AWS Certified CloudOps Engineer - Associate

• #201

  An organization created an Amazon Elastic File System (Amazon EFS) volume with a file system ID of fs-85ba41fc, and it is actively used by 10 Amazon EC2 hosts. The organization has become concerned that the file system is not encrypted. How can this be resolved?

  • AEnable encryption on each host's connection to the Amazon EFS volume. Each connection must be recreated for encryption to take effect.
  • BEnable encryption on the existing EFS volume by using the AWS Command Line Interface.
  • CEnable encryption on each host's local drive. Restart each host to encrypt the drive.
  • DEnable encryption on a newly created volume and copy all data from the original volume. Reconnect each host to the new volume.
  Tampilkan jawaban
• #202

  A CloudOps Engineer is responsible for managing a fleet of Amazon EC2 instances. These EC2 instances upload build artifacts to a third-party service. The third-party service recently implemented a strict IP allow list that requires all build uploads to come from a single IP address. What change should the systems engineer make to the existing build fleet to comply with this new requirement?

  • AMove all of the EC2 instances behind a NAT gateway and provide the gateway IP address to the service.
  • BMove all of the EC2 instances behind an internet gateway and provide the gateway IP address to the service.
  • CMove all of the EC2 instances into a single Availability Zone and provide the Availability Zone IP address to the service.
  • DMove all of the EC2 instances to a peered VPC and provide the VPC IP address to the service.
  Tampilkan jawaban
• #203

  A company has attached the following policy to an IAM user. Which of the following actions are allowed for the IAM user?

  • AAmazon RDS DescribeDBInstances action in the us-east-1 Region.
  • BAmazon S3 Putobject operation in a bucket named testbucket.
  • CAmazon EC2 DescribeInstances action in the us-east-1 Region.
  • DAmazon EC2 AttachNetworkinterface action in the eu-west-1 Region.
  Tampilkan jawaban
• #204

  A company has an application that runs on a fleet of Amazon EC2 instances behind an Elastic Load Balancer. The instances run in an Auto Scaling group. The application's performance remains consistent throughout most of each day. However, an increase in user traffic slows the performance during the same 4-hour period of time each day. What is the MOST operationally efficient solution that will resolve this issue?

  • AConfigure a second Elastic Load Balancer in front of the Auto Scaling group with a weighted routing policy.
  • BConfigure the fleet of EC2 instances to run on larger instance types to support the increase in user traffic.
  • CCreate a scheduled scaling action to scale out the number of EC2 instances shortly before the increase in user traffic occurs.
  • DManually add a few more EC2 instances to the Auto Scaling group to support the increase in user traffic.
  Tampilkan jawaban
• #205

  A database is running on an Amazon RDS Multi-AZ DB instance. A recent security audit found the database to be out of compliance because it was not encrypted. Which approach will resolve the encryption requirement?

  • ALog in to the RDS console and select the encryption box to encrypt the database.
  • BCreate a new encrypted Amazon EBS volume and attach it to the instance.
  • CEncrypt the standby replica in the secondary Availability Zone and promote it to the primary instance.
  • DTake a snapshot of the RDS instance, copy and encrypt the snapshot, and then restore to the new RDS instance.
  Tampilkan jawaban
• #206

  A CloudOps Engineer needs to deploy an application in multiple AWS Regions. The CloudOps Engineer must implement a solution that routes users to the Region with the lowest latency. In case of failure, the solution must automatically route requests to a Region with a healthy instance of the application. The company needs a solution with the shortest time to failover. Which solution will meet these requirements?

  • ACreate Amazon Route 53 A records that have the same name for each endpoint. Use a latency routing policy. Associate a health check with each record.
  • BCreate Amazon Route 53 A records that have the same name for each endpoint. Use a failover routing policy. Associate a health check with each record.
  • CCreate an AWS Global Accelerator standard accelerator. Create an endpoint group for each Region. Add a listener to the accelerator. Associate the endpoint group with the listener.
  • DCreate Amazon Route 53 A records that have the same name for each endpoint. Use a geolocation routing policy. Associate a health check with each record.
  Tampilkan jawaban
• #207

  A company runs an application on Amazon EC2 instances that are in an Amazon EC2 Auto Scaling group. Scale-out actions take a long time to become complete because of long-running boot scripts. A CloudOps Engineer must implement a solution to reduce the required time for scale-out actions without overprovisioning the Auto Scaling group. Which solution will meet these requirements?

  • AChange the launch configuration to use a larger instance size.
  • BIncrease the minimum number of instances in the Auto Scaling group.
  • CAdd a predictive scaling policy to the Auto Scaling group.
  • DAdd a warm pool to the Auto Scaling group.
  Tampilkan jawaban
• #208Pilih 2

  A company has a stateful web application that is hosted on Amazon EC2 instances in an Auto Scaling group. The instances run behind an Application Load Balancer (ALB) that has a single target group. The ALB is configured as the origin in an Amazon CloudFront distribution. Users are reporting random logouts from the web application. Which combination of actions should a CloudOps Engineer take to resolve this problem? (Select TWO.)

