Question 1

A company with dozens of AWS accounts wants to ensure that governance rules are being applied across all accounts. The CIO has recommended that AWS Config rules be deployed using an AWS CloudFormation template. How should these requirements be met?

Accepted Answer

CloudFormation StackSets allow you to deploy CloudFormation templates across multiple AWS accounts and regions from a single account, making it suitable for applying governance rules across all accounts.

Question 2

After launching a new Amazon EC2 instance from a Microsoft Windows 2012 Amazon Machine Image (AMI), the SysOps Administrator is unable to connect to the instance using Remote Desktop Protocol (RDP). The instance is also unreachable. As part of troubleshooting, the Administrator deploys a second instance from a different AMI using the same configuration and is able to connect to the instance. What should be the next logical step in troubleshooting the first instance?

Accepted Answer

EC2Rescue is a tool specifically designed to troubleshoot and fix issues with EC2 instances, including connectivity problems. It can help gather and analyze log files to diagnose the issue with the first instance.

Question 3

A SysOps Administrator is responsible for a legacy, CPU-heavy application. The application can only be scaled vertically. Currently, the application is deployed on a single t2.large Amazon EC2 instance. The system is showing 90% CPU usage and significant performance latency after a few minutes. What change should be made to alleviate the performance problem?

Accepted Answer

The answer of A SysOps Administrator is responsible for a...

Question 4

A SysOps Administrator is writing an AWS Lambda function in AWS Account A to put objects in an Amazon S3 bucket in AWS Account B. The Lambda function is able to successfully write new objects to the S3 bucket, but IAM users in Account B are unable to delete objects written to the bucket by Account A. Which step will fix this issue?

Accepted Answer

The issue is that objects written by Account A are owned by Account A, so Account B users can't delete them. By using S3:PutObjectAcl to give the bucket owner full control, Account B users will be able to manage the objects.

Question 5

A custom application must be installed on all Amazon EC2 instances. The application is small, updated frequently and can be installed automatically. How can the application be deployed on new EC2 instances?

Accepted Answer

Using Amazon EC2 user data allows you to run a script automatically when an instance is launched. This script can download and install the application, making it suitable for frequently updated applications.

Question 6

According to the shared responsibility model, for which of the following Amazon EC2 activities is AWS responsible? (Choose two.)

Accepted Answer

AWS is responsible for patching the hypervisor and maintaining the network infrastructure as part of their responsibilities in the shared responsibility model for Amazon EC2.

Question 7

A local agency plans to deploy 500 Raspberry Pi devices throughout a city. All the devices need to be managed centrally, and their configurations need to be consistent. What is the BEST service for managing these devices?

Accepted Answer

AWS Systems Manager is designed to manage and automate tasks across a large number of devices, including configuration management, making it suitable for managing Raspberry Pi devices centrally.

Question 8

A company is planning to expand into an additional AWS Region for disaster recovery purposes. The company uses AWS CloudFormation, and its infrastructure is well-defined as code. The company would like to reuse as much of its existing code as possible when deploying resources to additional Regions. A SysOps Administrator is reviewing how Amazon Machine Images (AMIs) are selected in AWS CloudFormation, but is having trouble making the same stack work in the new Region. Which action would make it easier to manage multiple Regions?

Accepted Answer

The answer of A company is planning to expand into...

Question 9

A SysOps Administrator is notified that an Amazon EC2 instance has stopped responding. The AWS Management Console indicates that the system checks are failing. What should the SysOps Administrator do first to resolve this issue?

Accepted Answer

Stopping and starting the EC2 instance will move it to a new host, which can resolve issues related to the underlying hardware.

Question 10

A SysOps Administrator is deploying a website with dynamic content. Company policy requires that users from certain countries or regions cannot access the web content and should receive an error page. Which of the following can be used to implement this policy? (Choose two.)

Accepted Answer

Amazon CloudFront geo-restriction and Amazon Route 53 geolocation routing can be used to implement a policy that restricts access to a website based on the user's country or region.

Question 11

A company recently implemented an Amazon S3 lifecycle rule that accidentally deleted objects from one of its S3 buckets. The bucket has S3 versioning enabled. Which actions will restore the objects? (Choose two.)

Accepted Answer

The answer of A company recently implemented an Amazon S3...

Question 12

A security team is concerned that intellectual property might leak to the internet. A SysOps administrator must identify controls to address the potential problem. The instances in question operate in a VPC and cannot be allowed to send traffic to the internet. What should the SysOps administrator do to meet these requirements?

Accepted Answer

The answer of A security team is concerned that intellectual...

Question 13

An ecommerce site is using Amazon ElastiCache with Memcached to store session state for a web application and to cache frequently used data. For the last month, users have been complaining about performance. The metric data for the Amazon EC2 instances and the Amazon RDS instance appear normal, but the eviction count metrics are high. What should be done to address this issue and improve performance?

Accepted Answer

The answer of An ecommerce site is using Amazon ElastiCache...

Question 14

A company website hosts patches for software that is sold globally. The website runs in AWS and performs well until a large software patch is released. The flood of downloads puts a strain on the web servers and leads to a poor customer experience. What can the Sysops Administrator propose to enhance customer experience, create a more available web platform, and keep costs low?

Accepted Answer

Using Amazon CloudFront to cache static content like software patches will offload traffic from the web servers, improve download speeds for users globally, and reduce costs by minimizing the load on the origin servers.

Question 15

An organization finds that a high number of gp2 Amazon EBS volumes are running out of space. Which solution will provide the LEAST disruption with MINIMAL effort?

Accepted Answer

Elastic Volumes allow you to dynamically increase the size of EBS volumes with minimal disruption and effort, without needing to create snapshots or migrate data.

Question 16

A SysOps Administrator wants to prevent Developers from accidentally terminating Amazon EC2 instances. How can this be accomplished?

Accepted Answer

Enabling termination protection on EC2 instances prevents them from being accidentally terminated. This feature must be disabled before an instance can be terminated.

Question 17

A SysOps Administrator must generate a report that provides a breakdown of all API activity by a specific user over the course of a year. Given that AWS Cloud Trail was enabled, how can this report be generated?

Accepted Answer

CloudTrail logs are stored in an S3 bucket, and Amazon Athena can be used to query these logs to extract specific information, such as API activity by a specific user over a year.

Question 18

A company is operating a multi-account environment under a single organization using AWS Organizations. The Security team discovers that some employees are using AWS services in ways that violate company policies. A SysOps Administrator needs to prevent all users of an account, including the root user, from performing certain restricted actions. What should be done to accomplish this?

Accepted Answer

Service Control Policies (SCPs) can be used to restrict actions across all accounts in an AWS Organization, including actions by the root user.

Question 19

A company has an application database on Amazon RDS that runs a resource-intensive reporting job. This is causing other applications using the database to run slowly. What should the SysOps Administrator do to resolve this issue?

Accepted Answer

Creating Amazon RDS read replicas allows the reporting job to run on a replica, reducing the load on the primary database and improving performance for other applications.

Question 20

A company is releasing a new static website hosted on Amazon S3. The static website hosting feature was enabled on the bucket and content was uploaded; however, upon navigating to the site, the following error message is received: 403 Forbidden - Access Denied What change should be made to fix this error?

Accepted Answer

The error indicates that the objects in the bucket are not accessible. Adding a bucket policy that grants everyone read access to the bucket objects will resolve the issue by allowing public access to the website content.

Exam 13: AWS Certified SysOps Administrator (SOA-C01)