AWS Certified CloudOps Engineer - Associate

• #341

  A company is trying to connect two applications. One application runs in an on-premises data center that has a hostname of hostl .onprem.private. The other application runs on an Amazon EC2 instance that has a hostname of hostl.awscloud.private. An AWS Site-to-Site VPN connection is in place between the on-premises network and AWS. The application that runs in the data center tries to connect to the application that runs on the EC2 instance, but DNS resolution fails. A CloudOps Engineer must implement DNS resolution between on-premises and AWS resources. Which solution allows the on-premises application to resolve the EC2 instance hostname?

  • ASet up an Amazon Route 53 inbound resolver endpoint with a forwarding rule for the onprem.private hosted zone. Associate the resolver with the VPC of the EC2 instance. Configure the on-premises DNS resolver to forward onprem.private DNS queries to the inbound resolver endpoint.
  • BSet up an Amazon Route 53 inbound resolver endpoint. Associate the resolver with the VPC of the EC2 instance. Configure the on-premises DNS resolver to forward awscloud.private DNS queries to the inbound resolver endpoint.
  • CSet up an Amazon Route 53 outbound resolver endpoint with a forwarding rule for the onprem.private hosted zone. Associate the resolver with the AWS Region of the EC2 instance. Configure the on-premises DNS resolver to forward onprem.private DNS queries to the outbound resolver endpoint.
  • DSet up an Amazon Route 53 outbound resolver endpoint. Associate the resolver with the AWS Region of the EC2 instance. Configure the on-premises DNS resolver to forward awscloud.private DNS queries to the outbound resolver endpoint.
  उत्तर दिखाएँ
  💬चर्चा
• #342

  A company hosts an internal application on Amazon EC2 instances. All application data and requests route through an AWS Site-to-Site VPN connection between the on-premises network and AWS. The company must monitor the application for changes that allow network access outside of the corporate network. Any change that exposes the application externally must be restricted automatically. Which solution meets these requirements in the MOST operationally efficient manner?

  • ACreate an AWS Lambda function that updates security groups that are associated with the elastic network interface to remove inbound rules with noncorporate CIDR ranges. Turn on VPC Flow Logs, and send the logs to Amazon CloudWatch Logs. Create an Amazon CloudWatch alarm that matches traffic from noncorporate CIDR ranges, and publish a message to an Amazon Simple Notification Service (Amazon SNS) topic with the Lambda function as a target.
  • BCreate a scheduled Amazon EventBridge (Amazon CloudWatch Events) rule that targets an AWS Systems Manager Automation document to check for public IP addresses on the EC2 instances. If public IP addresses are found on the EC2 instances, initiate another Systems Manager Automation document to terminate the instances.
  • CConfigure AWS Config and a custom rule to monitor whether a security group allows inbound requests from noncorporate CIDR ranges. Create an AWS Systems Manager Automation document to remove any noncorporate CIDR ranges from the application security groups.
  • DConfigure AWS Config and the managed rule for monitoring public IP associations with the EC2 instances by tag. Tag the EC2 instances with an identifier. Create an AWS Systems Manager Automation document to remove the public IP association from the EC2 instances.
  उत्तर दिखाएँ
  💬चर्चा
• #343

  A web-commerce application stores its data in an Amazon Aurora DB cluster with an Aurora replica. The application displays shopping cart information by reading data from the reader endpoint. When monitoring the Aurora database, the CloudOps Engineer sees that the AuroraReplicaLagMaximum metric for a single replica is high. What behavior is the application MOST likely exhibiting to users?

  • AUsers cannot add any items to the shopping cart.
  • BUsers intermittently notice that the cart is not updated correctly.
  • CUsers cannot remove any items from the shopping cart.
  • DUsers cannot use the application because it is falling back to an error page.
  उत्तर दिखाएँ
  💬चर्चा
• #344

  A user has created a VPC with the public and private subnets using the VPC wizard. The VPC has CIDR 20.0.0.0/16. The public subnet uses CIDR 20.0.1.0/24. The user is planning to host a web server in the public subnet (port 80) and a DB server in the private subnet (port 3306). The user is configuring a security group for the public subnet (WebSecGrp) and the private subnet (DBSecGrp). Which of the below mentioned entries is required in the private subnet database security group (DBSecGrp)?