  • AChange to the least outstanding requests algorithm on the ALB target group.
  • BConfigure cookie forwarding in the CloudFront distribution cache behavior.
  • CConfigure header forwarding in the CloudFront distribution cache behavior.
  • DEnable group-level stickiness on the ALB listener rule.
  • EEnable sticky sessions on the ALB target group.
  Tampilkan jawaban
• #209Pilih 2

  A CloudOps Engineer has an AWS CloudFormation template of the company's existing infrastructure in us-west-2. The Engineer attempts to use the template to launch a new stack in eu-west-1, but the stack only partially deploys, receives an error message, and then rolls back. Why would this template fail to deploy? (Select TWO.)

  • AThe template referenced an IAM user that is not available in eu-west-1.
  • BThe template referenced an Amazon Machine Image (AMI) that is not available in eu-west-1.
  • CThe template did not have the proper level of permissions to deploy the resources.
  • DThe template requested services that do not exist in eu-west-1.
  • ECloudFormation templates can be used only to update existing services.
  Tampilkan jawaban
• #210

  A company is supposed to receive a data file every hour in an Amazon S3 bucket. A S3 event notification invokes an AWS Lambda function each time a file arrives. The function processes the data for use by an application. The application team notices that sometimes the file does not arrive. The application team wants to receive a notification whenever the file does not arrive. What is the MOST operationally efficient solution that meets these requirements?

  • AAdd a S3 Lifecycle rule on the S3 bucket with a scope that is limited to objects that were created in the last hour. Configure another S3 event notification to be invoked by the lifecycle transition when the number of objects transitioned is zero. Publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to notify the application team.
  • BConfigure another S3 event notification to invoke a Lambda function that posts a message to an Amazon Simple Queue Service (Amazon SQS) queue. Create an Amazon CloudWatch alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to notify the application team when the ApproximateAgeOfOldestMessage metric of the queue is greater than 1 hour.
  • CCreate an Amazon CloudWatch alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to alert the application team when the Invocations metric of the Lambda function is zero for an hour. Configure the alarm to treat missing data as breaching.
  • DCreate a new Lambda function to get the timestamp of the newest file in the S3 bucket. If the timestamp is more than 1 hour ago, publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to notify the application team. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke the new function hourly.
  Tampilkan jawaban
• #211

  A company has an application that runs only on Amazon EC2 Spot Instances. The instances run in an Amazon EC2 Auto Scaling group with scheduled scaling actions. However, the capacity does not always increase at the scheduled times, and instances terminate many times a day. A CloudOps Engineer must ensure that the instances launch on time and have fewer interruptions. Which action will meet these requirements?

  • ASpecify the capacity-optimized allocation strategy for Spot Instances. Add more instance types to the Auto Scaling group.
  • BSpecify the capacity-optimized allocation strategy for Spot Instances. Increase the size of the instances in the Auto Scaling group.
  • CSpecify the lowest-price allocation strategy for Spot Instances. Add more instance types to the Auto Scaling group.
  • DSpecify the lowest-price allocation strategy for Spot Instances. Increase the size of the instances in the Auto Scaling group.
  Tampilkan jawaban
• #212Pilih 2

  A company has an existing web application that runs on two Amazon EC2 instances behind an Application Load Balancer (ALB) across two Availability Zones. The application uses an Amazon RDS Multi-AZ DB Instance. Amazon Route 53 record sets route requests for dynamic content to the load balancer and requests for static content to an Amazon S3 bucket. Site visitors are reporting extremely long loading times. Which actions should be taken to improve the performance of the website? (Select TWO)

  • AAdd Amazon CloudFront caching for static content.
  • BChange the load balancer listener from HTTPS to TCP.
  • CEnable Amazon Route 53 latency-based routing.
  • DImplement Amazon EC2 Auto Scaling for the web servers.
  • EMove the static content from Amazon S3 to the web servers.
  Tampilkan jawaban
• #213

  A company's backend infrastructure contains an Amazon EC2 instance in a private subnet. The private subnet has a route to the internet through a NAT gateway in a public subnet. The instance must allow connectivity to a secure web server on the internet to retrieve data at regular intervals. The client software times out with an error message that indicates that the client software could not establish the TCP connection. What should a CloudOps Engineer do to resolve this error?

  • AAdd an inbound rule to the security group for the EC2 instance with the following parameters: Type – HTTP, Source – 0.0.0.0/0.
  • BAdd an inbound rule to the security group for the EC2 instance with the following parameters: Type – HTTPS, Source – 0.0.0.0/0.
  • CAdd an outbound rule to the security group for the EC2 instance with the following parameters: Type – HTTP, Destination – 0.0.0.0/0.
  • DAdd an outbound rule to the security group for the EC2 instance with the following parameters: Type – HTTPS. Destination – 0.0.0.0/0.
  Tampilkan jawaban
• #214

  A company is uploading important files as objects to Amazon S3. The company needs to be informed if an object is corrupted during the upload. What should a CloudOps Engineer do to meet this requirement?

