modification included increasing the storage capacity. The SysOps Administrator notices that the increased storage capacity is not reflected in the file system.
Which step should the Administrator complete to use the increased storage capacity?

Question197: Which of the choices below best describes what Auto Scaling is well suited for?

Question198: A user is trying to create a PIOPS EBS volume with 4000 IOPS and 100 GB size.
AWS does not allow the user to create this volume.
What is the possible root cause for this?

Question199: In Amazon EC2, can you create an EBS volume from a snapshot and attach it to another instance?

Question200: Pass4test (with AWS account ID 111122223333) has created 50 IAM users for its organization's employees. What will be the AWS console URL for these associates?

Question201: You use S3 to store critical data for your company Several users within your group currently have lull permissions to your S3 buckets You need to come up with a solution mat does not impact your users and also protect against the accidental deletion of objects.
Which two options will address this issue? Choose 2 answers

Question202: A local agency plans to deploy 50 Raspberry Pi devices throughout a city. All the devices need to be managed centrally, and their configurations need to be consistent.
What is the BEST service for managing these devices?

Question203: Where is an object stored in Amazon S3?

Question204: An organization is planning to create a user with IAM.
They are trying to understand the limitations of IAM so that they can plan accordingly.
Which of the below mentioned statements is not true with respect to the limitations of IAM?

Question205: A user has created an ELB with the availability zone US-East-1A.
The user wants to add more zones to ELB to achieve High Availability.
How can the user add more zones to the existing ELB?

Question206: What is Amazon CloudFront?

Question207: An Application team has asked a SysOps Administrator to provision an additional environment for an application in four additional regions. The application is running on more than 100 instances in us-east-1, using fully baked AMIs. An AWS CloudFormation template has been created to deploy resources in us- east-1.
What must the SysOps Administrator do to provision the application quickly?

Question208: Which services allow the customer to retain run administrative privileges or the undertying EC2 instances? (Choose two.)

Question209: A user has created a VPC with public and private subnets using the VPC wizard.
The VPC has CIDR 20.0.0.0/16.
The private subnet uses CIDR 20.0.0.0/24.
The NAT instance ID is i-a12345.
Which of the below mentioned entries are required in the main route table attached with the private subnet to allow instances to connect with the internet?

Question210: Exhibit:

Based on the information provided what is causing the lack of access to S3 from the instance?

Question211: A user is using the AWS EC2.
The user wants to make so that when there is an issue in the EC2 server, such as instance status failed, it should start a new instance in the user's private cloud.
Which AWS service helps to achieve this automation?

Question212: A company has a multi-tier web application. In the web tier, all the servers are in private subnets inside a VPC. The development team wants to make changes to the application that requires access to Amazon S3.
What should be done to accomplish this?

Question213: A user has created a VPC with CIDR 20.0.0.0/16 using the wizard.
The user has created public and VPN only subnets along with hardware VPN access to connect to the user's data centre.
The user has not yet launched any instance as well as modified or deleted any setup.
He wants to delete this VPC from the console.
Will the console allow the user to delete the VPC?

Question214: An organization is running multiple applications for their customers. Each application is deployed by running a base AWS CloudFormation template that configures a new VPC. All applications are run in the same AWS account and AWS Region. A SysOps Administrator has noticed that when trying to deploy the same AWS CloudFormation stack, it fails to deploy.
What is likely to be the problem?

Question215: A user has launched an ELB which has 5 instances registered with it.
The user deletes the ELB by mistake.
What will happen to the instances?

Question216: A company website hosts patches for software that is sold globally. The website runs in AWS and performs well until a large software patch is released. The flood of downloads puts a strain on the web servers and leads to a poor customer experience.
What can the Sysops Administrator propose to enhance customer experience, create a more available web platform, and keep costs low?

Question217: An organization with a large IT department has decided to migrate to AWS. With different job functions in the IT department, it is not desirable to give all users access to all AWS resources.
Currently the organization handles access via LDAP credentials?

