AWS Certified CloudOps Engineer - Associate

• #21

  A company has deployed an application on AWS. The application runs on a fleet of Linux Amazon EC2 instances that are in an Auto Scaling group. The Auto Scaling group is configured to use launch templates. The launch templates launch Amazon Elastic Block Store (Amazon EBS) backed EC2 instances that use General Purpose SSD (gp3) EBS volumes for primary storage. A CloudOps Engineer needs to implement a solution to ensure that all the EC2 instances can share the same underlying files. The solution also must ensure that the data is consistent. Which solution will meet these requirements?

  • ACreate an Amazon Elastic File System (Amazon EFS) file system. Create a new launch template version that includes user data that mounts the EFS file system. Update the Auto Scaling group to use the new launch template version to cycle in newer EC2 instances and to terminate the older EC2 instances.
  • BEnable Multi-Attach on the EBS volumes. Create a new launch template version that includes user data that mounts the EBS volume. Update the Auto Scaling group to use the new template version to cycle in newer EC2 instances and to terminate the older EC2 instances.
  • CCreate a cron job that synchronizes the data between the EBS volumes for all the EC2 instances in the Auto Scaling group. Create a lifecycle hook during instance launch to configure the cron job on all the EC2 instances. Rotate out the older EC2 instances.
  • DCreate a new launch template version that creates an Amazon Elastic File System (Amazon EFS) file system. Update the Auto Scaling group to use the new template version to cycle in newer EC2 instances and to terminate the older EC2 instances.
  उत्तर दिखाएँ
• #222 चुनें

  A CloudOps Engineer needs to control access to groups of Amazon EC2 instances using AWS Systems Manager Session Manager. Specific tags on the EC2 instances have already been added. Which additional actions should the Engineer take to control access? (Choose two.)

  • AAttach an IAM policy to the users or groups that require access to the EC2 instances.
  • BAttach an IAM role to control access to the EC2 instances.
  • CCreate a placement group for the EC2 instances and add a specific tag.
  • DCreate a service account and attach it to the EC2 instances that need to be controlled.
  • ECreate an IAM policy that grants access to any EC2 instances with a tag specified in the Condition element.
  उत्तर दिखाएँ
• #232 चुनें

  Recently several critical files were mistakenly deleted from a shared Amazon S3 bucket. A CloudOps Engineer needs to prevent accidental deletions from occurring in the future by enabling MFA Delete. Once enabled, which bucket activities will require MFA authentication? (Choose two.)

  • APermanently removing an object version from the bucket.
  • BDisabling default object encryption for the bucket.
  • CListing all versions of deleted objects in the bucket.
  • DSuspending versioning on the bucket.
  • EEnabling MFA Add on the bucket.
  उत्तर दिखाएँ
• #24

  A company wants to reduce costs for jobs that can be completed at any time. The jobs currently run by using multiple Amazon EC2 On-Demand Instances and the jobs take slightly less than 2 hours to complete. If a job falls for any reason it must be restarted from the beginning. Which solution will meet these requirements MOST cost-effectively?

  • APurchase Reserved Instances for the jobs.
  • BSubmit a request for a one-time Spot Instance for the jobs.
  • CSubmit a request for Spot Instances with a defined duration for the jobs.
  • DUse a mixture of On-Demand Instances and Spot Instances for the jobs.
  उत्तर दिखाएँ
• #25

  A company is attempting to manage its costs in the AWS Cloud. A CloudOps Engineer needs specific company-defined tags that are assigned to resources to appear on the billing report. What should the CloudOps Engineer do to meet this requirement?

  • AActivate the tags as AWS generated cost allocation tags.
  • BActivate the tags as user-defined cost allocation tags.
  • CCreate a new cost category. Select the account billing dimension.
  • DCreate a new AWS Cost and Usage Report. Include the resource IDs.
  उत्तर दिखाएँ
• #26

  A company has a web application that is experiencing performance problems many times each night. A root cause analysis reveals sudden increases in CPU utilization that last 5 minutes on an Amazon EC2 Linux instance. A CloudOps Engineer must find the process ID (PID) of the service or process that is consuming more CPU. What should the CloudOps Engineer do to collect the process utilization information with the LEAST amount of effort?

