[Full-Version] 2024 New AWS-SysOps Actual Exam Dumps, Amazon Practice Test
Study HIGH Quality AWS-SysOps Free Study Guides and Exams Tutorials
Amazon AWS-SysOps exam is designed for individuals who wish to gain certification as an AWS Certified SysOps Administrator - Associate. AWS Certified SysOps Administrator - Associate certification is ideal for professionals who are responsible for deploying, managing, and operating systems on the AWS platform. The AWS-SysOps exam covers a wide range of topics, including deployment, management, and operations on AWS.
NEW QUESTION # 83
An organization has setup consolidated billing with 3 different AWS accounts. Which of the below mentioned advantages will organization receive in terms of the AWS pricing?
- A. All AWS accounts will be charged for S3 storage by combining the total storage of each account
- B. The EC2 instances of each account will receive a total of 750*3 micro instance hours free
- C. The free usage tier for all the 3 accounts will be 3 years and not a single year
- D. The consolidated billing does not bring any cost advantage for the organization
Answer: A
Explanation:
AWS consolidated billing enables the organization to consolidate payments for multiple Amazon Web Services (AWS. accounts within a single organization by making a single paying account. For billing purposes, AWS treats all the accounts on the consolidated bill as one account. Some services, such as Amazon EC2 and Amazon S3 have volume pricing tiers across certain usage dimensions that give the user lower prices when he uses the service more.
NEW QUESTION # 84
In Amazon EC2, can you create an EBS volume from a snapshot and attach it to another instance?
- A. No, you cannot attach EBS volumes to an instance.
- B. Yes, you can but only if the volume is larger than 2TB.
- C. Yes, you can.
- D. No, you can't create an EBS volume from a snapshot.
Answer: C
Explanation:
Explanation
To keep a backup copy of your data, you can create a snapshot of an EBS volume, which is stored in Amazon S3. You can create an EBS volume from a snapshot, and attach it to another instance.
References:
NEW QUESTION # 85
An Auto Scaling group is running at the desired capacity of 5 instances and receives a trigger from the Cloudwatch Alarm to increase the capacity by 1. The cool down period is 5 minutes.
Cloudwatch sends another trigger after 2 minutes to decrease the desired capacity by 1. What will be the count of instances at the end of 4 minutes?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
Explanation:
The cool down period is the time difference between the end of one scaling activity (can be start or terminate) and the start of another one (can be start or terminate). During the cool down period, Auto Scaling does not allow the desired capacity of the Auto Scaling group to be changed by any other CloudWatch alarm. Thus, in this case the trigger from the second alarm will have no effect.
Reference:
http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/AS_Concepts.html#healthcheck
NEW QUESTION # 86
The CFO of a company wants to allow one of his employees to view only the AWS usage report page. Which of the below mentioned IAM policy statements allows the user to have access to the AWS usage report page?
- A. "Effect": "Allow", "Action": ["aws-portal:ViewUsage"], "Resource": "*"
- B. "Effect": "Allow", "Action": ["Describe"], "Resource": "Billing"
- C. "Effect": "Allow", "Action": ["aws-portal: ViewBilling"], "Resource": "*"
- D. "Effect": "Allow", "Action": ["AccountUsage], "Resource": "*"
Answer: A
Explanation:
Explanation
AWS Identity and Access Management is a web service which allows organizations to manage users and user permissions for various AWS services. If the CFO wants to allow only AWS usage report page access, the policy for that IAM user will be as given below:
NEW QUESTION # 87
Which type routing protocol operates by exchanging the entire routing information?
- A. exterior gateway protocols
- B. Path-vector protocols
- C. link-state protocols
- D. distance-vector protocols
Answer: C
NEW QUESTION # 88
A root AWS account owner is trying to understand various options to set the permission to AWS S3. Which of the below mentioned options is not the right option to grant permission for S3?
- A. User Access Policy
- B. S3 ACL
- C. S3 Object Access Policy
- D. S3 Bucket Access Policy
Answer: C
Explanation:
Explanation
Amazon S3 provides a set of operations to work with the Amazon S3 resources. Managing S3 resource access refers to granting others permissions to work with S3. There are three ways the root account owner can define access with S3:
S3 ACL: The user can use ACLs to grant basic read/write permissions to other AWS accounts.
