AWS Certified CloudOps Engineer - Associate

• #181

  A company uses an Amazon CloudFront distribution to deliver its website. Traffic logs for the website must be centrally stored, and all data must be encrypted at rest. Which solution will meet these requirements?

  • ACreate an Amazon OpenSearch Service (Amazon Elasticsearch Service) domain with internet access and server-side encryption that uses the default AWS managed Customer Master Key (CMK). Configure CloudFront to use the Amazon OpenSearch Service (Amazon Elasticsearch Service) domain as a log destination.
  • BCreate an Amazon OpenSearch Service (Amazon Elasticsearch Service) domain with VPC access and server-side encryption that uses AES-256. Configure CloudFront to use the Amazon OpenSearch Service (Amazon Elasticsearch Service) domain as a log destination.
  • CCreate an Amazon S3 bucket that is configured with default server-side encryption that uses AES-256. Configure CloudFront to use the S3 bucket as a log destination.
  • DCreate an Amazon S3 bucket that is configured with no default encryption. Enable encryption in the CloudFront distribution, and use the S3 bucket as a log destination.
  উত্তর দেখুন
• #182

  A CloudOps Engineer is testing an application that is hosted on five Amazon EC2 instances. The instances run in an Auto Scaling group behind an Application Load Balancer (ALB). High CPU utilization during load testing is causing the Auto Scaling group to scale out. The CloudOps Engineer must troubleshoot to find the root cause of the high CPU utilization before the Auto Scaling group scales out. Which action should the CloudOps Engineer take to meet these requirements?

  • AEnable instance scale-in protection.
  • BPlace the instance into the Standby state.
  • CRemove the listener from the ALB.
  • DSuspend the Launch and Terminate process types.
  উত্তর দেখুন
• #183

  A CloudOps Engineer is provisioning an Amazon Elastic File System (Amazon EFS) file system to provide shared storage across multiple Amazon EC2 instances. The instances all exist in the same VPC across multiple Availability Zones. There are two instances in each Availability Zone. The CloudOps Engineer must make the file system accessible to each instance with the lowest possible latency. Which solution will meet these requirements?

  • ACreate a mount target for the EFS file system in the VPC. Use the mount target to mount the file system on each of the instances.
  • BCreate a mount target for the EFS file system in one Availability Zone of the VPC. Use the mount target to mount the file system on the instances in that Availability Zone. Share the directory with the other instances.
  • CCreate a mount target for each instance. Use each mount target to mount the EFS file system on each respective instance.
  • DCreate a mount target in each Availability Zone of the VPC. Use the mount target to mount the EFS file system on the instances in the respective Availability Zone.
  উত্তর দেখুন
• #184

  A company has a critical serverless application that uses multiple AWS Lambda functions. Each Lambda function generates 1 GB of log data daily in its own Amazon CloudWatch Logs log group. The company's security team asks for a count of application errors, grouped by type, across all of the log groups. What should a CloudOps Engineer do to meet this requirement?

  • APerform a CloudWatch Logs Insights query that uses the stats command and count function.
  • BPerform a CloudWatch Logs search that uses the groupby keyword and count function.
  • CPerform an Amazon Athena query that uses the SELECT and GROUP BY keywords.
  • DPerform an Amazon RDS query that uses the SELECT and GROUP BY keywords.
  উত্তর দেখুন
• #185

  A software development company has multiple developers who work on the same product. Each developer must have their own development environment, and these development environments must be identical. Each development environment consists of Amazon EC2 instances and an Amazon RDS DB instance. The development environments should be created only when necessary, and they must be terminated each night to minimize costs. What is the MOST operationally efficient solution that meets these requirements?

  • AProvide developers with access to the same AWS CloudFormation template so that they can provision their development environment when necessary. Schedule a nightly cron job on each development instance to stop all running processes to reduce CPU utilization to nearly zero.
  • BProvide developers with access to the same AWS CloudFormation template so that they can provision their development environment when necessary. Schedule a nightly Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function to delete the AWS CloudFormation stacks.
  • CProvide developers with CLI commands so that they can provision their own development environment when necessary. Schedule a nightly Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function to terminate all EC2 instances and the DB instance.
  • DProvide developers with CLI commands so that they can provision their own development environment when necessary. Schedule a nightly Amazon EventBridge (Amazon CloudWatch Events) rule to cause AWS CloudFormation to delete all of the development environment resources.
  উত্তর দেখুন
• #1862টি বাছুন

  An ecommerce company uses an Amazon ElastiCache for Memcached cluster for in-memory caching of popular product queries on the shopping site. When viewing recent Amazon CloudWatch metrics data for the ElastiCache cluster, the CloudOps Engineer notices a large number of evictions. Which of the following actions will reduce these evictions? (Choose two.)