Question218: A company is planning to expand into an additional AWS region for disaster recovery purposes.
the company uses AWS CloudFormation, and its infrastructure is well-defined as code. The company would like to reuse as much of its existing code as possible when deploying resources to additional Regions.
A SysOps Administrator is reviewing how Amazon Machine Images (AMIs) are selected in AWS CloudFormation, but is having trouble making the same stack work in the new Region.
Which action would make it easier to manage multiple Regions?

Question219: A user is trying to create a list of IAM users with the AWS console. When the IAM users are created which of the below mentioned credentials will be enabled by default for the user?

Question220: A user is creating a Cloudformation stack.
Which of the below mentioned limitations does not hold true for Cloudformation?

Question221: When rebalancing, Auto Scaling launches new instances before terminating the old ones, so that rebalancing does not compromise the performance or availability of your application. Because Auto Scaling attempts to launch new instances before terminating the old ones, being at or near the specified maximum capacity could impede or completely halt rebalancing activities. What does Auto Scaling do in order to avoid this problem?

Question222: You need to design a VPC for a web-application consisting of an Elastic Load Balancer (ELB).
A fleet of web/application servers, and an RDS database.
The entire Infrastructure must be distributed over 2 availability zones.
Which VPC configuration works while assuring the database is not available from the Internet?

Question223: A company wants to send 70% of its inbound traffic to the us-east-1 region and 30% to the us- east region under normal; conditions. If all the servers go down in one of the regions, the company wants all the traffic to be re-routed to the other region.

Question224: Your company Is moving towards tracking web page users with a small tracking Image loaded on each page Currently you are serving this image out of US-East, but are starting to get concerned about the time It takes to load the image for users on the west coast.
What are the two best ways to speed up serving this image? Choose 2 answers

Question225: A company creates custom AMI images by launching new Amazon EC2 instances from an AWS CloudFormation template. It installs and configures necessary software through AWS OpsWorks, and takes images of each EC2 instance. The process of installing and configuring software can take between 2 to 3 hours, but at times, the process stalls due to installation errors.
The SysOps Administrator must modify the CloudFormation template so if the process stalls, the entire stack will fail and roll back.
Based on these requirements, what should be added to the template?

Question226: A company's Marketing department generates gigabytes of assets each day and stores them locally. They would like to protect the files by backing them up to AWS. All the assets should be stored on the cloud, but the most recent assets should be available locally for low latency access.
Which AWS service meets the requirements?

Question227: You are creating an Auto Scaling group whose Instances need to insert a custom metric into CloudWatch.
Which method would be the best way to authenticate your CloudWatch PUT request?

Question228: A user has deployed an application on an EBS backed EC2 instance.
For a better performance of application, it requires dedicated EC2 to EBS traffic.
How can the user achieve this?

Question229: An Organization has been backing up their database backup to Amazon S3. A lifecycle rule has been created to transition these backups to Amazon Glacier storage class. The application development now to restore a backup.
Which step can an Administrator take to restore the backup to Amazon S3 storage?

Question230: You run a web application with the following components Elastic Load Balancer (EL8), 3 Web/Application servers, 1 MySQL RDS database with read replicas, and Amazon Simple Storage Service (Amazon S3) for static content. Average response time for users is increasing slowly.
What three CloudWatch RDS metrics will allow you to identify if the database is the bottleneck?
(Choose three.)

Question231: Which of the following are the customer's responsibilities, according to the AWS Shared Responsibility Security Model? (Choose two.)

Question232: A Security and Compliance team is reviewing Amazon EC2 workloads for unapproved AMI usage.
Which action should a SysOps Administrator recommend?

Question233: An Auto-Scaling group spans 3 AZs and currently has 4 running EC2 instances.
When Auto Scaling needs to terminate an EC2 instance by default, AutoScaling will:
Choose 2 answers

Question234: A user is trying to send custom metrics to CloudWatch using the PutMetricData APIs.
Which of the below mentioned points should the user needs to take care while sending the data to CloudWatch?