S3 Bucket Policy: The policy is used to grant other AWS accounts or IAM users permissions for the bucket and the objects in it.
User Access Policy: Define an IAM user and assign him the IAM policy which grants him access to S3.
NEW QUESTION # 89
A user has configured an ELB to distribute the traffic among multiple instances. The user instances are facing some issues due to the back-end servers. Which of the below mentioned CloudWatch metrics helps the user understand the issue with the instances?
- A. HTTPCode_Backend_4XX
- B. HTTPCode_Backend_3XX
- C. HTTPCode_Backend_2XX
- D. HTTPCode_Backend_5XX
Answer: D
Explanation:
Explanation/Reference:
Explanation:
CloudWatch is used to monitor AWS as well as the custom services. For ELB, CloudWatch provides various metrics including error code by ELB as well as by back-end servers (instances). It gives data for the count of the number of HTTP response codes generated by the back-end instances. This metric does not include any response codes generated by the load balancer. These metrics are:
The 2XX class status codes represents successful actions
The 3XX class status code indicates that the user agent requires action The 4XX class status code represents client errors
The 5XX class status code represents back-end server errors
NEW QUESTION # 90
Network ACLs in a VPC operate at the ______.
- A. instance level
- B. subnet level
- C. TCP level
- D. gateway level
Answer: B
Explanation:
Explanation/Reference:
Explanation:
Security Groups in VPC operate at the instance level, providing a way to control the incoming and outgoing instance traffic. In contrast, network ACLs operate at the subnet level, providing a way to control the traffic that flows through the subnets of your VPC.
Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Security.html
NEW QUESTION # 91
A root AWS account owner is trying to understand various options to set the permission to AWS S3. Which of
the below mentioned options is not the right option to grant permission for S3?
- A. User Access Policy
- B. S3 ACL
- C. S3 Object Access Policy
- D. S3 Bucket Access Policy
Answer: C
Explanation:
Amazon S3 provides a set of operations to work with the Amazon S3 resources. Managing S3 resource access
refers to granting others permissions to work with S3. There are three ways the root account owner can define
access with S3:
S3 ACL: The user can use ACLs to grant basic read/write permissions to other AWS accounts.
S3 Bucket Policy: The policy is used to grant other AWS accounts or IAM users permissions for the bucket and
the objects in it.
User Access Policy: Define an IAM user and assign him the IAM policy which grants him access to S3.
NEW QUESTION # 92
A user is sending a custom metric to CloudWatch. If the call to the CloudWatch APIs has different dimensions, but the same metric name, how will CloudWatch treat all the requests?
- A. It will group all the calls into a single call.
- B. It will reject the request as there cannot be a separate dimension for a single metric.
- C. It will overwrite the previous dimension data with the new dimension data.
- D. It will treat each unique combination of dimensions as a separate metric.
Answer: D
Explanation:
Explanation
A dimension is a key-value pair used to uniquely identify a metric. CloudWatch treats each unique combination of dimensions as a separate metric. Thus, if the user is making 4 calls with the same metric name but a separate dimension, it will create 4 separate metrics.
NEW QUESTION # 93
A user has launched an EC2 Windows instance from an instance store backed AMI. The user wants to convert the AMI to an EBS backed AMI. How can the user convert it?
- A. Attach an EBS volume to the instance and unbundle all the AMI bundled data inside the EBS
- B. It is not possible to convert an instance store backed AMI to an EBS backed AMI
- C. A Windows based instance store backed AMI cannot be converted to an EBS backed AMI
- D. Attach an EBS volume and use the copy command to copy all the ephemeral content to the EBS Volume
Answer: C
Explanation:
Explanation
Generally, when a user has launched an EC2 instance from an instance store backed AMI, it can be converted to an EBS backed AMI provided the user has attached the EBS volume to the instance and unbundles the AMI data to it. However, if the instance is a Windows instance, AWS does not allow this. In this case, since the instance is a Windows instance, the user cannot convert it to an EBS backed AMI.
NEW QUESTION # 94
A company has centralized all its logs into one Amazon CloudWatch Logs log group. The SysOps Administrator is to alert different teams of any issues relevant to them.
What is the MOST efficient approach to accomplish this?
- A. Write a AWS lambda function that will query the logs every minute and contain the logic of which team to notify on which patterns and issues.
