AWS Certified CloudOps Engineer - Associate

• #121

  A CloudOps Engineer is designing a solution for an Amazon RDS for PostgreSQL DB instance. Database credentials must be stored and rotated monthly. The applications that connect to the DB instance send write-intensive traffic with variable client connections that sometimes increase significantly in a short period of time. Which solution should a CloudOps Engineer choose to meet these requirements?

  • AConfigure AWS Key Management Service (AWS KMS) to automatically rotate the keys for the DB instance. Use RDS Proxy to handle the increases in database connections.
  • BConfigure AWS Key Management Service (AWS KMS) to automatically rotate the keys for the DB instance. Use RDS read replicas to handle the increases in database connections.
  • CConfigure AWS Secrets Manager to automatically rotate the credentials for the DB instance. Use RDS Proxy to handle the increases in database connections.
  • DConfigure AWS Secrets Manager to automatically rotate the credentials for the DB instance. Use RDS read replicas to handle the increases in database connections.
  Tampilkan jawaban
• #122

  A web application accepts orders from online users and places the orders into an Amazon SQS queue. Amazon EC2 instances in an EC2 Auto Scaling group read the messages from the queue, process the orders, and email order confirmations to the users. The Auto Scaling group scales up and down based on the queue depth. At the beginning of each business day, users report confirmation emails are delayed. What action will address this issue?

  • ACreate a scheduled scaling action to scale up in anticipation of the traffic.
  • BChange the Auto Scaling group to scale up and down based on CPU utilization.
  • CChange the launch configuration to launch larger EC2 instance types.
  • DModify the scaling policy to deploy more EC2 instances when scaling up.
  Tampilkan jawaban
• #123

  A company runs workloads on 90 Amazon EC2 instances in the eu-west-1 Region in an AWS account. In 2 months, the company will migrate the workloads from eu-west-1 to the eu-west-3 Region. The company needs to reduce the cost of the EC2 instances. The company is willing to make a 1-year commitment that will begin next week. The company must choose an EC2 Instance purchasing option that will provide discounts for the 90 EC2 Instances regardless of Region during the 1-year period. Which solution will meet these requirements?

  • APurchase EC2 Standard Reserved Instances.
  • BPurchase an EC2 Instance Savings Plan.
  • CPurchase EC2 Convertible Reserved Instances.
  • DPurchase a Compute Savings Plan.
  Tampilkan jawaban
• #124

  A CloudOps Engineer must set up notifications for whenever combined billing exceeds a certain threshold for all AWS accounts within a company. The Engineer has set up AWS Organizations and enabled Consolidated Billing. Which additional steps must the Engineer perform to set up the billing alerts?

  • AIn the payer account: Enable billing alerts in the Billing and Cost Management console; publish an Amazon SNS message when the billing alert triggers.
  • BIn each account: Enable billing alerts in the Billing and Cost Management console; set up a billing alarm in Amazon CloudWatch; publish an SNS message when the alarm triggers.
  • CIn the payer account: Enable billing alerts in the Billing and Cost Management console; set up a billing alarm in the Billing and Cost Management console to publish an SNS message when the alarm triggers.
  • DIn the payer account: Enable billing alerts in the Billing and Cost Management console; set up a billing alarm in Amazon CloudWatch; publish an SNS message when the alarm triggers.
  Tampilkan jawaban
• #125

  A company has an internal web application that runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto Scaling group in a single Availability Zone. A CloudOps Engineer must make the application highly available. Which action should the CloudOps Engineer take to meet this requirement?

  • AIncrease the maximum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.
  • BIncrease the minimum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.
  • CUpdate the Auto Scaling group to launch new instances in a second Availability Zone in the same AWS Region.
  • DUpdate the Auto Scaling group to launch new instances in an Availability Zone in a second AWS Region.
  Tampilkan jawaban
• #126

  A company is running an application on a group of Amazon EC2 instances behind an Application Load Balancer. The EC2 instances run across three Availability Zones. The company needs to provide the customers with a maximum of two static IP addresses for their applications. How should a CloudOps Engineer meet these requirement?

  • AAdd AWS Global Accelerator in front of the Application Load Balancer.
  • BAdd an internal Network Load Balancer behind the Application Load Balancer.
  • CConfigure the Application Load Balancer in only two Availability Zones.
  • DCreate two Elastic IP addresses and assign them to the Application Load Balancer.
  Tampilkan jawaban
• #127Pilih 3

  A CloudOps Engineer is responsible for more than 50 Amazon EC2 instances that are deployed in a single production AWS account. The EC2 instances are running several different operating systems. The company's standards require patching to be completed at least once a month. The CloudOps Engineer wants to use AWS Systems Manager to reduce the number of hours the company spends on operating system patching each month. Which combination of steps should the CloudOps Engineer take to meet these requirements? (Choose three.)