Question235: A Development team recently deployed a new version of a web application to production. After the release, penetration testing revealed a cross-site scripting vulnerability that could expose user data.
Which AWS service will mitigate this issue?

Question236: The ______ IAM policy element describes the specific action or actions that will be allowed or denied.

Question237: A customer enquires about whether all his data is secure on AWS, and is especially concerned about Elastic Map Reduce (EMR). You need to inform him of some of the security features in place for AWS. Which of the below statements is incorrect regarding EMR or S3?

Question238: What is an Auto Scaling group?

Question239: A user had aggregated the CloudWatch metric data on the AMI ID.
The user observed some abnormal behaviour of the CPU utilization metric while viewing the last 2 weeks of data.
The user wants to share that data with his manager.
How can the user achieve this easily with the AWS console?

Question240: A company is using an AWS KMS customer master key (CMK) with imported key material. The company references the CMK by its alias in the Java application to encrypt data. The CMK must be rotated every 6 months.
What is the process to rotate the key?

Question241: A SysOps Administrator must ensure all Amazon EBS volumes currently in use, and those created in the future, are encrypted with a specific AWS KMS customer master key (CMK).
What is the MOST efficient way for the Administrator to meet this requirement?

Question242: A user has created a VPC with the public subnet.
The user has created a security group for that VPC.
Which of the below mentioned statements is true when a security group is created?

Question243: A user has setup Auto Scaling with ELB on the EC2 instances.
The user wants to configure that whenever the CPU utilization is below 10%, Auto Scaling should remove one instance.
How can the user configure this?

Question244: A SysOps Administrator is notified that an automated failover of an Amazon RDS database has occurred.
What are possible causes for this? (Choose two.)

Question245: A user wants to make so that whenever the CPU utilization of the AWS EC2 instance is above
90%, the redlight of his bedroom turns on.
Which of the below mentioned AWS services is helpful for this purpose?

Question246: A storage admin wants to encrypt all the objects stored in S3 using server side encryption.
The user does not want to use the AES 256 encryption key provided by S3.
How can the user achieve this?

Question247: A user has launched an RDS postgreSQL DB with AWS.
The user did not specify the maintenance window during creation.
The user has configured RDS to update the DB instance type from micro to large.
If the user wants to have it during the maintenance window, what will AWS do?

Question248: What does Amazon EMR stand for?

Question249: Do Amazon EBS volumes persist independently from the running life of an Amazon EC2 instance?

Question250: A SysOps Administrator is maintaining a web application using an Amazon CloudFront web distribution, an Application Load Balancer (ALB), Amazon RDS, and Amazon EC2 in a VPC. All services have logging enabled. The Administrator needs to investigate HTTP Layer 7 status codes from the web application.
Which log sources contain the status codes? (Choose two.)

Question251: Which of the following services is used to monitor the Amazon Web Services resources?

Question252: A group in IAM can contain many users. Can a user belong to multiple groups?

Question253: A user has configured an EC2 instance in the US-East-1a zone.
The user has enabled detailed monitoring of the instance.
The user is trying to get the data from CloudWatch using a CLI.
Which of the below mentioned CloudWatch endpoint URLs should the user use?

Question254: A user has launched an EC2 instance.
However, due to some reason the instance was terminated.
If the user wants to find out the reason for termination, where can he find the details?

Question255: You have a web-style application with a stateless but CPU and memory-intensive web tier running on a cc2 8xlarge EC2 instance inside of a VPC.
The instance when under load is having problems returning requests within the SLA as defined by your business The application maintains its state in a DynamoDB table, but the data tier is properly provisioned and responses are consistently fast.
How can you best resolve the issue of the application responses not meeting your SLA?

Question256: A user has provisioned 2000 IOPS to the EBS volume.
The application hosted on that EBS is experiencing less IOPS than provisioned.
Which of the below mentioned options does not affect the IOPS of the volume?

