Question 1

An Application Load Balancer (ALB) is configured in front of Amazon EC2 instances. The current target group health check configuration is: Interval: 30 seconds Unhealthy threshold: 10 Healthy threshold: 5 Which steps should a SysOps Administrator take to reduce the amount of time needed to remove unhealthy instances? (Choose two.)

Accepted Answer

The answer of An Application Load Balancer (ALB) is configured...

Question 2

An application is running on an Amazon EC2 instance. A SysOps Administrator is tasked with allowing the application access to an Amazon S3 bucket. What should be done to ensure optimal security?

Accepted Answer

Assigning an IAM role to the EC2 instance allows it to access the S3 bucket securely without the need to manage credentials manually.

Question 3

A SysOps Administrator has received a request to enable access logging for a Network Load Balancer and is setting up an Amazon S3 bucket to store the logs. What are the MINIMUM requirements for the S3 bucket? (Choose two.)

Accepted Answer

The bucket must be in the same Region as the Network Load Balancer and must have a bucket policy that grants Elastic Load Balancing permissions to write the access logs to the bucket.

Question 4

Security has identified an IP address that should be explicitly denied for both ingress and egress requests for all services in an Amazon VPC immediately. Which feature can be used to meet this requirement?

Accepted Answer

The answer of Security has identified an IP address that...

Question 5

A company needs to have real-time access to image data while seamlessly maintaining a copy of the images in an offsite location. Which AWS solution would allow access to the image data locally while also providing for disaster recovery?

Accepted Answer

The answer of A company needs to have real-time access...

Question 6

Users are struggling to connect to a single public-facing development web server using its public IP address on a unique port number of 8181. The security group is correctly configured to allow access on that port, and the network ACLs are using the default configuration. Which log type will confirm whether users are trying to connect to the correct port?

Accepted Answer

VPC Flow Logs capture information about the IP traffic going to and from network interfaces in your VPC, which can confirm whether users are attempting to connect to the correct port.

Question 7

An application is running on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances are configured in an Amazon EC2 Auto Scaling group. A SysOps Administrator must configure the application to scale based on the number of incoming requests. Which solution accomplishes this with the LEAST amount of effort?

Accepted Answer

The answer of An application is running on Amazon EC2...

Question 8

An application runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances run in an Auto Scaling group across multiple Availability Zones. The Information Security team wants to track application requests by the originating IP and the EC2 instance that processes the request. Which of the following tools or services provides this information?

Accepted Answer

Elastic Load Balancing access logs provide detailed information about requests sent to the load balancer, including the originating IP address and the EC2 instance that processed the request.

Question 9

A SysOps Administrator has created an Amazon EC2 instance using an AWS CloudFormation template in the us-east-1 Region. The Administrator finds that this template has failed to create an EC2 instance in the us-west-2 Region. What is one cause for this failure?

Accepted Answer

The AMI ID is region-specific, and an AMI ID valid in one region (us-east-1) may not exist in another region (us-west-2).

Question 10

A serverless application running on AWS Lambda is expected to receive a significant increase in traffic. A SysOps Administrator needs to ensure that the Lambda function is configured to scale so the application can process the increased traffic. What should the Administrator do to accomplish this?

Accepted Answer

The answer of A serverless application running on AWS Lambda...

Question 11

A web application runs on Amazon EC2 instances behind an ELB Application Load Balancer. The instances run in an EC2 Auto Scaling group across multiple Availability Zones. Amazon Route 53 is used for DNS and points to the load balancer. A SysOps Administrator has launched a new Auto Scaling group with a new version of the application, and wants to gradually shift traffic to the new version. How can this be accomplished?

Accepted Answer

The answer of A web application runs on Amazon EC2...

Question 12

A company has a web application that is used across all company divisions. Each application request contains a header that includes the name of the division making the request. The SysOps Administrator wants to identify and count the requests from each division. Which condition should be added to the web ACL of the AWS WAF to accomplish this?

Accepted Answer

The answer of A company has a web application that...

Question 13

A company uses federation to authenticate users and grant AWS permissions. The SysOps Administrator has been asked to determine who made a request to AWS Organizations for a new AWS account. What should the Administrator review to determine who made the request?

Accepted Answer

Federated identity provider logs contain information about user authentication and authorization events.

Question 14

A company runs an Amazon RDS MySQL DB instance. Corporate policy requires that a daily backup of the database must be copied to a separate security account. What is the MOST cost-effective way to meet this requirement?

Accepted Answer

Creating an RDS snapshot, sharing it with the security account, and then creating a copy in the security account is the most cost-effective way to meet the requirement of having a daily backup in a separate account.

Question 15

A company developed and now runs a memory-intensive application on multiple Amazon EC2 Linux instances. The memory utilization metrics of the EC2 Linux instances must be monitored every minute. How should the SysOps Administrator publish the memory metrics? (Choose two.)

Accepted Answer

The answer of A company developed and now runs a...

Question 16

A SysOps Administrator is in the process of setting up a new AWS Storage Gateway. The Storage Gateway activation is failing when the Administrator attempts to activate the Storage Gateway from the Storage Gateway console. What are the potential causes of this error? (Choose two.)

Accepted Answer

The answer of A SysOps Administrator is in the process...

Question 17

As part of a federated identity configuration, an IAM policy is created and attached to an IAM role. Who is responsible for creating the IAM policy and attaching it to the IAM role, according to the shared responsibility model?

Accepted Answer

According to the shared responsibility model, AWS manages the infrastructure, while the customer is responsible for managing their IAM policies and roles. Therefore, a SysOps Administrator is responsible for creating and attaching the IAM policy to the role.

Question 18

A company has received a notification in its AWS Personal Health Dashboard that one of its Amazon EBS-backed Amazon EC2 instances is on hardware that is scheduled for maintenance. The instance runs a critical production workload that must be available during normal business hours. Which steps will ensure that the instance maintenance does not produce an outage?

Accepted Answer

The answer of A company has received a notification in...

Question 19

A SysOps Administrator needs to create a replica of a company's existing AWS infrastructure in a new AWS account. Currently, an AWS Service Catalog portfolio is used to create and manage resources. What is the MOST efficient way to accomplish this?

Accepted Answer

The answer of A SysOps Administrator needs to create a...

Question 20

A SysOps Administrator is attempting to use AWS Systems Manager Session Manager to initiate a SSH session with an Amazon EC2 instance running on a custom Linux Amazon Machine Image (AMI). The Administrator cannot find the target instance in the Session Manager console. Which combination of actions will solve this issue? (Choose two.)

Accepted Answer

The answer of A SysOps Administrator is attempting to use...

Exam 13: AWS Certified SysOps Administrator (SOA-C01)