  • AConfigure the Amazon CloudWatch agent procstat plugin to capture CPU process metrics.
  • BConfigure an AWS Lambda function to run every minute to capture the PID and send a notification.
  • CLog in to the EC2 instance by using a .pem key each night. Then run the top command.
  • DUse the default Amazon CloudWatch CPU utilization metric to capture the PID in CloudWatch.
  उत्तर दिखाएँ
• #27

  A company hosts a web portal on Amazon EC2 instances. The web portal uses an Elastic Load Balancer (ELB) and Amazon Route 53 for its public DNS service. The ELB and the EC2 instances are deployed by way of a single AWS CloudFormation stack in the us-east-1 Region. The web portal must be highly available across multiple Regions. Which configuration will meet these requirements?

  • ADeploy a copy of the stack in the us-west-2 Region. Create a single start of authority (SOA) record in Route 53 that includes the IP address from each ELB. Configure the SOA record with health checks. Use the ELB in us-east-1 as the primary record and the ELB in us-west-2 as the secondary record.
  • BDeploy a copy of the stack in the us-west-2 Region. Create an additional A record in Route 53 that includes the ELB in us-west-2 as an alias target. Configure the A records with a failover routing policy and health checks. Use the ELB in us-east-1 as the primary record and the ELB in us-west-2 as the secondary record.
  • CDeploy a new group of EC2 instances in the us-west-2 Region. Associate the new EC2 instances with the existing ELB, and configure load balancer health checks on all EC2 instances. Configure the ELB to update Route 53 when EC2 instances in us-west-2 fail health checks.
  • DDeploy a new group of EC2 instances in the us-west-2 Region. Configure EC2 health checks on all EC2 instances in each Region. Configure a peering connection between the VPC's. Use the VPC in us-east-1 as the primary record and the VPC in us-west-2 as the secondary record.
  उत्तर दिखाएँ
• #28

  A company is implementing security and compliance by using AWS Trusted Advisor. The company's SysOps team is validating the list of Trusted Advisor checks that it can access. Which factor will affect the quantity of available Trusted Advisor checks?

  • AWhether at least one Amazon EC2 instance is in the running state.
  • BThe AWS Support plan.
  • CAn AWS Organizations Service Control Policy (SCP).
  • DWhether the AWS account root user has multi-factor authentication (MFA) enabled.
  उत्तर दिखाएँ
• #29

  A CloudOps Engineer has launched a large general purpose Amazon EC2 instance to regularly process large data files. The instance has an attached 1 TB General Purpose SSD (gp2) Amazon Elastic Block Store (Amazon EBS) volume. The instance also is EBS-optimized. To save costs, the CloudOps Engineer stops the instance each evening and restarts the instance each morning. When data processing is active, Amazon CloudWatch metrics on the instance show a consistent 3.000 VolumeReadOps. The CloudOps Engineer must improve the I/O performance while ensuring data integrity. Which action will meet these requirements?

  • AChange the instance type to a large, burstable, general purpose instance.
  • BChange the instance type to an extra large general purpose instance.
  • CIncrease the EBS volume to a 2 TB General Purpose SSD (gp2) volume.
  • DMove the data that resides on the EBS volume to the instance store.
  उत्तर दिखाएँ
• #30

  A CloudOps Engineer created an AWS CloudFormation template that provisions Amazon EC2 instances, an Elastic Load Balancer (ELB), and an Amazon RDS DB instance. During stack creation, the creation of the EC2 instances and the creation of the ELB are successful. However, the creation of the DB instance fails. What is the default behavior of CloudFormation in this scenario?