  • AGroup similar EC2 instances together into resource groups by using AWS Resource Groups.
  • BCreate a schedule in Systems Manager Patch Manager. Specify the appropriate resource group as the target.
  • CSpecify Systems Manager Automation runbooks to patch the operating systems. Register the runbooks as tasks in the maintenance window. Specify the appropriate resource group as the target.
  • DCreate a Systems Manager Automation runbook to monitor and control the state of the patches required. Apply the runbook to Systems Manager Patch Manager.
  • ECreate a single Systems Manager maintenance window for each resource group.
  • FConfigure Systems Manager Fleet Manager to apply a Systems Manager Automation runbook to the appropriate resource group.
  Tampilkan jawaban
• #128

  A CloudOps Engineer manages policies for many AWS member accounts in an AWS Organizations structure. Engineers on other teams have access to the account root user credentials of the member accounts. The CloudOps Engineer must prevent all teams, including their administrators, from using Amazon DynamoDB. The solution must not affect the ability of the teams to access other AWS services. Which solution will meet these requirements?

  • AIn all member accounts, configure IAM policies that deny access to all DynamoDB resources for all users, including the root user.
  • BCreate a Service Control Policy (SCP) in the management account to deny all DynamoDB actions. Apply the SCP to the root of the organization.
  • CIn all member accounts, configure IAM policies that deny AmazonDynamoDBFullAccess to all users, including the root user.
  • DRemove the default Service Control Policy (SCP) in the management account. Create a replacement SCP that includes a single statement that denies all DynamoDB actions.
  Tampilkan jawaban
• #129

  A company is setting up a VPC peering connection between its VPC and a customer's VPC. The company VPC is an IPv4 CIDR block of 172.16.0.0/16, and the customer's is an IPv4 CIDR block of 10.0.0.0/16. The CloudOps Engineer wants to be able to ping the customer's database private IP address from one of the company's Amazon EC2 instances. What action should be taken to meet the requirements?

  • AEnsure that both accounts are linked and are part of consolidated billing to create a file sharing network, and then enable VPC peering.
  • BEnsure that both VPC owners manually add a route to the VPC route tables that points to the IP address range of the other VPC.
  • CInstruct the customer to set up a VPC with the same IPv4 CIDR block as that of the source VPC: 172.16.0.0/16.
  • DInstruct the customer to create a virtual private gateway to link the two VPC's.
  Tampilkan jawaban
• #130

  A company has multiple Amazon EC2 instances that run a resource-intensive application in a development environment. A CloudOps Engineer is implementing a solution to stop these EC2 instances when they are not in use. Which solution will meet this requirement?

  • AAssess AWS CloudTrail logs to verify that there is no EC2 API activity. Invoke an AWS Lambda function to stop the EC2 instances.
  • BCreate an Amazon CloudWatch alarm to stop the EC2 instances when the average CPU utilization is lower than 5% for a 30-minute period.
  • CCreate an Amazon CloudWatch metric to stop the EC2 instances when the VolumeReadBytes metric is lower than 500 for a 30-minute period.
  • DUse AWS Config to invoke an AWS Lambda function to stop the EC2 instances based on resource configuration changes.
  Tampilkan jawaban
• #131

  A CloudOps Engineer is reviewing VPC Flow Logs to troubleshoot connectivity issues in a VPC. While reviewing the logs, the CloudOps Engineer notices that rejected traffic is not listed. What should the CloudOps Engineer do to ensure that all traffic is logged?

  • ACreate a new flow log that has a filter setting to capture all traffic.
  • BCreate a new flow log. Set the log record format to a custom format. Select the proper fields to include in the log.
  • CEdit the existing flow log. Change the filter setting to capture all traffic.
  • DEdit the existing flow log. Set the log record format to a custom format. Select the proper fields to include in the log.
  Tampilkan jawaban
• #132

  A company asks a CloudOps Engineer to ensure that AWS CloudTrail files are not tampered with after they are created. Currently, the company uses AWS Identity and Access Management (IAM) to restrict access to specific trails. The company's security team needs the ability to trace the integrity of each file. What is the MOST operationally efficient solution that meets these requirements?

  • ACreate an Amazon EventBridge (Amazon CloudWatch Events) rule that invokes an AWS Lambda function when a new file is delivered. Configure the Lambda function to compute an MD5 hash check on the file and store the result in an Amazon DynamoDB table. The security team can use the values that are stored in DynamoDB to verify the integrity of the delivered files.
  • BCreate an AWS Lambda function that is invoked each time a new file is delivered to the CloudTrail bucket. Configure the Lambda function to compute an MD5 hash check on the file and store the result as a tag in an Amazon S3 object. The security team can use the information in the tag to verify the integrity of the delivered files.
  • CEnable the CloudTrail file integrity feature on an Amazon S3 bucket. Create an IAM policy that grants the security team access to the file integrity logs that are stored in the S3 bucket.
  • DEnable the CloudTrail file integrity feature on the trail. The security team can use the digest file that is created by CloudTrail to verify the integrity of the delivered files.
  Tampilkan jawaban
• #133

  A CloudOps Engineer configured VPC flow logs by using the default format. The CloudOps Engineer specified Amazon CloudWatch Logs as the destination. This solution has worked successfully for several months. However, because of additional troubleshooting requirements, the CloudOps Engineer needs to include the tcp-flags field on the flow logs. What should the CloudOps Engineer do to meet this requirement?