  • AAdd an additional node to the ElastiCache cluster.
  • BIncrease the ElastiCache time to live (TTL).
  • CIncrease the individual node size inside the ElastiCache cluster.
  • DPut an Elastic Load Balancer in front of the ElastiCache cluster.
  • EUse Amazon Simple Queue Service (Amazon SQS) to decouple the ElastiCache cluster.
  উত্তর দেখুন
• #187

  A company has created a NAT gateway in a public subnet in a VPC. The VPC also contains a private subnet that includes Amazon EC2 instances. The EC2 instances use the NAT gateway to access the internet to download patches and updates. The company has configured a VPC flow log for the elastic network interface of the NAT gateway. The company is publishing the output to Amazon CloudWatch Logs. A CloudOps Engineer must identify the top five internet destinations that the EC2 instances in the private subnet communicate with for downloads. What should the CloudOps Engineer do to meet this requirement in the MOST operationally efficient way?

  • AUse AWS CloudTrail Insights events to identify the top five internet destinations.
  • BUse Amazon CloudFront standard logs (access logs) to identify the top five internet destinations.
  • CUse CloudWatch Logs Insights to identify the top five internet destinations.
  • DChange the flow log to publish logs to Amazon S3. Use Amazon Athena to query the log files in Amazon S3.
  উত্তর দেখুন
• #188

  A company wants to build a solution for its business-critical Amazon RDS for MySQL database. The database requires high availability across different geographic locations. A CloudOps Engineer must build a solution to handle a Disaster Recovery (DR) scenario with the lowest Recovery Time Objective (RTO) and Recovery Point Objective (RPO). Which solution meets these requirements?

  • ACreate automated snapshots of the database on a schedule. Copy the snapshots to the DR Region.
  • BCreate a Cross-Region read replica for the database.
  • CCreate a Multi-AZ read replica for the database.
  • DSchedule AWS Lambda functions to create snapshots of the source database and to copy the snapshots to a DR Region.
  উত্তর দেখুন
• #189

  A company needs to restrict access to an Amazon S3 bucket to Amazon EC2 instances in a VPC only. All traffic must be over the AWS private network. What actions should the CloudOps Engineer take to meet these requirements?

  • ACreate a VPC endpoint for the S3 bucket, and create an IAM policy that conditionally limits all S3 actions on the bucket to the VPC endpoint as the source.
  • BCreate a VPC endpoint for the S3 bucket, and create a S3 bucket policy that conditionally limits all S3 actions on the bucket to the VPC endpoint as the source.
  • CCreate a service-linked role for Amazon EC2 that allows the EC2 instances to interact directly with Amazon S3, and attach an IAM policy to the role that allows the EC2 instances full access to the S3 bucket.
  • DCreate a NAT gateway in the VPC, and modify the VPC route table to route all traffic destined for Amazon S3 through the NAT gateway.
  উত্তর দেখুন
• #190

  A CloudOps Engineer is trying to set up an Amazon Route 53 domain name to route traffic to a website hosted on Amazon S3. The domain name of the website is www.example.com and the S3 bucket name DOC-EXAMPLE-BUCKET. After the record set is set up in Route 53, the domain name www.anycompany.com does not seem to work, and the static website is not displayed in the browser. Which of the following is a cause of this?

  • AThe S3 bucket must be configured with Amazon CloudFront first.
  • BThe Route 53 record set must have an IAM role that allows access to the S3 bucket.
  • CThe Route 53 record set must be in the same region as the S3 bucket.
  • DThe S3 bucket name must match the record set name in Route 53.
  উত্তর দেখুন
• #1912টি বাছুন

  A CloudOps Engineer migrates NAT instances to NAT gateways. After the migration, an application that is hosted on Amazon EC2 instances in a private subnet cannot access the internet. Which of the following are possible reasons for this problem? (Choose two.)