  • AAllow inbound on port 3306 for source Web Server Security Group (WebSecGrp).
  • BAllow inbound on port 3306 from source 20.0.0.0/16.
  • CAllow outbound on port 3306 for destination Web Server Security Group (WebSecGrp).
  • DAllow outbound on port 80 for destination NAT Instance IP.
  उत्तर दिखाएँ
  💬चर्चा
• #3452 चुनें

  A CloudOps Engineer is deploying a test site running on Amazon EC2 instances. The application requires both incoming and outgoing connectivity to the internet. Which combination of steps are required to provide internet connectivity to the EC2 instances? (Choose two.)

  • AAdd a NAT gateway to a public subnet.
  • BAttach a private address to the elastic network interface on the EC2 instance.
  • CAttach an Elastic IP address to the internet gateway.
  • DAdd an entry to the route table for the subnet that points to an internet gateway.
  • ECreate an internet gateway and attach it to a VPC.
  उत्तर दिखाएँ
  💬चर्चा
• #346

  A company runs an application on Amazon EC2 instances behind an Application Load Balancer. The EC2 instances are in an Auto Scaling group. The application sometimes becomes slow and unresponsive. Amazon CloudWatch metrics show that some EC2 instances are experiencing high CPU load. A CloudOps Engineer needs to create a CloudWatch dashboard that can automatically display CPU metrics of all the EC2 instances. The metrics must include new instances that are launched as part of the Auto Scaling group. What should the CloudOps Engineer do to meet these requirements in the MOST operationally efficient way?

  • ACreate a CloudWatch dashboard. Use activity notifications from the Auto Scaling group to invoke a custom AWS Lambda function. Use the Lambda function to update the CloudWatch dashboard to monitor the CPUUtilization metric for the new instance IDs.
  • BCreate a CloudWatch dashboard. Run a custom script on each EC2 instance to stream the CPU utilization to the dashboard.
  • CUse CloudWatch metrics explorer to filter by the aws:autoscaling:groupName tag and to create a visualization for the CPUUtilization metric. Add the visualization to a CloudWatch dashboard.
  • DUse CloudWatch metrics explorer to filter by instance state and to create a visualization for the CPUUtilization metric. Add the visualization to a CloudWatch dashboard.
  उत्तर दिखाएँ
  💬चर्चा
• #347

  A company hosts several write-intensive applications. These applications use a MySQL database that runs on a single Amazon EC2 instance. The company asks a CloudOps Engineer to implement a highly available database solution that is ideal for multi-tenant workloads. Which solution should the CloudOps Engineer implement to meet these requirements?

  • ACreate a second EC2 instance for MySQL. Configure the second instance to be a read replica.
  • BMigrate the database to an Amazon Aurora DB cluster. Add an Aurora Replica.
  • CMigrate the database to an Amazon Aurora multi-master DB cluster.
  • DMigrate the database to an Amazon RDS for MySQL DB instance.
  उत्तर दिखाएँ
  💬चर्चा
• #3482 चुनें

  A CloudOps Engineer must configure a resilient tier of Amazon EC2 instances for a high performance computing (HPC) application. The HPC application requires minimum latency between nodes. Which actions should the CloudOps Engineer take to meet these requirements? (Choose two.)

  • ACreate an Amazon Elastic File System (Amazon EFS) file system. Mount the file system to the EC2 instances by using user data.
  • BCreate a Multi-AZ Network Load Balancer in front of the EC2 instances.
  • CPlace the EC2 instances in an Auto Scaling group within a single subnet.
  • DLaunch the EC2 instances into a cluster placement group.
  • ELaunch the EC2 instances into a partition placement group.
  उत्तर दिखाएँ
  💬चर्चा
• #349

  A company creates custom AMI images by launching new Amazon EC2 instances from an AWS CloudFormation template it installs and configure necessary software through AWS OpsWorks and takes images of each EC2 instance. The process of installing and configuring software can take between 2 to 3 hours but at times the process stalls due to installation errors. The CloudOps Engineer must modify the CloudFormation template so if the process stalls, the entire stack will fail and roll back. Based on these requirements what should be added to the template?