- B. Set up different metric filters for each team based on patterns and alerts. Each alarm will notify the appropriate notification list.
- C. Create an AWS Auto Scaling group of Amazon EC2 instances that will scale based on the amount of ingested log entries. This group will pull streams, look for patterns, and send notifications to relevant teams.
- D. Redesign the aggregation of logs so that each team's relevant parts are sent to a separate log group, then subscribe each team to its respective log group.
Answer: C
NEW QUESTION # 95
A user has created a VPC with CIDR 20.0.0.0/16. The user has created one subnet with CIDR 20.0.0.0/16 by mistake. The user is trying to create another subnet of CIDR 20.0.0.1/24. How can the user create the second subnet?
- A. The user can modify the first subnet CIDR from the console
- B. It is not possible to create a second subnet as one subnet with the same CIDR as the VPC has been created
- C. The user can modify the first subnet CIDR with AWS CLI
- D. There is no need to update the subnet as VPC automatically adjusts the CIDR of the first subnet based on the second subnet's CIDR
Answer: C
Explanation:
Explanation
A Virtual Private Cloud (VPC. is a virtual network dedicated to the user's AWS account. A user can create a subnet with VPC and launch instances inside the subnet. The user can create a subnet with the same size of VPC. However, he cannot create any other subnet since the CIDR of the second subnet will conflict with the first subnet. The user cannot modify the CIDR of a subnet once it is created. Thus, in this case if required, the user has to delete the subnet and create new subnets.
NEW QUESTION # 96
A user has granted read/write permission of his S3 bucket using ACL. Which of the below mentioned options is a valid ID to grant permission to other AWS accounts (grantee. using ACL?
- A. Access ID
- B. S3 Secure ID
- C. Canonical user ID
- D. IAM User ID
Answer: C
Explanation:
Explanation
An S3 bucket ACL grantee can be an AWS account or one of the predefined Amazon S3 groups. The user can grant permission to an AWS account by the email address of that account or by the canonical user ID. If the user provides an email in the grant request, Amazon S3 finds the canonical user ID for that account and adds it to the ACL. The resulting ACL will always contain the canonical user ID for the AWS account, and not the AWS account's email address.
NEW QUESTION # 97
A company is running a website on Amazon EC2 instances that are in an Auto Scaling group. When the website traffic increases, additional instances take several minutes to become available because of a long- running user data script that installs software. A SysOps administrator must decrease the time that is required for new instances to become available.
Which action should the SysOps administrator take to meet this requirement?
- A. Purchase Reserved Instances to cover 100% of the maximum capacity of the Auto Scaling group.
- B. Update the Auto Scaling group to launch instances that have a storage optimized instance type.
- C. Reduce the scaling thresholds so that instances are added before traffic increases.
- D. Use EC2 Image Builder to prepare an Amazon Machine Image (AMI) that has pre-installed software.
Answer: B
NEW QUESTION # 98
What was the recommended use case for S3 Reduced Redundancy storage before its deprecation was
planned?
- A. It was used to reduce storage costs by allowing you to destroy any copy of your files outside a specific
jurisdiction. - B. It was used to reduce storage costs for reproducible data at high levels of redundancy in a single facility.
- C. It was used to reduce storage costs by providing 500 times the durability of a typical disk drive at lower
levels of redundancy. - D. It was used to reduce storage costs for noncritical data at lower levels of redundancy.
Answer: D
Explanation:
Explanation
Reduced Redundancy Storage (RRS) was introduced in order to reduce storage costs. When first developed,
you could use reduced redundancy storage for noncritical, reproducible data at lower levels of redundancy than
Amazon S3 provides with standard storage. Now Standard is a more af-fordable from a cost perspective,
because Amazon is deprecating RRS and has changed the pricing structure.
Reference: http://docs.aws.amazon.com/AmazonS3/latest/dev/UsingRRS.html
NEW QUESTION # 99
A new network is needed to run secure Amazon EC2 instance. This network cannot have direct access to the internet and must be separate from existing production instances. The instances will be manager using SSH from a Developer in a home office with a fixed IP address but without a VPN- capable router.
How should a SysOps Administrator create this network and manage these servers?