  • AThe application is using a protocol that the NAT gateway does not support.
  • BThe NAT gateway is not in a security group.
  • CThe NAT gateway is in an unsupported Availability Zone.
  • DThe NAT gateway is not in the Available state.
  • EThe port forwarding settings do not allow access to internal services from the internet.
  উত্তর দেখুন
• #192

  A company uses AWS CloudFormation to deploy its application infrastructure. Recently, a user accidentally changed a property of a database in a CloudFormation template and performed a stack update that caused an interruption to the application. A CloudOps Engineer must determine how to modify the deployment process to allow the DevOps team to continue to deploy the infrastructure, but prevent against accidental modifications to specific resources. Which solution will meet these requirements?

  • ASet up an AWS Config rule to alert based on changes to any CloudFormation stack. An AWS Lambda function can then describe the stack to determine if any protected resources were modified and cancel the operation.
  • BSet up an Amazon CloudWatch Events event with a rule to trigger based on any CloudFormation API call. An AWS Lambda function can then describe the stack to determine if any protected resources were modified and cancel the operation.
  • CLaunch the CloudFormation templates using a stack policy with an explicit allow for all resources and an explicit deny of the protected resources with an action of Update:.
  • DAttach an IAM policy to the DevOps team role that prevents a CloudFormation stack from updating, with a condition based on the specific Amazon Resource Names (ARNs) of the protected resources.
  উত্তর দেখুন
• #1932টি বাছুন

  A CloudOps Engineer needs to create a report that shows how many bytes are sent to and received from each target group member for an Application Load Balancer (ALB). Which combination of steps should the CloudOps Engineer take to meet these requirements? (Choose two.)

  • AEnable access logging for the ALB. Save the logs to an Amazon S3 bucket.
  • BInstall the Amazon CloudWatch agent on the instances in the target group.
  • CUse Amazon Athena to query the ALB logs. Query the table. Use the received_bytes and sent_bytes fields to calculate the total bytes grouped by the target port field.
  • DUse Amazon Athena to query the ALB logs. Query the table. Use the received_bytes and sent_bytes fields to calculate the total bytes grouped by the client port field.
  • ECreate an Amazon CloudWatch dashboard that shows the Sum statistic of the ProcessedBytes metric for the ALB.
  উত্তর দেখুন
• #194

  A data analytics application is running on an Amazon EC2 instance. A CloudOps Engineer must add custom dimensions to the metrics collected by the Amazon CloudWatch agent. How can the CloudOps Engineer meet this requirement?

  • ACreate a custom shell script to extract the dimensions and collect the metrics using the Amazon CloudWatch agent.
  • BCreate an Amazon EventBridge (Amazon CloudWatch Events) rule to evaluate the required custom dimensions and send the metrics to Amazon Simple Notification Service (Amazon SNS).
  • CCreate an AWS Lambda function to collect the metrics from AWS CloudTrail and send the metrics to an Amazon CloudWatch Logs group.
  • DCreate an append_dimensions field in the Amazon CloudWatch agent configuration file to collect the metrics.
  উত্তর দেখুন
• #195

  A CloudOps Engineer is helping a development team deploy an application to AWS Trie AWS CloudFormat on temp ate includes an Amazon Linux EC2 Instance an Amazon Aurora DB cluster and a hard coded database password that must be rotated every 90 days. What is the MOST secure way to manage the database password?

  • AUse the AWS Secrets Manager Secret resource with the GenerateSecretString property to automatically generate a password. Use the AWS Secrets Manager RotationSchedule resource to define a rotation schedule for the password. Configure the application to retrieve the secret from AWS Secrets Manager to access the database.
  • BUse the AWS Secrets Manager Secret resource with the SecretString property. Accept a password as a CloudFormation parameter. Use the AllowedPattern property of the CloudFormaton parameter to require a minimum length, uppercase and lowercase letters and special characters. Configure the application to retrieve the secret from AWS Secrets Manager to access the database.
  • CUse the AWS::SSM::Parameter resource. Accept input as a CloudFormation parameter to store the parameter as a secure string. Configure the application to retrieve the parameter from AWS Systems Manager Parameter Store to access the database.
  • DUse the AWS::SSM::Parameter resource. Accept input as a CloudFormation parameter to store the parameter as a string. Configure the application to retrieve the parameter from AWS Systems Manager Parameter Store to access the database.
  উত্তর দেখুন
• #196

  A CloudOps Engineer is examining the following AWS CloudFormation template. Why will the stack creation fail?