  • ACloudFormation will roll back the stack and delete the stack.
  • BCloudFormation will roll back the stack but will not delete the stack.
  • CCloudFormation will prompt the user to roll back the stack or continue.
  • DCloudFormation will successfully complete the stack but will report a failed status for the DB instance.
  उत्तर दिखाएँ
• #31

  A company runs a web application on three Amazon EC2 instances behind an Application Load Balancer (ALB). The company notices that random periods of increased traffic cause a degradation in the application's performance. A CloudOps Engineer must scale the application to meet the increased traffic. Which solution meets these requirements?

  • ACreate an Amazon CloudWatch alarm to monitor application latency and increase the size of each EC2 instance if the desired threshold is reached.
  • BCreate an Amazon EventBridge (Amazon CloudWatch Events) rule to monitor application latency and add an EC2 instance to the ALB if the desired threshold is reached.
  • CDeploy the application to an Auto Scaling group of EC2 instances with a target tracking scaling policy. Attach the ALB to the Auto Scaling group.
  • DDeploy the application to an Auto Scaling group of EC2 instances with a scheduled scaling policy. Attach the ALB to the Auto Scaling group.
  उत्तर दिखाएँ
• #32

  A CloudOps Engineer has successfully deployed a VPC with an AWS CloudFormation template. The CloudOps Engineer wants to deploy the same template across multiple accounts that are managed through AWS Organizations. Which solution will meet this requirement with the LEAST operational overhead?

  • AAssume the OrganizationAccountAccessRole IAM role from the management account. Deploy the template in each of the accounts.
  • BCreate an AWS Lambda function to assume a role in each account. Deploy the template by using the AWS CloudFormation CreateStack API call.
  • CCreate an AWS Lambda function to query for a list of accounts. Deploy the template by using the AWS CloudFormation CreateStack API call.
  • DUse AWS CloudFormation StackSets from the management account to deploy the template in each of the accounts.
  उत्तर दिखाएँ
• #33

  A company is running an application on premises and wants to use AWS for data backup All of the data must be available locally. The backup application can write only to block-based storage that is compatible with the Portable Operating System Interface (POSIX). Which backup solution will meet these requirements?

  • AConfigure the backup software to use Amazon S3 as the target for the data backups.
  • BConfigure the backup software to use Amazon S3 Glacier as the target for the data backups.
  • CUse AWS Storage Gateway, and configure it to use gateway-cached volumes.
  • DUse AWS Storage Gateway, and configure it to use gateway-stored volumes.
  उत्तर दिखाएँ
• #34

  An Amazon CloudFront distribution has a single Amazon S3 bucket as its origin. A CloudOps Engineer must ensure that users can access the S3 bucket only through requests from the CloudFront endpoint. Which solution will meet these requirements?

  • AConfigure S3 Block Public Access on the S3 bucket. Update the S3 bucket policy to allow the GetObject action from only the CloudFront distribution.
  • BConfigure Origin Shield in the CloudFront distribution. Update the CloudFront origin to include a custom Origin_Shield header.
  • CCreate an Origin Access Identity (OAI). Assign the OAI to the CloudFront distribution. Update the S3 bucket policy to restrict access to the OAI.
  • DCreate an Origin Access Identity (OAI). Assign the OAI to the S3 bucket. Update the CloudFront origin to include a custom Origin header with the OAI value.
  उत्तर दिखाएँ
• #35

  A CloudOps Engineer has created a VPC that contains a public subnet and a private subnet. Amazon EC2 instances that were launched in the private subnet cannot access the internet. The default network ACL is active on all subnets in the VPC, and all security groups allow all outbound traffic. Which solution will provide the EC2 instances in the private subnet with access to the internet?

  • ACreate a NAT gateway in the public subnet. Create a route from the private subnet to the NAT gateway.
  • BCreate a NAT gateway in the public subnet. Create a route from the public subnet to the NAT gateway.
  • CCreate a NAT gateway in the private subnet. Create a route from the public subnet to the NAT gateway.
  • DCreate a NAT gateway in the private subnet. Create a route from the private subnet to the NAT gateway.
  उत्तर दिखाएँ
• #36

  Website users report that an application's pages are loading slowly at the beginning of the workday. The application runs on Amazon EC2 instances, and data is stored in an Amazon RDS database. The CloudOps Engineer suspects the issue is related to high CPU usage on a component of this application. How can the Engineer find out which component is causing the performance bottleneck?

