SysOps Administrator Associate (Page 8)

A company website contains a web tier and a database tier on AWS.The web tier consists of Amazon EC2 instances that run in an Auto Scaling group across two Availability Zones.The database tier runs on an Amazon RDS for MySQL Multi-AZ DB instance.The database subnet network ACLs are restricted to only the web subnets that need access to the database.The web subnets use the default network ACL with the default rules.The company’s operations team has added a third subnet to the Auto Scaling group configuration.After an Auto Scaling event occurs, some users report that they intermittently receive an error message.The error message states that the server cannot connect to the database.The operations team has confirmed that the route tables are correct and that the required ports are open on all security groups.Which combination of actions should a SysOps administrator take so that the web servers can communicate with the DB instance? (Choose two.)Read More →

A SysOps administrator creates a custom Amazon Machine Image (AMI) in the eu-west-2 Region and uses the AMI to launch Amazon EC2 instances.The SysOps administrator needs to use the same AMI to launch EC2 instances in two other Regions: us-east-1 and us-east-2.What must the SysOps administrator do to use the custom AMI in the additional Regions?Read More →

A company has many accounts in an organization in AWS Organizations.The company must automate resource provisioning from the organization’s management account to the member accounts.Which solution will meet this requirement?Read More →

A company is managing a website with a global user base hosted on Amazon EC2 with an Application Load Balancer (ALB).To reduce the load on the web servers, a SysOps administrator configures an Amazon CloudFront distribution with the ALB as the origin.After a week of monitoring the solution, the administrator notices that requests are still being served by the ALB and there is no change in the web server load.What are possible causes for this problem? (Choose two.)Read More →

A company updates its security policy to prohibit the public exposure of any data in Amazon S3 buckets in the company’s account.What should a SysOps administrator do to meet this requirement?Read More →

A SysOps administrator wants to protect objects in an Amazon S3 bucket from accidental overwrite and deletion.Noncurrent objects must be kept for 90 days and then must be permanently deleted.Objects must reside within the same AWS Region as the original S3 bucket.Which solution meets these requirements?Read More →

A company has implemented a Kubernetes cluster on Amazon Elastic Kubernetes Service (Amazon ECS) to host a microservices-based application.The company expects application traffic to increase significantly for the next month and wants to prevent the application from crashing because of the high number of requests.Which solution will meet these requirements with the LEAST administrative overhead?Read More →

A company stores sensitive data in an Amazon S3 bucket.The company must log all access attempts to the S3 bucket.The company’s risk team must receive immediate notification about any delete events.Which solution will meet these requirements?Read More →

A company has an application that uses a scheduled AWS Lambda function to retrieve datasets from external sources over the internet.The function is not associated with a VPC.The company is modifying the application to store the information that the Lambda function retrieves on an Amazon RDS DB instance in a private subnet.The VPC has two public subnets and two private subnets.A SysOps administrator must deploy a solution that allows the Lambda function to access the new database and continue to access the internet.Which solution meets these requirements?Read More →

A company is building a web application on AWS.The company is using Amazon CloudFront with a domain name of www.example.com.All traffic to CloudFront must be encrypted in transit.The company already has provisioned an SSL certificate for www.example.com in AWS Certificate Manager (ACM).Which combination of steps should a SysOps administrator take to encrypt the traffic in transit? (Choose two.)Read More →