  • AThe Outputs section of the CloudFormation template was omitted.
  • BThe Parameters section of the CloudFormation template was omitted.
  • CThe PrivateDnsName cannot be set from a CloudFormation template.
  • DThe VPC was not specified in the CloudFormation template.
  উত্তর দেখুন
• #197

  A CloudOps Engineer is using AWS CloudFormation StackSets to create AWS resources in two AWS Regions in the same AWS account. A stack operation fails in one Region and returns the stack instance status of OUTDATED. What is the cause of this failure?

  • AThe CloudFormation template changed on the local disk and has not been submitted to CloudFormation.
  • BThe CloudFormation template is trying to create a global resource that is not unique.
  • CThe stack has not yet been deployed to the Region.
  • DThe CloudOps Engineer is using an old version of the CloudFormation API.
  উত্তর দেখুন
• #198

  A company uses AWS CloudFormation templates to deploy cloud infrastructure. An analysis of all the company's templates shows that the company has declared the same components in multiple templates. A CloudOps Engineer needs to create dedicated templates that have their own parameters and conditions for these common components. Which solution will meet this requirement?

  • ADevelop a CloudFormation change set.
  • BDevelop CloudFormation macros.
  • CDevelop CloudFormation nested stacks.
  • DDevelop CloudFormation stack sets.
  উত্তর দেখুন
• #199

  A CloudOps Engineer creates an AWS CloudFormation template to define an application stack that can be deployed in multiple AWS Regions. The CloudOps Engineer also creates an Amazon CloudWatch dashboard by using the AWS Management Console. Each deployment of the application requires its own CloudWatch dashboard. How can the CloudOps Engineer automate the creation of the CloudWatch dashboard each time the application is deployed?

  • ACreate a script by using the AWS CLI to run the aws cloudformation put-dashboard command with the name of the dashboard. Run the command each time a new CloudFormation stack is created.
  • BExport the existing CloudWatch dashboard as JSON. Update the CloudFormation template to define an AWS::CloudWatch::Dashboard resource. Include the exported JSON in the resource's DashboardBody property.
  • CUpdate the CloudFormation template to define an AWS::CloudWatch::Dashboard resource. Use the Intrinsic Ref function to reference the ID of the existing CloudWatch dashboard.
  • DUpdate the CloudFormation template to define an AWS::CloudWatch::Dashboard resource. Specify the name of the existing dashboard in the DashboardName property.
  উত্তর দেখুন
• #200

  A company has an existing public web application for www.example.com. The Application Load Balancer (ALB) is configured with a single HTTP 80 listener. A CloudOps Engineer must ensure that all web requests to www.example.com are encrypted between the client and the ALB. The CloudOps Engineer already has requested and validated a public certificate for www.example.com in AWS Certificate Manager (ACM). Existing users of the application must not be required to change the endpoint to which they are connecting. Which additional set of steps should the CloudOps Engineer take to meet these requirements?

  • ACreate an additional ALB listener for HTTPS on port 443. Set the default action to forward all traffic to the target group. Specify the ACM certificate that was created for www.example.com as the default SSL certificate.
  • BCreate an additional ALB listener for HTTPS on port 443. Set the default action to forward all traffic to the target group. Specify the ACM certificate that was created for www.example.com as the default SSL certificate. Delete the original HTTP listener on port 80.
  • CModify the ALB default rule for the HTTP port 80 listener. Create a rule in the listener to forward all traffic for the host www example.com to the target group. Specify the ACM certificate that was created for www.example.com as the default SSL certificate.
  • DModify the ALB default rule for the HTTP port 80 listener to redirect to HTTPS on port 443. Create an additional HTTPS listener on port 443. Set the default action to forward all traffic to the target group. Specify the ACM certificate that was created for www.example.com as the default SSL certificate.
  উত্তর দেখুন

নিজের স্কোর রাখতে, সময়সীমার মক পরীক্ষা দিতে ও AI ব্যাখ্যা পেতে চান? বিনামূল্যে অ্যাকাউন্ট খুলুন