  • AConditions with a timeout set to 4 hours.
  • BCreationPolicy with timeout set to 4 hours.
  • CDependsOn a timeout set to 4 hours.
  • DMetadata with a timeout set to 4 hours.
  उत्तर दिखाएँ
  💬चर्चा
• #350

  A company hosts a Windows-based file server on a fleet of Amazon EC2 instances across multiple Availability Zones. The current setup does not allow application servers to access files simultaneously from the EC2 fleet. Which solution will allow this access in the MOST operationally efficient way?

  • ACreate an Amazon Elastic File System (Amazon EFS) Multi-AZ file system. Copy the files to the EFS file system. Connect the EFS file system to mount points on the application servers.
  • BCreate an Amazon FSx for Windows File Server Multi-AZ file system. Copy the files to the Amazon FSx file system. Adjust the connections from the application servers to use the share that the Amazon FSx file system exposes.
  • CCreate an Amazon Elastic Block Store (Amazon EBS) volume that has EBS Multi-Attach enabled. Create an Auto Scaling group for the Windows file server. Use a script in the file server's user data to attach the SharedFileAccess tag to the EBS volume during launch.
  • DCreate two Amazon FSx for Windows File Server file systems. Configure Distributed File System (DFS) replication between the file systems. Copy the files to the Amazon FSx file systems. Adjust the connections from the application servers to use the shares that the Amazon FSx file systems expose.
  उत्तर दिखाएँ
  💬चर्चा
• #351

  A CloudOps Engineer is using Amazon EC2 instances to host an application. The CloudOps Engineer needs to grant permissions for the application to access an Amazon DynamoDB table. Which solution will meet this requirement?

  • ACreate access keys to access the DynamoDB table. Assign the access keys to the EC2 instance profile.
  • BCreate an EC2 key pair to access the DynamoDB table. Assign the key pair to the EC2 instance profile.
  • CCreate an IAM user to access the DynamoDB table. Assign the IAM user to the EC2 instance profile.
  • DCreate an IAM role to access the DynamoDB table. Assign the IAM role to the EC2 instance profile.
  उत्तर दिखाएँ
  💬चर्चा
• #352

  A company is using an Amazon Aurora MySQL DB cluster that has point-in-time recovery, backtracking, and automatic backup enabled. A CloudOps Engineer needs to be able to roll back the DB cluster to a specific recovery point within the previous 72 hours. Restores must be completed in the same production DB cluster. Which solution will meet these requirements?

  • ACreate an Aurora Replica. Promote the replica to replace the primary DB instance.
  • BCreate an AWS Lambda function to restore an automatic backup to the existing DB cluster.
  • CUse backtracking to rewind the existing DB cluster to the desired recovery point.
  • DUse point-in-time recovery to restore the existing DB cluster to the desired recovery point.
  उत्तर दिखाएँ
  💬चर्चा
• #353

  A company stores its data in an Amazon S3 bucket. The company is required to classify the data and find any sensitive personal information in its S3 files. Which solution will meet these requirements?

  • ACreate an AWS Config rule to discover sensitive personal information in the S3 files and mark them as noncompliant.
  • BCreate a S3 event-driven artificial intelligence/machine learning (AI/ML) pipeline to classify sensitive personal information by using Amazon Recognition.
  • CEnable Amazon GuardDuty. Configure S3 protection to monitor all data inside Amazon S3.
  • DEnable Amazon Macie. Create a discovery job that uses the managed data identifier.
  उत्तर दिखाएँ
  💬चर्चा
• #354

  While setting up an AWS managed VPN connection, a CloudOps Engineer creates a customer gateway resource in AWS. The customer gateway device resides in a data center with a NAT gateway in front of it. What address should be used to create the customer gateway resource?

  • AThe private IP address of the customer gateway device.
  • BThe MAC address of the NAT device in front of the customer gateway device.
  • CThe public IP address of the customer gateway device.
  • DThe public IP address of the NAT device in front of the customer gateway device.
  उत्तर दिखाएँ
  💬चर्चा
• #3552 चुनें

  A CloudOps Engineer needs to design a Disaster Recovery (DR) plan for an application on AWS. The application runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances are in an Auto Scaling group. The application uses an Amazon Aurora PostgreSQL database. The Recovery Time Objective (RTO) and Recovery Point Objective (RPO) are 15 minutes each. Which combination of steps should the CloudOps Engineer take to meet these requirements MOST cost-effectively? (Choose two.)