Question257: What is a placement group in Amazon EC2?

Question258: A website uses Elastic Load Balancing (ELB) in front of several Amazon EC2 instances backed by an Amazon RDS database. The content is dynamically generated for visitors of a webpage based on their geographic location. and is updated daily. Some of the generated objects are large in size and are taking longer to download than they should, resulting in a poor user experience.
Which approach will improve the user experience?

Question259: An organization's security policy requires multiple copies of all critical data to be replicated across at least a primary and backup data center.
The organization has decided to store some critical data on Amazon S3.
Which option should you implement to ensure this requirement is met?

Question260: A user has configured ELB with SSL using a security policy for secure negotiation between the client and load balancer.
Which of the below mentioned security policies is supported by ELB?

Question261: A SysOps Administrator manages an application that stores object metadata in Amazon S3.
There is a requirement to have S2 server-side encryption enabled on all new objects in the bucket.
How can the Administrator ensure that all new objects to the bucket satisfy this requirement?

Question262: An organization has configured Auto Scaling with ELB.
One of the instance health check returns the status as Impaired to Auto Scaling.
What will Auto Scaling do in this scenario?

Question263: Which of the following services is offered by CloudWatch?

Question264: A user is checking the CloudWatch metrics from the AWS console.
The user notices that the CloudWatch data is coming in UTC.
The user wants to convert the data to a local time zone.
How can the user perform this?

Question265: An application is running on an Amazon EC2 instance. A SysOps Administrator is tasked with allowing the application access to an Amazon S3 bucket.
What should be done to ensure optimal security?

Question266: A user has configured ELB with Auto Scaling. The user temporarily suspended the Auto Scaling terminate process. What might the Availability Zone Rebalancing process (AZRebalance) consequently cause during this period?

Question267: With the threat of ransomware viruses encrypting and holding company data hostage, which action should be taken to protect an Amazon S3 bucket?

Question268: A user creates an Auto Scaling group from the Amazon AWS Console and assigned a tag with a key of "environment" and a value of "Prod". Can the user assign tags to instances launched in the Auto Scaling group, to organize and manage them?

Question269: A company has received a notification in its AWS Personal Health Dashboard that one of its Amazon EBS-backed Amazon EC2 instances is on hardware that is scheduled for maintenance.
The instance runs a critical production workload that must be available during normal business hours.
Which steps will ensure that the instance maintenance does not produce an outage?

Question270: A user is trying to create a PIOPS EBS volume with 8 GB size and 200 IOPS.
Will AWS create the volume?

Question271: A user has launched multiple EC2 instances for the purpose of development and testing in the same region.
The user wants to find the separate cost for the production and development instances.
How can the user find the cost distribution?

Question272: A sysadmin has created the below mentioned policy on an S3 bucket named cloudacademy.
What does this policy define?
"Statement": [{
"Sid": "Stmt1388811069831",
"Effect": "Allow",
"Principal": { "AWS": "*"},
"Action": [ "s3:GetObjectAcl", "s3:ListBucket"],
"Resource": [ "arn:aws:s3:::cloudacademy]
}]

Question273: A SysOps Administrator is attempting to download patches from the internet into an instance in a private subnet. An internet gateway exists for the VPC, and a NAT gateway has been deployed on the public subnet; however, the instance has no internet connectivity. The resources deployed into the private subnet must be inaccessible directly from the public internet.

What should be added to the private subnet's route table in order to address this issue, given the information provided.

Question274: An Administrator has an Amazon EC2 instance with an IPv6 address. The Administrator needs to prevent direct access to this instance from the Internet.
The Administrator should place the EC2 instance in a:

Question275: A user has launched an EBS backed EC2 instance.
The user has rebooted the instance.
Which of the below mentioned statements is not true with respect to the reboot action?

Question276: You have decided to change the Instance type for instances running
In your application tier that are using Auto Scaling.
In which area below would you change the instance type definition?

