AWS Certified CloudOps Engineer - Associate

• #81

  A CloudOps Engineer wants to use AWS Systems Manager Patch Manager to automate the process of patching Amazon EC2 Windows instances. The CloudOps Engineer wants to ensure that patches are auto-approved 2 days after the release date for development instances. Patches also must be auto-approved 5 days after the release date for production instances. Maintenance must occur only during a 2-hour window for all instances. Which solution will meet these requirements?

  • AUse tags to identify development instances and production instances. In Patch Manager, create two patch groups and one patch baseline. Add an auto-approval delay to each patch group. Create a single maintenance window.
  • BUse tags to identify development instances and production instances. In Patch Manager, create two patch groups and two patch baselines. Specify an auto-approval delay in each of the patch baselines. Create a single maintenance window.
  • CUse tags to identity development instances and production instances. In Patch Manager, create two patch groups and one patch baseline, Create two separate maintenance windows, each with an auto-approval delay.
  • DUse tags to identify development instances. In Patch Manager, create one patch group and one patch baseline. Specify auto-approval delays in the patch baseline, Add development instances to the new patch group. Use predefined Patch Manager patch baselines for all remaining instances. Create a single maintenance window.
  Tampilkan jawaban
• #82

  A team is managing an AWS account that is a member of an organization in AWS Organizations. The organization has consolidated billing features enabled. The account hosts several applications. A CloudOps Engineer has applied tags to resources within the account to reflect the environment. The team needs a report of the breakdown of charges by environment. What should the CloudOps Engineer do to meet this requirement?

  • AFilter, map, and categorize resource groups in Tag Editor.
  • BEnsure that the organization's Service Control Policies (SCPs) allow access to cost allocation tags.
  • CEnsure that the IAM credentials that are used to access Cost Explorer have permissions to group cost by tags.
  • DActivate the tag keys for cost allocation on the organization's management account.
  Tampilkan jawaban
• #83

  A company hosts a website on multiple Amazon EC2 instances that run in an Auto Scaling group. Users are reporting slow responses during peak times between. 6 PM and 11 PM every weekend. A CloudOps Engineer must implement a solution to improve performance during these peak times. What is the MOST operationally efficient solution that meets these requirements?

  • ACreate a scheduled Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function to increase the desired capacity before peak times.
  • BConfigure a scheduled scaling action with a recurrence option to change the desired capacity before and after peak times.
  • CCreate a target tracking scaling policy to add more instances when memory utilization is above 70%.
  • DConfigure the cooldown period for the Auto Scaling group to modify desired capacity before and after peak times.
  Tampilkan jawaban
• #84

  A company's use of AWS Cloud services is quickly growing, so a CloudOps Engineer has been asked to generate details of daily spending to share with management. Which method should the Engineer choose to produce this data?

  • AShare the monthly AWS bill with management.
  • BUse AWS CloudTrail Logs to access daily costs in JSON format.
  • CSet up a daily Cost and Usage Report and download the output from Amazon S3.
  • DMonitor AWS costs with Amazon CloudWatch and create billing alerts and notifications.
  Tampilkan jawaban
• #85

  An application team is working with a CloudOps Engineer to define Amazon CloudWatch alarms for an application. The application team does not know the application's expected usage or expected growth. Which solution should the CloudOps Engineer recommend?

  • ACreate CloudWatch alarms that are based on anomaly detection.
  • BCreate CloudWatch alarms by using a set of composite alarms.
  • CCreate CloudWatch alarms by using static thresholds.
  • DCreate CloudWatch alarms that treat missing data as breaching.
  Tampilkan jawaban
• #86

  A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer. The instances are in an Amazon EC2 Auto Scaling group. The application is accessed with a public URL. A CloudOps Engineer needs to implement a monitoring solution that checks the availability of the application and follows the same routes and actions as a customer. The CloudOps Engineer must receive a notification if less than 95% of the monitoring runs find no errors. Which solution will meet these requirements?

