AWS Certified SysOps Administrator - Associate Questions and Answers (Dumps and Practice Questions)

Question : A user is displaying the CPU utilization, and Network in and Network out CloudWatch metrics data of a single instance on the same graph. The
graph uses one Y-axis for CPU utilization and Network in and another Y-axis for Network out. Since Network in is too high, the CPU utilization
data is not visible clearly on graph to the user. How can the data be viewed better on the same graph?

1. It is not possible to show multiple metrics with the different units on the same graph
2. Add a third Y-axis with the console to show all the data in proportion
3. Access Mostly Uused Products by 50000+ Subscribers
4. Change the units of CPU utilization so it can be shown in proportion with Network


Correct Answer : Get Lastest Questions and Answer :

Explanation: Amazon CloudWatch provides the functionality to graph the metric data generated either by the AWS services or the custom metric to make it
easier for the user to analyse. It is possible to show the multiple metrics with different units on the same graph. If the graph is not plotted properly
due to a difference in the unit data over two metrics, the user can change the Y-axis of one of the graph by selecting that graph and clicking on the
Switch option.





Question :

When stopping an EC2 classic instance, which ONE is true?


1. Ephemeral storage is lost.
2. An attached Elastic IP Address is detached from the instance.
3. Access Mostly Uused Products by 50000+ Subscribers
4. None of the above


Correct Answer : Get Lastest Questions and Answer :

Explanation: When you stop a running instance, the following happens:

The instance performs a normal shutdown and stops running; its status changes to stopping and then stopped.

Any Amazon EBS volumes remain attached to the instance, and their data persists.

Any data stored in the RAM of the host computer or the instance store volumes of the host computer is gone.

EC2-Classic: We release the public and private IP addresses for the instance when you stop the instance, and assign new ones when you restart it.

EC2-VPC: The instance retains its private IP addresses when stopped and restarted. We release the public IP address and assign a new one when you restart it.

EC2-Classic: We disassociate any Elastic IP address (EIP) that's associated with the instance. You're charged for Elastic IP addresses that aren't associated with an instance. When
you restart the instance, you must associate the Elastic IP address with the instance; we don't do this automatically.

EC2-VPC: The instance retains its associated Elastic IP addresses (EIP). You're charged for any Elastic IP addresses associated with a stopped instance.

When you stop and restart a Windows instance, by default, we change the instance host name to match the new IP address and initiate a reboot. By default, we also change the drive
letters for any attached Amazon EBS volumes.

If you've registered the instance with a load balancer, it's likely that the load balancer won't be able to route traffic to your instance after you've stopped and restarted it. You
must de-register the instance from the load balancer after stopping the instance, and then re-register after starting the instance.




Question : An EBS volume can be attached to more than one instance at a time.

1. True
2. False

Correct Answer : Get Lastest Questions and Answer :
No, this is like using a hard drive in two computers.

If you want shared data, you can setup a server that all your instances can access. If you are wanting a simple storage area for all your instances, you can use Amazon's S3 storage
service to store data that is distributed and scalable.

Moving to the cloud, you can have the exact same setup, but you can possibly replace the fileserver with S3, or have all your instances connect to your fileserver.

Related Questions

---

Question : An organization Account ID . has attached the below mentioned IAM policy to a user. What does this policy statement entitle the
user to perform?
{
"Version": "2012-10-17",
"Statement": [{
"Sid": "AllowUsersAllActionsForCredentials",
"Effect": "Allow",
"Action": [
"iam:*LoginProfile",
"iam:*AccessKey*",
"iam:*SigningCertificate*"
],
"Resource": ["arn:aws:iam:: 123412341234:user/${aws:username}"]
}]
}


1. The policy allows the IAM user to modify all IAM user's credentials using the console, SDK, CLI or APIs
2. The policy will give an invalid resource error
3. Access Mostly Uused Products by 50000+ Subscribers
4. The policy allows the user to modify all IAM user's password, sign in certificates and access keys
using only CLI, SDK or APIs



Question : . A sys admin is trying to understand the sticky session algorithm. Please select the correct sequence of steps, both when the cookie is present and
when it is not, to help the admin understand the implementation of the sticky session:

1. ELB inserts the cookie in the response
2. ELB chooses the instance based on the load balancing algorithm
3. Access Mostly Uused Products by 50000+ Subscribers
4. The cookie is found in the request
5. The cookie is not found in the request


1. 3,1,4,2 [Cookie is not Present] & 3,1,5,2 [Cookie is Present]
2. 3,4,1,2 [Cookie is not Present] & 3,5,1,2 [Cookie is Present]
3. Access Mostly Uused Products by 50000+ Subscribers
4. 3,2,5,4 [Cookie is not Present] & 3,2,4,5 [Cookie is Present]



Question :

A user has configured ELB with SSL using a security policy for secure negotiation between the client and load balancer. Which of the below
mentioned SSL protocols is not supported by the security policy?


1. TLS 1.3
2. TLS 1.2
3. Access Mostly Uused Products by 50000+ Subscribers
4. SSL 3.0


Question : A user has created a VPC with the public and private subnets using the VPC wizard. The VPC has CIDR
20.0.0.0/16. The public subnet uses CIDR 20.0.1.0/24. The user is planning to host a web server in the public subnet with port 80 and a DB server in
the private subnet with port 3306. The user is configuring a security group for the public subnet WebSecGrp and the private subnet DBSecGrp.
Which of the below mentioned entries is required in the private subnet database security group DBSecGrp.?

1. Allow Inbound on port 3306 for Source Web Server Security Group WebSecGrp.
2. Allow Inbound on port 3306 from source 20.0.0.0/16
3. Access Mostly Uused Products by 50000+ Subscribers
4. Allow Outbound on port 80 for Destination NAT Instance IP



Question : A user has created a VPC with CIDR .../ using the wizard. The user has created public and VPN only subnets along with hardware VPN
access to connect to the user's data centre. The user has not yet launched any instance as well as modified or deleted any setup. He wants to
delete this VPC from the console. Will the console allow the user to delete the VPC?

1. Yes, the console will delete all the setups and also delete the virtual private gateway
2. No, the console will ask the user to manually detach the virtual private gateway first and then allow deleting the VPC
3. Access Mostly Uused Products by 50000+ Subscribers
4. No, since the NAT instance is running



Question : What is the below cloudwatch command mean

Prompt>aws cloudwatch put-metric-alarm --alarm-name lb-mon --alarm-description "Alarm when Latency exceeds 100ms" --metric-name Latency
--namespace AWS/ELB --statistic Average --period 60 --threshold 100 --comparison-operator GreaterThanThreshold
--dimensions Name=LoadBalancerName,Value=my-server --evaluation-periods 3 --alarm-actions arn:aws:sns:us-east-1:1234567890:my-topic --unit Milliseconds


1. To send an Amazon Simple Notification Service email message when LoadBalancer Latency Exceeds 100 milliseconds and 100 times
2. To send an Amazon Simple Notification Service email message when LoadBalancer Latency Exceeds 100 milliseconds and 10 times
3. Access Mostly Uused Products by 50000+ Subscribers