Question277: A company is using AWS Organizations to manage all their accounts. The Chief Technology Officer wants to prevent certain services from being used within production accounts until the services have been internally certified. They are willing to allow developers to experiment with these uncertified services in development accounts but need a way to ensure that these services are not used within production accounts.
Which option ensures that services are not allowed within the production accounts, yet are allowed in separate development accounts within the LEAST administrative overhead?

Question278: A SysOps Administrator must ensure that AWS CloudFormation deployment changes are properly tracked for governance.
Which AWS service should be used to accomplish this?

Question279: You are designing a system that has a Bastion host.
This component needs to be highly available without human intervention.
Which of the following approaches would you select?

Question280: Amazon EC2 provides virtual computing environments known as _____.

Question281: Which of the following comes before Auto Scaling group creation?

Question282: You are setting up a VPC and you need to set up a public subnet within that VPC. Which following requirement must be met for this subnet to be considered a public subnet?

Question283: What is the default maximum number of VPCs allowed per region?

Question284: The CFO of a company wants to allow one of his employees to view only the AWS usage report page.
Which of the below mentioned IAM policy statements allows the user to have access to the AWS usage report page?

Question285: What was the recommended use case for S3 Reduced Redundancy storage before its deprecation was planned?

Question286: Does AWS offer any web-based graphic user interface to access and manage EC2 instances?

Question287: A company's finance department wants to receive a monthly report showing AWS resource usage by department.
Which solution should be used to meet the requirements?

Question288: Which of the following Identity and Access Management (IAM) policy keys of AWS Direct Connect is used for date/time conditions?

Question289: In the 'Detailed' monitoring data available for your Amazon EBS volumes, Provisioned IOPS volumes automatically send _____ minute metrics to Amazon CloudWatch.

Question290: What does Amazon RDS perform?

Question291: An organization has launched 5 instances: 2 for production and 3 for testing. The organization wants a particular group of IAM users to access only the test instances and not the production ones. They want to deploy the instances in various locations based on the factors that will change from time to time, especially in the test group. They expect instances will often need to be churned, i.e. deleted and replaced, especially in the testing group. This means the five instances they have created now will soon be replaced by a different set of five instances. The members of each group, production and testing, will not change in the foreseeable future. Given the situation, what choice below is the most efficient and time-saving strategy to define the IAM policy?

Question292: A sys admin is trying to understand EBS snapshots.
Which of the below mentioned statements will not be useful to the admin to understand the concepts about a snapshot?

Question293: A user accidentally deleted a file from an Amazon EBS volume. The SysOps Administrator identified a recent snapshot for the volume.
What should the Administrator do to restore the user's file from the snapshot?

Question294: A SysOps Administrator is developing a cost-effective solution assist the Finance department with batch processing Fianc?is flexible on the batch processing schedule. and as long as the batch process runs within the same week, schedule interrupted are acceptable. Which compute strategy can the SysOps Administrator use to meet the requirement?

Question295: A company is auditing their infrastructure to obtain a compliance certification.
Which of the following options are the company's responsibility within the Shared Responsibility Model? (Select two.)

Question296: Application developers are reporting Access Denied errors when trying to list the contents of an Amazon S3 bucket by using the IAM user "arn:aws:iam::111111111111:user/application". The following S3 bucket policy is in use:

How should a SysOps Administrator modify the S3 bucket policy to fix the issue?

Question297: A company has mandated the use factor authentication (MFA) for all user, and requires users to make all API calls using CLI. However, uses are not prompted to enter MFA token, and able to return CLI commands without MF

Question298: In order to optimize performance for a compute cluster that requires low inter-node latency, which feature in the following list should you use?

Question299: A user is trying to understand the detailed CloudWatch monitoring concept.
Which of the below mentioned services provides detailed monitoring with CloudWatch without charging the user extra?

Question300: The Accounting department would like to receive billing updates more than once a month. They would like the updates to be in a format that can easily be viewed with a spreadsheet application.
How can this request be fulfilled?