  • AUse AWS CloudTrail to review the resource usage history for each component.
  • BUse Amazon CloudWatch metrics to examine the resource usage of each component.
  • CUse Amazon Inspector to view the resource usage details for each component.
  • DUse Amazon CloudWatch Events to examine the high usage events for each component.
  उत्तर दिखाएँ
• #37

  A user working in the Amazon EC2 console increased the size of an Amazon Elastic Block Store (Amazon EBS) volume attached to an Amazon EC2 Windows instance. The change is not reflected in the file system. What should a CloudOps Engineer do to resolve this issue?

  • AExtend the file system with operating system-level tools to use the new storage capacity.
  • BReattach the EBS volume to the EC2 instance.
  • CReboot the EC2 instance that is attached to the EBS volume.
  • DTake a snapshot of the EBS volume. Replace the original volume with a volume that is created from the snapshot.
  उत्तर दिखाएँ
• #38

  An environment consists of 100 Amazon EC2 Windows instances. The Amazon CloudWatch agent is deployed and running on all EC2 Instances with a baseline configuration file to capture log files. There is a new requirement to capture the DHCP log files that exist on 50 of the instances. What is the MOST operationally efficient way to meet this new requirement?

  • ACreate an additional CloudWatch agent configuration file to capture the DHCP logs. Use the AWS Systems Manager Run Command to restart the CloudWatch agent on each EC2 instance with the append-config option to apply the additional configuration file.
  • BLog in to each EC2 Instance with administrator rights. Create a PowerShell script to push the needed baseline log files and DHCP log files to CloudWatch.
  • CRun the CloudWatch agent configuration file wizard on each EC2 instance. Verify that the baseline log files are included and add the DHCP log files during the wizard creation process.
  • DRun the CloudWatch agent configuration file wizard on each EC2 instance and select the advanced detail level. This will capture the operating system log files.
  उत्तर दिखाएँ
• #39

  An existing, deployed solution uses Amazon EC2 instances with Amazon EBS General Purpose SSD volumes, am Amazon RDS PostgreSQL database, an Amazon EFS file system, and static objects stored in an Amazon S3 bucket. The Security team now mandates that at-rest encryption be turned on immediately for all aspects of the application, without creating new resources and without any downtime. To satisfy the requirements, which one of these services can the CloudOps Engineer enable at-rest encryption on?

  • AEBS General Purpose SSD volumes.
  • BRDS PostgreSQL database.
  • CAmazon EFS file systems.
  • DS3 objects within a bucket.
  उत्तर दिखाएँ
• #40

  A company has migrated its application to AWS. The company will host the application on Amazon EC2 instances of multiple instance families. During initial testing, a CloudOps Engineer identifies performance issues on selected EC2 instances. The company has a strict budget allocation policy, so the CloudOps Engineer must use the right resource types with the performance characteristics to match the workload. What should the CloudOps Engineer do to meet this requirement?

  • APurchase regional Reserved Instances (RIs) for immediate cost savings. Review and take action on the EC2 rightsizing recommendations in Cost Explorer. Exchange the RIs for the optimal instance family after rightsizing.
  • BPurchase zonal Reserved Instances (RIs) for the existing instances. Monitor the RI utilization in the AWS Billing and Cost Management console. Make adjustments to instance sizes to optimize utilization.
  • CReview and take action on AWS Compute Optimizer recommendations. Purchase Compute Savings Plans to reduce the cost that is required to run the compute resources.
  • DReview resource utilization metrics in the AWS Cost and Usage Report. Rightsize the EC2 instances. Create On-Demand Capacity Reservations for the rightsized resources.
  उत्तर दिखाएँ

अपना स्कोर ट्रैक करना, समयबद्ध मॉक परीक्षा देना और AI व्याख्या पाना चाहते हैं? निःशुल्क खाता बनाएँ