Question 1

A Development team is designing an application that processes sensitive information within a hybrid deployment. The team needs to ensure the application data is protected both in transit and at rest. Which combination of actions should be taken to accomplish this? (Choose two.)

Accepted Answer

The answer of A Development team is designing an application...

Question 2

A SysOps Administrator must ensure all Amazon EBS volumes currently in use, and those created in the future, are encrypted with a specific AWS KMS customer master key (CMK). What is the MOST efficient way for the Administrator to meet this requirement?

Accepted Answer

The answer of A SysOps Administrator must ensure all Amazon...

Question 3

Your VPC automatically comes with a modifiable default network ACL, which by default _____.

Accepted Answer

By default, the default network ACL in a VPC allows all inbound and outbound traffic.

Question 4

You have a business-to-business web application running in a VPC consisting of an Elastic Load Balancer (ELB), web servers, application servers and a database. Your web application should only accept traffic from pre-defined customer IP addresses. Which two options meet this security requirement? (Choose two.)

Accepted Answer

The answer of You have a business-to-business web application running...

Question 5

A company's website went down for several hours. The root cause was a full disk on one of the company's Amazon EC2 instances. Which steps should the SysOps Administrator take to prevent this from happening in this future?

Accepted Answer

The Amazon CloudWatch agent can collect detailed disk metrics, and setting up a CloudWatch alarm will notify the administrator when disk space is running low, helping to prevent future outages.

Question 6

A user has created an S3 bucket which is not publicly accessible. The bucket is having thirty objects which are also private. If the user wants to make the objects public, how can he configure this with minimal efforts?

Accepted Answer

Setting the AWS bucket policy to make all objects public is the most efficient way to change the access permissions for all objects in the bucket with minimal effort.

Question 7

A user has recently started using EC2. The user launched one EC2 instance in the default subnet in EC2-VPC Which of the below mentioned options is not attached or available with the EC2 instance when it is launched?

Accepted Answer

An Elastic IP is not automatically attached to an EC2 instance upon launch. It must be explicitly allocated and associated with the instance.

Question 8

How many metrics are supported by CloudWatch for Auto Scaling?

Accepted Answer

CloudWatch supports 8 metrics and 1 dimension for Auto Scaling, which helps in monitoring and scaling resources effectively.

Question 9

What happens if the instance launched by Auto Scaling becomes unhealthy?

Accepted Answer

Auto Scaling automatically replaces unhealthy instances to maintain the desired capacity and ensure application availability.

Question 10

A company runs an image-processing application on a serverless infrastructure. Each processing job runs in a single AWS Lambda execution. A sysops administrator is tasked with ensuring there is enough capacity to run 500 simultaneous jobs even if other Lambda functions are being run for other applications. The administrator has already increased service limits within the Region. Which action should be taken?

Accepted Answer

Setting the reserved concurrency for the image-processing Lambda function to 500 ensures that there is always capacity available for 500 simultaneous executions, regardless of other Lambda functions running.

Question 11

What is Amazon WorkSpaces?

Accepted Answer

Amazon WorkSpaces is a cloud-based desktop computing service that allows users to access their applications and resources from any device, providing a virtual desktop experience.

Question 12

A user is using Cloudformation to launch an EC2 instance and then configure an application after the instance is launched. The user wants the stack creation of ELB and AutoScaling to wait until the EC2 instance is launched and configured properly. How can the user configure this?

Accepted Answer

The WaitCondition resource in CloudFormation can be used to make the stack creation process wait until certain conditions are met, such as an EC2 instance being fully launched and configured.

Question 13

A company needs to deploy a web application on two Amazon EC2 instances behind an Application Load Balancer (ALB). Two EC2 instances will also be deployed to host the database. The infrastructure needs to be designed across Availability Zones for high availability and must limit public access to the instances as much as possible. How should this be achieved within a VPC?

Accepted Answer

The answer of A company needs to deploy a web...

Question 14

A company needs to ensure that all IAM users rotate their passwords on a regular basis. Which action should be taken take to implement this?

Accepted Answer

Setting up a password policy to enable password expiration ensures that IAM users are required to change their passwords regularly, which is the most efficient and automated way to enforce password rotation.

Question 15

A SysOps Administrator created an AWS CloudFormation template for the first time. The stack failed with a status of ROLLBACK_COMPLETE . The Administrator identified and resolved the template issue causing the failure. How should the Administrator continue with the stack deployment?

Accepted Answer

The stack in ROLLBACK_COMPLETE status cannot be updated or changed. The administrator should delete the failed stack and create a new one with the corrected template.

Question 16

A company needs to migrate an on-premises asymmetric key management system into AWS. Which AWS service should be used to accomplish this?

Accepted Answer

AWS CloudHSM is a service that provides hardware security modules (HSMs) in the AWS Cloud, which can be used to manage and store asymmetric keys securely, making it suitable for migrating an on-premises asymmetric key management system.

Question 17

A Development team recently deployed a new version of a web application to production. After the release, penetration testing revealed a cross-site scripting vulnerability that could expose user data. Which AWS service will mitigate this issue?

Accepted Answer

AWS WAF (Web Application Firewall) can help mitigate cross-site scripting (XSS) vulnerabilities by allowing you to create rules that block or filter out malicious requests that contain XSS attack patterns.

Question 18

A SysOps Administrator receives a connection timeout error when attempting to connect to an Amazon EC2 instance from a home network using SSH. The Administrator was able to connect to this EC2 instance using from their office network in the past. What caused the connection to time out?

Accepted Answer

The security group associated with the EC2 instance likely does not have a rule allowing inbound SSH traffic from the Administrator's home network IP address.

Question 19

The CFO of a company wants to allow one of his employees to view only the AWS usage report page. Which of the below mentioned IAM policy statements allows the user to have access to the AWS usage report page?

Accepted Answer

The action "aws-portal:ViewUsage" specifically allows a user to view the AWS usage report page.

Question 20

An organization has created one IAM user and applied the below mentioned policy to the user. What entitlements do the IAM users avail with this policy?

Accepted Answer

The answer of An organization has created one IAM user...

Exam 13: AWS Certified SysOps Administrator (SOA-C01)