  • ACreate an Amazon CloudWatch Synthetics canary with a script that follows customer routes. Schedule the canary to run on a recurring schedule. Create a CloudWatch alarm that publishes a message to an Amazon Simple Notification Service (Amazon SNS) topic when the SuccessPercent metric is less than 95%.
  • BCreate Amazon Route 53 health checks that monitor the availability of the endpoint. Create Amazon CloudWatch alarms that publish a message to an Amazon Simple Notification Service (Amazon SNS) topic when the HealthCheckPercentageHealthy metric is less than 95%.
  • CCreate a single AWS Lambda function to check whether the endpoints are available for each customer path. Schedule the Lambda function by using Amazon EventBridge (Amazon CloudWatch Events). Configure the Lambda function to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic when an endpoint returns an error.
  • DCreate an AWS Lambda function for each customer path to check whether that specific endpoint is available. Schedule the Lambda functions by using Amazon EventBridge (Amazon CloudWatch Events). Configure each Lambda function to publish a custom metric to Amazon CloudWatch for the endpoint status. Create CloudWatch alarms based on each custom metric to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic when an alarm is in the ALARM state.
  Tampilkan jawaban
• #87Pilih 2

  A CloudOps Engineer must create an IAM policy for a developer who needs access to specific AWS services. Based on the requirements, the CloudOps Engineer creates the following policy. Which actions does this policy allow? (Select TWO.)

  • ACreate an AWS Storage Gateway.
  • BCreate an IAM role for an AWS Lambda function.
  • CDelete an Amazon Simple Queue Service (Amazon SQS) queue.
  • DDescribe AWS load balancers.
  • EInvoke an AWS Lambda function.
  Tampilkan jawaban
• #88

  A CloudOps Engineer wants to monitor the free disk space that is available on a set of Amazon EC2 instances that have Amazon Elastic Block Store (Amazon EBS) volumes attached. The CloudOps Engineer wants to receive a notification when the used disk space of the EBS volumes exceeds a threshold value, but only when the DiskReadOps metric also exceeds a threshold value. The CloudOps Engineer has set up an Amazon Simple Notification Service (Amazon SNS) topic. How can the CloudOps Engineer receive notification only when both metrics exceed their threshold values?

  • AInstall the Amazon CloudWatch agent on the EC2 instances. Create a metric alarm for the disk space and a metric alarm for the DiskReadOps metric. Create a composite alarm that includes the two metric alarms to publish a notification to the SNS topic.
  • BInstall the Amazon CloudWatch agent on the EC2 instances. Create a metric alarm for the disk space and a metric alarm for the DiskReadOps metric. Configure each alarm to publish a notification to the SNS topic.
  • CCreate a metric alarm for the EBSByteBalance% metric and a metric alarm for the DiskReadOps metric. Create a composite alarm that includes the two metric alarms to publish a notification to the SNS topic.
  • DConfigure detailed monitoring for the EC2 instances. Create a metric alarm for the disk space and a metric alarm for the DiskReadOps metric. Create a composite alarm that includes the two metric alarms to publish a notification to the SNS topic.
  Tampilkan jawaban
• #89

  An application running on Amazon EC2 instances in an Auto Scaling group across multiple Availability Zones was deployed using an AWS CloudFormation template. The SysOps team has patched the Amazon Machine Image (AMI) version and must update all the EC2 instances to use the new AMI. How can the CloudOps Engineer use CloudFormation to apply the new AMI while maintaining a minimum level of active instances to ensure service continuity?

  • ARun the aws cloudfomation update-stack command with the rollback-configuration option.
  • BUpdate the CloudFormation template with the new AMI ID, then reboot the EC2 instances.
  • CDeploy a second CloudFormation stack and use Amazon Route 53 to redirect traffic to the new stack.
  • DSet an AutoScalingRollingUpdate policy in the CloudFormation template to update the stack.
  Tampilkan jawaban
• #90

  A CloudOps Engineer must manage the security of an AWS account. Recently, an IAM user's access key was mistakenly uploaded to a public code repository. The CloudOps Engineer must identify anything that was changed by using this access key. How should the CloudOps Engineer meet these requirements?