  • APass the Content-Disposition value as a request body during the object upload.
  • BPass the Content-MD5 value as a request header during the object upload.
  • CPass x-amz-object-lock-mode as a request header during the object upload.
  • DPass x-amz-server-side-encryption-customer-algorithm as a request body during the object upload.
  Tampilkan jawaban
• #215

  A CloudOps Engineer is setting up an automated process to recover an Amazon EC2 instance In the event of an underlying hardware failure. The recovered instance must have the same private IP address and the same Elastic IP address that the original instance had. The SysOps team must receive an email notification when the recovery process is initiated. Which solution will meet these requirements?

  • ACreate an Amazon CloudWatch alarm for the EC2 instance, and specify the SiatusCheckFailedjnstance metric. Add an EC2 action to the alarm to recover the instance. Add an alarm notification to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the SysOps team email address to the SNS topic.
  • BCreate an Amazon CloudWatch alarm for the EC2 Instance, and specify the StatusCheckFailed_System metric. Add an EC2 action to the alarm to recover the instance. Add an alarm notification to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the SysOps team email address to the SNS topic.
  • CCreate an Auto Scaling group across three different subnets in the same Availability Zone with a minimum, maximum, and desired size of 1. Configure the Auto Seating group to use a launch template that specifies the private IP address and the Elastic IP address. Add an activity notification for the Auto Scaling group to send an email message to the SysOps team through Amazon Simple Email Service (Amazon SES).
  • DCreate an Auto Scaling group across three Availability Zones with a minimum, maximum, and desired size of 1. Configure the Auto Scaling group to use a launch template that specifies the private IP address and the Elastic IP address. Add an activity notification for the Auto Scaling group to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the SysOps team email address to the SNS topic.
  Tampilkan jawaban
• #216

  A CloudOps Engineer is unable to authenticate an AWS CLI call to an AWS service. Which of the following is the cause of this issue?

  • AThe IAM password is incorrect.
  • BThe server certificate is missing.
  • CThe SSH key pair is incorrect.
  • DThere is no access key.
  Tampilkan jawaban
• #217

  A company is planning to host its stateful web-based applications on AWS. A CloudOps Engineer is using an Auto Scaling group of Amazon EC2 instances. The web applications will run 24 hours a day, 7 days a week throughout the year. The company must be able to change the instance type within the same instance family later in the year based on the traffic and usage patterns. Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?

  • AConvertible Reserved Instances.
  • BOn-Demand Instances.
  • CSpot Instances.
  • DStandard Reserved Instances.
  Tampilkan jawaban
• #218

  A company has a stateless application that is hosted on a fleet of 10 Amazon EC2 On-Demand Instances in an Auto Scaling group. A minimum of 6 instances are needed to meet service requirements. Which action will maintain uptime for the application MOST cost-effectively?

  • AUse a Spot Fleet with an On-Demand capacity of 6 instances.
  • BUpdate the Auto Scaling group with a minimum of 6 On-Demand Instances and a maximum of 10 On-Demand Instances.
  • CUpdate the Auto Scaling group with a minimum of 1 On-Demand Instance and a maximum of 6 On-Demand Instances.
  • DUse a Spot Fleet with a target capacity of 6 instances.
  Tampilkan jawaban
• #219

  An application accesses data through a file system interface. The application runs on Amazon EC2 instances in multiple Availability Zones, all of which must share the same data. While the amount of data is currently small, the company anticipates that it will grow to tens of terabytes over the lifetime of the application. What is the MOST scalable storage solution to fulfill this requirement?

  • AConnect a large Amazon EBS volume to multiple instances and schedule snapshots.
  • BDeploy Amazon EFS in the VPC and create mount targets in multiple subnets.
  • CLaunch an EC2 instance and share data using SMB/CIFS or NFS.
  • DDeploy an AWS Storage Gateway cached volume on Amazon EC2.
  Tampilkan jawaban
• #220

  A CloudOps Engineer is investigating issues on an Amazon RDS for MariaDB DB instance. The CloudOps Engineer wants to display the database load categorized by detailed wait events. How can the CloudOps Engineer accomplish this goal?

  • ACreate an Amazon CloudWatch dashboard.
  • BEnable Amazon RDS Performance Insights.
  • CEnable and configure Enhanced Monitoring.
  • DReview the database logs in Amazon CloudWatch Logs.
  Tampilkan jawaban

Ingin melacak skor, mengikuti ujian simulasi berwaktu, dan mendapat penjelasan AI? Buat akun gratis