  • AConfigure Aurora backups to be exported to the DR Region.
  • BConfigure the Aurora cluster to replicate data to the DR Region by using the Aurora global database option.
  • CConfigure the DR Region with an ALB and an Auto Scaling group. Use the same configuration as in the primary Region.
  • DConfigure the DR Region with an ALB and an Auto Scaling group. Set the Auto Scaling group's minimum capacity, maximum capacity, and desired capacity to 1.
  • EManually launch a new ALB and a new Auto Scaling group by using AWS CloudFormation during a failover activity.
  उत्तर दिखाएँ
  💬चर्चा
• #356

  A CloudOps Engineer has implemented a VPC network design with the following requirements: Two Availability Zones (AZs). Two private subnets. Two public subnets. One internet gateway. One NAT gateway. What would potentially cause applications in the VPC to fail during an AZ outage?

  • AA single virtual private gateway, because it can be associated with a single AZ only.
  • BA single internet gateway, because it is not redundant across both AZs.
  • CA single NAT gateway, because it is not redundant across both AZs.
  • DThe default VPC route table, because it can be associated with a single AZ only.
  उत्तर दिखाएँ
  💬चर्चा
• #357

  A CloudOps Engineer noticed that a large number of Elastic IP addresses are being created on the company's AWS account, but they are not being associated with Amazon EC2 instances, and are incurring Elastic IP address charges in the monthly bill. How can the Engineer identify who is creating the Elastic IP addresses?

  • AAttach a cost-allocation tag to each requested Elastic IP address with the IAM user name of the developer who creates it.
  • BQuery AWS CloudTrail logs by using Amazon Athena to search for Elastic IP address events.
  • CCreate a CloudWatch alarm on the EIPCreated metric and send an Amazon SNS notification when the alarm triggers.
  • DUse Amazon Inspector to get a report of all Elastic IP addresses created in the last 30 days.
  उत्तर दिखाएँ
  💬चर्चा
• #358

  A company maintains a large set of sensitive data in an Amazon S3 bucket. The company's security team asks a CloudOps Engineer to help verify that all current objects in the S3 bucket are encrypted. What is the MOST operationally efficient solution that meets these requirements?

  • ACreate a script that runs against the S3 bucket and outputs the status of each object.
  • BCreate a S3 Inventory configuration on the S3 bucket. Include the appropriate status fields.
  • CProvide the security team with an IAM user that has read access to the S3 bucket.
  • DUse the AWS CLI to output a list of all objects in the S3 bucket.
  उत्तर दिखाएँ
  💬चर्चा
• #3592 चुनें

  A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The company uses Amazon Route 53 to route traffic. The company also has a static website that is configured in an Amazon S3 bucket. A CloudOps Engineer must use the static website as a backup to the web application. The failover to the static website must be fully automated. Which combination of actions will meet these requirements? (Choose two.)

  • ACreate a primary failover routing policy record. Configure the value to be the ALB.
  • BCreate an AWS Lambda function to switch from the primary website to the secondary website when the health check fails.
  • CCreate a primary failover routing policy record. Configure the value to be the ALB. Associate the record with a Route 53 health check.
  • DCreate a secondary failover routing policy record. Configure the value to be the static website. Associate the record with a Route 53 health check.
  • ECreate a secondary failover routing policy record. Configure the value to be the static website.
  उत्तर दिखाएँ
  💬चर्चा
• #360

  A company plans to launch a static website on its domain example.com and subdomain www.example.com using Amazon S3. How should the CloudOps Engineer meet this requirement?

  • ACreate one S3 bucket named example.com for both the domain and subdomain.
  • BCreate one S3 bucket with a wildcard named .example.com for both the domain and subdomain.
  • CCreate two S3 buckets named example.com and www.example.com. Configure the subdomain bucket to redirect requests to the domain bucket.
  • DCreate two S3 buckets named http://example.com and http://.example.com. Configure the wildcard () bucket to redirect requests to the domain bucket.
  उत्तर दिखाएँ
  💬चर्चा

अपना स्कोर ट्रैक करना, समयबद्ध मॉक परीक्षा देना और AI व्याख्या पाना चाहते हैं? निःशुल्क खाता बनाएँ