  • ACreate an Amazon EventBridge (Amazon CloudWatch Events) rule to send all IAM events to an AWS Lambda function for analysis.
  • BQuery Amazon EC2 logs by using Amazon CloudWatch Logs Insights for all events initiated with the compromised access key within the suspected timeframe.
  • CSearch AWS CloudTrail event history for all events initiated with the compromised access key within the suspected timeframe.
  • DSearch VPC Flow Logs for all events initiated with the compromised access key within the suspected timeframe.
  Tampilkan jawaban
• #91

  A development team recently deployed a new version of a web application to production. After the release, penetration testing revealed a cross-site scripting vulnerability that could expose user data. Which AWS service will mitigate this issue?

  • AAWS Shield Standard.
  • BAWS WAF.
  • CElastic Load Balancing.
  • DAmazon Cognito.
  Tampilkan jawaban
• #92

  An application runs on multiple Amazon EC2 instances in an Auto Scaling group The Auto Scaling group is configured to use the latest version of a launch template A CloudOps Engineer must devise a solution that centrally manages the application logs and retains the logs for no more than 90 days. Which solution will meet these requirements?

  • ALaunch an Amazon Machine Image (AMI) that is preconfigured with the Amazon CloudWatch Logs agent to send logs to an Amazon S3 bucket. Apply a 90-day S3 Lifecycle policy on the S3 bucket to expire the application logs.
  • BLaunch an Amazon Machine Image (AMI) that is preconfigured with the Amazon CloudWatch Logs agent to send logs to a log group. Create an Amazon EventBridge (Amazon CloudWatch Events) scheduled rule to perform an instance refresh every 90 days.
  • CUpdate the launch template user data to install and configure the Amazon CloudWatch Logs agent to send logs to a log group. Configure the retention period on the log group to be 90 days.
  • DUpdate the launch template user data to install and configure the Amazon CloudWatch Logs agent to send logs to a log group. Set the log rotation configuration of the EC2 instances to 90 days.
  Tampilkan jawaban
• #93

  A recent audit found that most resources belonging to the development team were in violation of patch compliance standards The resources were properly tagged. Which service should be used to quickly remediate the issue and bring the resources back into compliance?

  • AAWS Config.
  • BAmazon Inspector.
  • CAWS Trusted Advisor.
  • DAWS Systems Manager.
  Tampilkan jawaban
• #94

  A company runs its applications on a large number of Amazon EC2 instances. A CloudOps Engineer must implement a solution to notify the operations team whenever an EC2 instance state changes. What is the MOST operationally efficient solution that meets these requirements?

  • ACreate a script that captures instance state changes and publishes a notification to an Amazon Simple Notification Service (Amazon SNS) topic. Use AWS Systems Manager Run Command to run the script on all EC2 instances.
  • BCreate an Amazon EventBridge event rule that captures EC2 instance state changes. Set an Amazon Simple Notification Service (Amazon SNS) topic as the target.
  • CCreate an Amazon EventBridge event rule that captures EC2 instance state changes. Set as the target an AWS Lambda function that publishes a notification to an Amazon Simple Notification Service (Amazon SNS) topic.
  • DCreate an AWS Config custom rule that evaluates instance state changes with automatic remediation. Use the rule to invoke an AWS Lambda function that publishes a notification to an Amazon Simple Notification Service (Amazon SNS) topic.
  Tampilkan jawaban
• #95

  A CloudOps Engineer is responsible for the security of a company's AWS account. The company has a policy that a user may stop or terminate Amazon EC2 instances only when the user is authenticated by using a multi-factor authentication (MFA) device. Which policy should the CloudOps Engineer apply to meet this requirement?

