SysOps Administrator Associate (Page 56)

A company is using an AWS KMS customer master key (CMK) with imported key material.The company references the CMK by its alias in the Java application to encrypt data.The CMK must be rotated every 6 months.What is the process to rotate the key?Read More →

A company has created a NAT gateway in a public subnet in a VPC.The VPC also contains a private subnet that includes Amazon EC2 instances.The EC2 instances use the NAT gateway to access the internet to download patches and updates.The company has configured a VPC flow log for the elastic network interface of the NAT gateway.The company is publishing the output to Amazon CloudWatch Logs.A SysOps administrator must identify the top five internet destinations that the EC2 instances in the private subnet communicate with for downloads.What should the SysOps administrator do to meet this requirement in the MOST operationally efficient way?Read More →

Security has identified an IP address that should be explicitly denied for both ingress and egress requests for all services in an Amazon VPC immediately.Which feature can be used to meet this requirement?Read More →

A new website will run on Amazon EC2 instances behind an Application Load Balancer.Amazon Route 53 will be used to manage DNS records.What type of record should be set in Route 53 to point the website’s apex domain name (for example, `company.com`) to the Application Load Balancer?Read More →

A company wants to identify specific Amazon EC2 instances that are underutilized and the estimated cost savings for each instance.How can this be done with MINIMAL effort?Read More →

A company needs to view a list of security groups that are open to the internet on port 3389.What should a SysOps administrator do to meet this requirement?Read More →

A company is managing a website with a global user base hosted on Amazon EC2 with an Application Load Balancer (ALB).To reduce the load on the web servers, a SysOps administrator configures an Amazon CloudFront distribution with the ALB as the origin.After a week of monitoring the solution, the administrator notices that requests are still being served by the ALB and there is no change in the web server load.What are possible causes for this problem? (Choose two.)Read More →

A SysOps administrator uses AWS Systems Manager Session Manager to connect to instances.After the SysOps administrator launches a new Amazon EC2 instance, the EC2 instance does not appear in the Session Manager list of systems that are available for connection.The SysOps administrator verifies that Systems Manager Agent is installed, updated, and running on the EC2 instance.What is the reason for this issue?Read More →

A SysOps administrator is re-architecting an application.The SysOps administrator has moved the database from a public subnet, where the database used a public endpoint, into a private subnet to restrict access from the public network.After this change, an AWS Lambda function that requires read access to the database cannot connect to the database.The SysOps administrator must resolve this issue without compromising security.Which solution meets these requirements?Read More →

A company uses an Amazon S3 bucket to store data files.The S3 bucket contains hundreds of objects.The company needs to replace a tag on all the objects in the S3 bucket with another tag.What is the MOST operationally efficient way to meet this requirement?Read More →