  • ACreate a new flow log. Include the tcp-flags field in the custom log format. Delete the original flow log.
  • BIn the CloudWatch Logs log group, modify the filter to include the tcp-flags field and the type field.
  • CIn CloudWatch Metrics, modify the metric configuration to include the tcp-flags field.
  • DModify the existing flow log. Include the tcp-flags field and the type field in the custom log format. Save the configuration.
  Tampilkan jawaban
• #134

  A CloudOps Engineer is responsible for a legacy CPU-heavy application. The application can only be scaled vertically. Currently, the application is deployed on a single t2 large Amazon EC2 instance. The system is showing 90% CPU usage and significant performance latency after a few minutes. What change should be made to alleviate the performance problem?

  • AChange the Amazon EBS volume to Provisioned IOPS.
  • BUpgrade to a compute-optimized instance.
  • CAdd additional t2.large instances to the application.
  • DPurchase Reserved Instances.
  Tampilkan jawaban
• #135

  A user has created a VPC with public and private subnets using the VPC wizard. Which of the below mentioned statements is true in this scenario?

  • AThe AWS VPC will automatically create a NAT instance with the micro size.
  • BVPC bounds the main route table with a private subnet and a custom route table with a public subnet.
  • CThe user has to manually create a NAT instance.
  • DVPC bounds the main route table with a public subnet and a custom route table with a private subnet.
  Tampilkan jawaban
• #136

  A CloudOps Engineer is maintaining an application that runs on Amazon EC2 instances behind an Application Load Balancer (ALB). Users are reporting errors when attempting to launch the application. The Engineer notices an increase in the HTTPCode_ELB_5xx_Count Amazon CloudWatch metric for the load balancer. What is a possible cause for this increase?

  • AThe ALB is associated with private subnets within the VPC.
  • BThe ALB received a request from a client, but the client closed the connection.
  • CThe ALB security group is not configured to allow inbound traffic from the users.
  • DThe ALB target group does not contain healthy EC2 instances.
  Tampilkan jawaban
• #137

  An organization is running multiple applications for their customers. Each application is deployed by running a base AWS CloudFormation template that configures a new VPC. All applications are run in the same AWS account and AWS Region. A CloudOps Engineer has noticed that when trying to deploy the same AWS CloudFormation stack, it fails to deploy. What is likely to be the problem?

  • AThe Amazon Machine image used is not available in that region.
  • BThe AWS CloudFormation template needs to be updated to the latest version.
  • CThe VPC configuration parameters have changed and must be updated in the template.
  • DThe account has reached the default limit for VPC's allowed.
  Tampilkan jawaban
• #138

  A company's reporting job that used to run in 15 minutes is now taking an hour to run. An application generates the reports. The application runs on Amazon EC2 instances and extracts data from an Amazon RDS for MySQL database. A CloudOps Engineer checks the Amazon CloudWatch dashboard for the RDS instance and notices that the Read IOPS metrics are high, even when the reports are not running. The CloudOps Engineer needs to improve the performance and the availability of the RDS instance. Which solution will meet these requirements?

  • AConfigure an Amazon ElastiCache cluster in front of the RDS instance. Update the reporting job to query the ElastiCache cluster.
  • BDeploy an RDS read replica. Update the reporting job to query the reader endpoint.
  • CCreate an Amazon CloudFront distribution. Set the RDS instance as the origin. Update the reporting job to query the CloudFront distribution.
  • DIncrease the size of the RDS instance.
  Tampilkan jawaban
• #139Pilih 2

  A CloudOps Engineer is attempting to deploy resources by using an AWS CloudFormation template. An Amazon EC2 instance that is defined in the template fails to launch and produces an InsufficientInstanceCapacity error. Which actions should the CloudOps Engineer take to resolve this error? (Choose two.)

  • ACreate a separate AWS CloudFormation template for the EC2 instance.
  • BModify the AWS CloudFormation template to not specify an Availability Zone for the EC2 instance.
  • CModify the AWS CloudFormation template to use a different EC2 instance type.
  • DUse a different Amazon Machine Image (AMI) for the EC2 instance.
  • EUse the AWS CLI's validate-template command before creating a stack from the template.
  Tampilkan jawaban
• #140

  A CloudOps Engineer needs to automate the invocation of an AWS Lambda function. The Lambda function must run at the end of each day to generate a report on data that is stored in an Amazon S3 bucket. What is the MOST operationally efficient solution that meets these requirements?

  • ACreate an Amazon EventBridge (Amazon CloudWatch Events) rule that has an event pattern for Amazon S3 and the Lambda function as a target.
  • BCreate an Amazon EventBridge (Amazon CloudWatch Events) rule that has a schedule and the Lambda function as a target.
  • CCreate a S3 event notification to invoke the Lambda function whenever objects change in the S3 bucket.
  • DDeploy an Amazon EC2 instance with a cron job to invoke the Lambda function.
  Tampilkan jawaban

Ingin melacak skor, mengikuti ujian simulasi berwaktu, dan mendapat penjelasan AI? Buat akun gratis