SysOps Administrator Associate (Page 60)

A company is building an interactive application for personal finance.The application stores financial data in Amazon S3, and the data must be encrypted.The company does not want to provide its own encryption keys.However, the company wants to maintain an audit trail that shows when an encryption key was used and who used the key.Which solution will meet these requirements?Read More →

A SysOps administrator needs to register targets for a Network Load Balancer (NLB) using IP addresses.Which prerequisite should the SysOps administrator validate to perform this task?Read More →

A company is using Amazon CloudFront to serve static content for its web application to its users.The CloudFront distribution uses an existing on-premises website as a custom origin.The company requires the use of TLS between CloudFront and the origin server.This configuration has worked as expected for several months.However, users are now experiencing HTTP 502 (Bad Gateway) errors when they view webpages that include content from the CloudFront distribution.What should a SysOps administrator do to resolve this problem?Read More →

A streaming services company has a three-tier web application hosted on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer(ALB).When the Auto Scaling group scales in, a deregistration delay occurs and the delay is sometimes longer than the time required to terminate the EC2 instance.A SysOps administrator must ensure that the latest logs are delivered to an external system before the EC2 instance is terminated.Which solution will solve this problem?Read More →

An application runs on Amazon EC2 instances in an Auto Scaling group.Following the deployment of a new feature on the EC2 instances, some instances were marked as unhealthy and then replaced by the Auto Scaling group.The EC2 instances terminated before a SysOps administrator could determine the cause of the health status changes.To troubleshoot this issue, the SysOps administrator wants to ensure that an AWS Lambda function is invoked in this situation.How should the SysOps administrator meet these requirements?Read More →

A SysOps administrator is implementing automated I/O load performance testing as part of the continuous integration/continuous delivery (CI/CD) process for an application.The application uses an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume for each instance that is restored from a snapshot and requires consistent I/O performance.During the initial tests, the I/O performance results are sporadic.The SysOps administrator must ensure that the tests yield more consistent results.Which actions could the SysOps administrator take to accomplish this goal? (Choose two.)Read More →

A company has an AWS CloudFormation template that creates an Amazon S3 bucket.A user authenticates to the corporate AWS account with their Active Directory credentials and attempts to deploy the CloudFormation template.However, the stack creation fails.Which factors could cause this failure? (Choose two.)Read More →

A company uses LDAP-based credentials and has a Security Assertion Markup Language (SAML) 2.0 identity provider.A SysOps administrator has configured various federated roles in a new AWS account to provide AWS Management Console access for groups of users that use the existing LDAP-based credentials.Several groups want to use the AWS CLI on their workstations to automate daily tasks.To enable them to do so, the SysOps administrator has created an application that authenticates a user and generates a SAML assertionWhich API call should be used to retrieve credentials for federated programmatic access?Read More →

A company is expanding globally and needs to back up data on Amazon Elastic Block Store (Amazon EBS) volumes to a different AWS Region.Most of the EBS volumes that store the data are encrypted, but some of the EBS volumes are unencrypted.The company needs the backup data from all the EBS volumes to be encrypted.Which solution will meet these requirements with the LEAST management overhead?Read More →

A root account owner has given full access of his S3 bucket to one of the IAM users using the bucket ACL.When the IAM user logs in to the S3 console, which actions can he perform?Read More →