Question 1

In order to optimize performance for a compute cluster that requires low inter-node latency, which feature in the following list should you use?

Accepted Answer

Placement Groups, specifically Cluster Placement Groups, are designed to provide low-latency networking between instances in a compute cluster by placing them physically close together within a single Availability Zone.

Question 2

A user is trying to connect to a running EC2 instance using SSH. However, the user gets an Unprotected Private Key File error. Which of the below mentioned options can be a possible reason for rejection?

Accepted Answer

The Unprotected Private Key File error typically occurs when the private key file has permissions that are too open. The file should have restrictive permissions, such as 600, to ensure it is not accessible by others.

Question 3

A user is planning to scale up an application by 8 AM and scale down by 7 PM daily using Auto Scaling. What should the user do in this case?

Accepted Answer

Scheduled actions allow the user to automatically scale the application at specific times, such as scaling up at 8 AM and scaling down at 7 PM.

Question 4

When an EC2 instance mat is backed by an S3-Based AMI is terminated, what happens to the data on the root volume?

Accepted Answer

When an EC2 instance backed by an S3-based AMI is terminated, the data on the root volume is automatically deleted. This is because the root volume is ephemeral and does not persist after the instance is terminated.

Question 5

A user has launched an EC2 instance from an instance store backed AMI. The user has attached an additional instance store volume to the instance. The user wants to create an AMI from the running instance. Will the AMI have the additional instance store volume data?

Accepted Answer

The block device mapping will have information about the additional instance store volume

Question 6

A user has created a launch configuration for Auto Scaling where CloudWatch detailed monitoring is disabled. The user wants to now enable detailed monitoring. How can the user achieve this?

Accepted Answer

Launch configurations cannot be modified after creation. To enable detailed monitoring, the user must create a new launch configuration with detailed monitoring enabled and then update the Auto Scaling group to use the new launch configuration.

Question 7

A user is having data generated randomly based on a certain event. The user wants to upload that data to CloudWatch. It may happen that event may not have data generated for some period due to randomness. Which of the below mentioned options is a recommended option for this case?

Accepted Answer

Sending a value of 0 for periods with no data ensures that CloudWatch can accurately represent the absence of data, allowing for consistent monitoring and alerting.

Question 8

An organization is planning to create a user with IAM. They are trying to understand the limitations of IAM so that they can plan accordingly. Which of the below mentioned statements is not true with respect to the limitations of IAM?

Accepted Answer

IAM users can be part of up to 10 groups, not 5.

Question 9

A user has configured an ELB to distribute the traffic among multiple instances. The user instances are facing some issues due to the back-end servers. Which of the below mentioned CloudWatch metrics helps the user understand the issue with the instances?

Accepted Answer

HTTPCode_Backend_5XX indicates server-side errors, which can help diagnose issues with the back-end servers.

Question 10

A user is trying to create a PIOPS EBS volume with 8 GB size and 200 IOPS. Will AWS create the volume?

Accepted Answer

PIOPS EBS volumes require a ratio of at least 30 IOPS per GB of storage. In this case, the ratio is 200 IOPS / 8 GB = 25 IOPS per GB, which is less than the required ratio. Therefore, AWS will not create the volume.

Question 11

A user is trying to understand the CloudWatch metrics for the AWS services. It is required that the user should first understand the namespace for the AWS services. Which of the below mentioned is not a valid namespace for the AWS services?

Accepted Answer

AWS/CloudTrail is not a valid namespace for CloudWatch metrics. CloudTrail is a service for logging and monitoring account activity, but it does not have a specific CloudWatch namespace for metrics.

Question 12

A user has created an application which will be hosted on EC2. The application makes calls to DynamoDB to fetch certain data. The application is using the DynamoDB SDK to connect with from the EC2 instance. Which of the below mentioned statements is true with respect to the best practice for security in this scenario?

Accepted Answer

Attaching an IAM role with DynamoDB access to the EC2 instance is the best practice. This allows the application to securely access DynamoDB without embedding credentials in the application code.

Question 13

A user has created a VPC with a public subnet. The user has terminated all the instances which are part of the subnet. Which of the below mentioned statements is true with respect to this scenario?

Accepted Answer

When instances are terminated, their associated network interfaces are also deleted. The subnet remains available for future use.

Question 14

An organization has configured Auto Scaling for hosting their application. The system admin wants to understand the Auto Scaling health check process. If the instance is unhealthy, Auto Scaling launches an instance and terminates the unhealthy instance. What is the order execution?

Accepted Answer

The answer of An organization has configured Auto Scaling for...

Question 15

A sys admin is trying to understand the sticky session algorithm. Please select the correct sequence of steps, both when the cookie is present and when it is not, to help the admin understand the implementation of the sticky session: ELB inserts the cookie in the response ELB chooses the instance based on the load balancing algorithm Check the cookie in the service request The cookie is found in the request The cookie is not found in the request

Accepted Answer

When the cookie is not present, the sequence is: Check the cookie in the service request (3), Cookie is not found in the request (5), ELB chooses the instance based on the load balancing algorithm (2), ELB inserts the cookie in the response (1). When the cookie is present, the sequence is: Check the cookie in the service request (3), Cookie is found in the request (4), ELB chooses the instance based on the load balancing algorithm (2), ELB inserts the cookie in the response (1).

Question 16

An organization (Account ID 123412341234) has attached the below mentioned IAM policy to a user. What does this policy statement entitle the user to perform?

Accepted Answer

The answer of An organization (Account ID 123412341234) has attached...

Question 17

A user is trying to understand the detailed CloudWatch monitoring concept. Which of the below mentioned services provides detailed monitoring with CloudWatch without charging the user extra?

Accepted Answer

AWS Route 53 provides detailed monitoring with CloudWatch without additional charges.

Question 18

A user is collecting 1000 records per second. The user wants to send the data to CloudWatch using the custom namespace. Which of the below mentioned options is recommended for this activity?

Accepted Answer

CloudWatch recommends aggregating data with statistics like Min, Max, Average, Sum, and Sample count before sending it to reduce the number of API calls and efficiently utilize CloudWatch's capabilities.

Question 19

A user has provisioned 2000 IOPS to the EBS volume. The application hosted on that EBS is experiencing less IOPS than provisioned. Which of the below mentioned options does not affect the IOPS of the volume?

Accepted Answer

The volume size being too large does not affect the IOPS. IOPS performance is more related to the provisioned IOPS, instance type, and network connectivity.

Question 20

A system admin wants to add more zones to the existing ELB. The system admin wants to perform this activity from CLI. Which of the below mentioned command helps the system admin to add new zones to the existing ELB?

Accepted Answer

elb-enable-zones-for-lb command is used to add new zones to the existing ELB.

Exam 13: AWS Certified SysOps Administrator (SOA-C01)