- A. Setup a new VPC with one private subnet. When deployment the instance use the User data to install and configure a third-party management tool for the instances Connect to the instance using the third-party tool.
- B. Create a new subnet in an existing VPC. Configure access rules to allow SSH access from the Developer's IP address. Use AWS Shield to select the instances that should not have access to the internet.
- C. Associated an internet gateway with a new VPC with two subnet. Set up a bastion instance with an Elastic IP address Configure security groups and routing to allow SSH access to the bastion instance from the Developer's Ip address and SSH access from the bastion hot to the private subnet.
- D. Configure a new VPC with one public subnet no internet gateway. Configure the security for the instance to allow SSH from the Developer's IP address.
Answer: C
NEW QUESTION # 100
You have decided to change the Instance type for instances running in your application tier that are using Auto Scaling.
In which area below would you change the instance type definition?
- A. Auto Scaling group
- B. Auto Scaling policy
- C. Auto Scaling tags
- D. Auto Scaling launch configuration
Answer: D
Explanation:
Explanation
http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/WhatIsAutoScaling.html
NEW QUESTION # 101
A user is sending custom data metrics to CloudWatch. What is the allowed time stamp granularity for each
data point published for the custom metric?
- A. 1 minute
- B. 1 second
- C. 1 millisecond
- D. 1 nanosecond
Answer: C
Explanation:
The user is allowed to send data up to one-thousandth of a second. CloudWatch aggregates the data by each
minute and generates a metric for that.
Reference:
http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/publishingMetrics.html
NEW QUESTION # 102
An organization has setup Auto Scaling with ELB. Due to some manual error, one of the instances got
rebooted. Thus, it failed the Auto Scaling health check. Auto Scaling has marked it for replacement. How can the system admin ensure that the instance does not get terminated?
- A. Update the Auto Scaling group to ignore the instance reboot event
- B. Change the health of the instance to healthy using the Auto Scaling commands
- C. Manually add that instance to the Auto Scaling group after reboot to avoid replacement
- D. It is not possible to change the status once it is marked for replacement
Answer: B
Explanation:
After an instance has been marked unhealthy by Auto Scaling, as a result of an Amazon EC2 or ELB health check, it is almost immediately scheduled for replacement as it will never automatically recover its health. If the user knows that the instance is healthy then he can manually call the SetInstanceHealth action (or the as-setinstance- health command from CLI. to set the instance's health status back to healthy. Auto Scaling will throw an error if the instance is already terminating or else it will mark it healthy.
NEW QUESTION # 103
Which of the following Identity and Access Management (IAM) policy keys of AWS Direct Connect is used for date/time conditions?
- A. aws:SourceIp
- B. aws:CurrentTime
- C. aws:SecureTransport
- D. aws:UserAgent
Answer: B
Explanation:
Explanation
AWS Direct Connect implements the following policy keys of Identity and Access Management:
aws:CurrentTime (for date/time conditions)
aws:EpochTime (the date in epoch or UNIX time, for use with date/time conditions) aws:SecureTransport (Boolean representing whether the request was sent using SSL) aws:SourceIp (the requester's IP address, for use with IP address conditions) aws:UserAgent (information about the requester's client application, for use with string conditions)
NEW QUESTION # 104
......
The AWS-SysOps certification is highly valued in the industry as it demonstrates the candidate's expertise in managing and deploying applications on the AWS platform. AWS Certified SysOps Administrator - Associate certification can help individuals advance their careers and land better job opportunities in the field of cloud computing. It is also a valuable asset for organizations that want to demonstrate their expertise in managing and deploying applications on AWS.
Amazon AWS-SysOps (AWS Certified SysOps Administrator - Associate) Certification Exam is designed to validate the skills and knowledge of professionals who are responsible for managing and deploying applications on the Amazon Web Services (AWS) platform. AWS Certified SysOps Administrator - Associate certification exam is aimed at individuals who have a strong understanding of AWS services and features, as well as experience in deploying, managing, and operating applications on the platform.
Get 100% Real Free SysOps Administrator AWS-SysOps Sample Questions: https://www.free4dump.com/AWS-SysOps-braindumps-torrent.html
Download Amazon AWS-SysOps Exam Dumps to Pass Exam Easily: https://drive.google.com/open?id=1CTxgPQRwGCFh-byxbmdlhfCwetMigoNx