SysOps Administrator Associate (Page 63)

A user runs the command `dd if=/dev/zero of=/dev/xvdfbs=1M` on a fresh blank EBS volume attached to a Linux instance.Which of the below mentioned activities is the user performing with the command given above?Read More →

A company is running production workloads that use a Multi-AZ deployment of an Amazon RDS for MySQL db.m6g.xlarge (general purpose) standard DB instance.Users report that they are frequently encountering a “too many connections” error.A SysOps administrator observes that the number of connections on the database is high.The SysOps administrator needs to resolve this issue while keeping code changes to a minimum.Which solution will meet these requirements MOST cost-effectively?Read More →

An AWS account owner has setup multiple IAM users.One IAM user only has CloudWatch access.He has setup the alarm action which stops the EC2 instances when the CPU utilization is below the threshold limit.What will happen in this case?Read More →

A company’s security policy states that connecting to Amazon EC2 instances is not permitted through SSH and ROP.If access is required, authorized staff can connect to instances by using AWS Systems Manager Session Manager.Users report that they are unable to connect to one specific Amazon EC2 instance that is running Ubuntu and has AWS Systems Manager Agent (SSM Agent) pre-installed.These users are able to use Session Manager to connect to other instances in the same subnet, and they are in an IAM group that has Session Manager permission for all instances.What should a SysOps administrator do to resolve this issue?Read More →

A user has configured ELB with SSL using a security policy for secure negotiation between the client and load balancer.The ELB security policy supports various ciphers.Which of the below mentioned options helps identify the matching cipher at the client side to the ELB cipher list when client is requesting ELB DNS overSSL?Read More →

A company has an existing public web application for www.example.com.The Application Load Balancer (ALB) is configured with a single HTTP 80 listener.A SysOps administrator must ensure that all web requests to www.example.com are encrypted between the client and the ALB.The SysOps administrator already has requested and validated a public certificate for www.example.com in AWS Certificate Manager (ACM).Existing users of the application must not be required to change the endpoint to which they are connecting.Which additional set of steps should the SysOps administrator take to meet these requirements?Read More →

A user has created a VPC with public and private subnets.The VPC has CIDR 20.0.0.0/16.The private subnet uses CIDR 20.0.1.0/24 and the public subnet usesCIDR 20.0.0.0/24.The user is planning to host a web server in the public subnet (port 80.and a DB server in the private subnet (port 3306).The user is configuring a security group of the NAT instance.Which of the below mentioned entries is not required for the NAT security group?Read More →

A company requires that all IAM user accounts that have not been used for 90 days or more must have their access keys and passwords immediately disabled.A SysOps administrator must automate the process of disabling unused keys using the MOST operationally efficient method.How should the SysOps administrator implement this solution?Read More →

A user is trying to connect to a running EC2 instance using SSH.However, the user gets an Unprotected Private Key File error.Which of the below mentioned options can be a possible reason for rejection?Read More →

A company’s SysOps administrator attempts to restore an Amazon Elastic Block Store (Amazon EBS) snapshot.However, the snapshot is missing because another system administrator accidentally deleted the snapshot.The company needs the ability to recover snapshots for a specified period of time after snapshots are deleted.Which solution will provide this functionality?Read More →