  • AOption A.
  • BOption B.
  • COption C.
  • DOption D.
  Tampilkan jawaban
• #96

  A CloudOps Engineer needs to configure automatic rotation for Amazon RDS database credentials. The credentials must rotate every 30 days. The solution must integrate with Amazon RDS. Which solution will meet these requirements with the LEAST operational overhead?

  • AStore the credentials in AWS Systems Manager Parameter Store as a secure string. Configure automatic rotation with a rotation interval of 30 days.
  • BStore the credentials in AWS Secrets Manager. Configure automatic rotation with a rotation interval of 30 days.
  • CStore the credentials in a file in an Amazon S3 bucket. Deploy an AWS Lambda function to automatically rotate the credentials every 30 days.
  • DStore the credentials in AWS Secrets Manager. Deploy an AWS Lambda function to automatically rotate the credentials every 30 days.
  Tampilkan jawaban
• #97

  A CloudOps Engineer is using AWS Systems Manager Patch Manager to patch a fleet of Amazon EC2 instances. The CloudOps Engineer has configured a patch baseline and a maintenance window. The CloudOps Engineer also has used an instance tag to identify which instances to patch. The CloudOps Engineer must give Systems Manager the ability to access the EC2 instances. Which additional action must the CloudOps Engineer perform to meet this requirement?

  • AAdd an inbound rule to the instances' security group.
  • BAttach an IAM instance profile with access to Systems Manager to the instances.
  • CCreate a Systems Manager activation Then activate the fleet of instances.
  • DManually specify the instances to patch Instead of using tag-based selection.
  Tampilkan jawaban
• #98

  A CloudOps Engineer is setting up a fleet of Amazon EC2 instances in an Auto Scaling group for an application. The fleet should have 50% CPU available at that times to accommodate bursts of traffic. The load will increase significantly between the hours of 09:00 and 17:00, 7 days a week. How should the CloudOps Engineer configure the scaling of the EC2 instances to meet these requirements?

  • ACreate a target tracking scaling policy that runs when the CPU utilization is higher than 90%.
  • BCreate a target tracking scaling policy that runs when the CPU utilization is higher than 50%. Create a scheduled scaling policy that ensures that the fleet is available at 09:00. Create a second scheduled scaling policy that scales in the fleet at 17:00.
  • CSet the Auto Scaling group to start with 2 instances by setting the desired instances maximum instances, and minimum instances to 2. Create a scheduled scaling policy that ensures that the fleet is available at 09:00.
  • DCreate a scheduled scaling policy that ensures that the fleet is available at 09.00. Create a second scheduled scaling policy that scales in the fleet at 17:00.
  Tampilkan jawaban
• #99

  A company's financial department needs to view the cost details of each project in an AWS account. A CloudOps Engineer must perform the initial configuration that is required to view cost for each project in Cost Explorer. Which solution will meet this requirement?

  • AActivate cost allocation tags. Add a project tag to the appropriate resources.
  • BConfigure consolidated billing. Create AWS Cost and Usage Reports.
  • CUse AWS Budgets. Create AWS Budgets reports.
  • DUse cost categories to define custom groups that are based on AWS cost and usage dimensions.
  Tampilkan jawaban
• #100

  An Amazon EC2 instance needs to be reachable from the internet. The EC2 instance is in a subnet with the following route table. Which entry must a CloudOps Engineer add to the route table to meet this requirement?

  • AA route for 0.0.0.0/0 that points to a NAT gateway.
  • BA route for 0.0.0.0/0 that points to an egress-only internet gateway.
  • CA route for 0.0.0.0/0 that points to an internet gateway.
  • DA route for 0.0.0.0/0 that points to an elastic network interface.
  Tampilkan jawaban

Ingin melacak skor, mengikuti ujian simulasi berwaktu, dan mendapat penjelasan AI? Buat akun gratis