SysOps Administrator Associate (Page 78)

A user has created an ELB with three instances.How many security groups will ELB create by default?Read More →

An organization has created 50 IAM users.The organization wants that each user can change their password but cannot change their access keys.How can the organization achieve this?Read More →

A company’s Security team wants to track data encryption events across all company AWS accounts.The team wants to capture all AWS KMS events related to deleting or rotating customer master keys (CMKs) from all production AWS accounts.The KMS events will be sent to the Security team’s AWS account for monitoring.How can this be accomplished?Read More →

A user has configured ELB with Auto Scaling.The user suspended the Auto Scaling AlarmNotification which notifies Auto Scaling for CloudWatch alarms.process for a while.What will Auto Scaling do during this period?Read More →

An image processing system runs asynchronously on AWS Lambda.A SysOps administrator is configuring a Lambda function to notify developers when an image falls to process after three attempts.The SysOps administrator has created an Amazon Simple Notification Service (Amazon SNS) topic to notify the developers.Which additional action should the SysOps administrator take to meet this requirement?Read More →

A company is evaluating solutions for connecting its data centers to a VPC in an AWS Region running a mission-critical application.A secondary Region has already been set up as a disaster recovery solution.The company needs a consistent, low-latency connection of at least 10 Gbps that must be highly resilient and fault tolerant.Which solution meets these requirements?Read More →

A company’s security policy states that connecting to Amazon EC2 instances is not permitted through SSH and RDP.If access is required, authorized staff can connect to instances by using AWS Systems Manager Session Manager.Users report that they are unable to connect to one specific Amazon EC2 instance that is running Ubuntu and has AWS Systems Manager Agent (SSM Agent) pre-installed.These users are able to use Session Manager to connect to other instances in the same subnet, and they are in an IAM group that has SessionManager permission for all instances.What should a SysOps administrator do to resolve this issue?Read More →

A SysOps administrator is evaluating Amazon Route 53 DNS options to address concerns about high availability for an on-premises website.The website consists of two servers: a primary active server and a secondary passive server.Route 53 should route traffic to the primary server if the associated health check returns2xx or 3xx HTTP codes.All other traffic should be directed to the secondary passive server.The failover record type, set ID, and routing policy have been set appropriately for both primary and secondary servers.Which next step should be taken to configure Route 53?Read More →

A company that hosts a multi-tier ecommerce web application on AWS has been alerted to suspicious application traffic.The architecture consists of Amazon EC2 instances deployed across multiple Availability Zones behind an Application Load Balancer (ALB).After examining the instance logs, a SysOps administrator determines that the suspicious traffic is an attempted SQL injection attack.What should the SysOps administrator do to prevent similar attacks?Read More →

A company has multiple AWS accounts.The company uses AWS Organizations with an organizational unit (OU) for the production account and another OU for the development account.Corporate policies state that developers may use only approved AWS services in the production account.What is the MOST operationally efficient solution to control the production account?Read More →