Question301: A user has enabled session stickiness with ELB.
The user does not want ELB to manage the cookie; instead he wants the application to manage the cookie.
What will happen when the server instance, which is bound to a cookie, crashes?

Question302: What does AMI stand for?

Question303: A company monitors its account activity using AWS CloudTrail, and is concerned that some log files are being tampered with after the logs have been delivered to the account's Amazon S3 bucket.
Moving forward, how can the SysOps Administrator confirm that the log files have not been modified after being delivered to the S3 bucket.

Question304: A user has created an application which will be hosted on EC2. The application makes API calls to DynamoDB to fetch certain data. The application running on this instance is using the SDK for making these calls to DynamoDB. Which of the below mentioned statements is true with respect to the best practice for security in this scenario?

Question305: A user is observing the EC2 CPU utilization metric on CloudWatch.
The user has observed some interesting patterns while filtering over the 1 week period for a particular hour.
The user wants to zoom that data point to a more granular period.
How can the user do that easily with CloudWatch?

Question306: A block device is a storage device that moves data in sequences. How many types of block devices does Amazon EC2 support?

Question307: An AWS account wants to be part of the consolidated billing of his organization's payee account.
How can the owner of that account achieve this?

Question308: A sys admin is planning to subscribe to the RDS event notifications.
For which of the below mentioned source categories the subscription cannot be configured?

Question309: What is a "vault" in Amazon Glacier?

Question310: A company has Sales department and Marketing department. The company uses one AWS account. There is a need to determine what charges are incurred on the AWS platform by each department. There is also a need to receive notifications when a specified cost level is approached or exceeded.
Which two actions must a SysOps Administrator take to achieve both requirements with the LEAST amount of administrative overhead? (Choose two.)

Question311: A user is planning to use AWS Cloud formation for his automatic deployment requirements.
Which of the below mentioned components are required as a part of the template?

Question312: A user is trying to connect to a running EC2 instance using SSH.
However, the user gets a connection time out error.
Which of the below mentioned options is not a possible reason for rejection?

Question313: A user has launched an EC2 instance from an instance store backed AMI.
If the user restarts the instance, what will happen to the ephermal storage data?

Question314: A company uses federation to authenticate users and grant AWS permissions. The SysOps Administrator has been asked to determine who made a request to AWS Organizations for a new AWS account.
What should the Administrator review to determine who made the request?

Question315: Two companies will be working on several development projects together. Each company has an AWS account with a single VPC in us-east-1. Two companies would like to access one another's development servers. The IPv4 CIDR blocks in the two VPCs does not overlap.
What can the SysOps Administrators for each company do to set up network routing?

Question316: When an EC2 EBS-backed (EBS root) instance is stopped, what happens to the data on any ephemeral store volumes?

Question317: A user has launched an EC2 instance and deployed a production application in it.
The user wants to prohibit any mistakes from the production team to avoid accidental termination.
How can the user achieve this?

Question318: A user wants to upload a complete folder to AWS S3 using the S3 Management console.
How can the user perform this activity?

Question319: A company needs to deploy a web application on two Amazon EC2 instances behind an Application Load Balancer (ALB). Two EC2 instances will also be deployed to host the database.
The infrastructure needs to be designed across Availability Zones for high availability and must limit public access to the instances as much as possible.
How should this be achieved within a VPC?

Question320: A user has launched an EC2 instance store backed instance in the US-East-1a zone.
The user created AMI #1 and copied it to the Europe region.
After that, the user made a few updates to the application running in the US-East-1a zone.
The user makes an AMI#2 after the changes.
If the user launches a new instance in Europe from the AMI #1 copy, which of the below mentioned statements is true?

Question321: An organization has setup Auto Scaling with ELB.
Due to some manual error, one of the instances got rebooted.
Thus, it failed the Auto Scaling health check.
Auto Scaling has marked it for replacement.
How can the system admin ensure that the instance does not get terminated?