Download AWS-SYSOPS Dumps Questions & Answers - AWS-SYSOPS Dumps| RealExamDumps

Question No 1 

A company website hosts patches for software that is sold globally. The website runs in AWS and performs well until a large software patch is released. The flood of downloads puts a strain on the web servers and leads to a poor customer experience. What can the SysOps Administrate propose to enhance customer experience, create a more available web platform and keep costs low?

A. Use an Amazon CloudFront distribution to cache static content including software patches.
B. Increase the size of the NAT instance to improve throughput.
C. Scale out the web servers in advance of patch releases to reduce Auto Scaling delays.
D. Move the content to IO1 and provision additional IOPS to the volume that contains the software patches.

Answer: A


Question No 2 

The InfoSec team has asked the SysOps Administrator to perform some hardening on the company Amazon RDS database instances. Based on this requirement, what actions should be recommended for the start of the security review? (Select TWO)

A. Use Amazon Inspector to present a detailed report of security vulnerabilities across the RDS database fleet
B. Review the security groups' inbound access rules for least privilege
C. Export AWS CloudTrail entries detailing all SSH activity on the RDS instances
D. Use the cat command to enumerate the allowed SSH keys in -/ ssh on each RDS instance
E. Report on the Parameter Group settings and ensure that encrypted connections are enforced

Answer: B, E


Question No 3 

A SysOps Administrator must provide data to show the overall usage of Amazon EC2 instances within each department, and must determine if the purchased Reserved instances are being used effectively. Which service should be used to provide the necessary information?

A. AWS Personal Health Dashboard
B. AWS Cost Explorer
C. AWS Service Catalog
D. AWS Application Discovery Service

Answer: B


Question No 4 

An organization an Amazon Elastic File System (Amazon EFS) volume with a file system ID of fs85ba41fc,and it is actively used by 10 EC2 Amazon EC2 hosts. The organization has become concerned that the system is not encrypted. How can this be resolved?

A. Enable encryption on each host's connection to the Amazon EFS volume Each connection must be recreated for encryption to take effect
B. Enable encryption on the existing EFS volume by using the AWS Command Line Interface.
C. Enable encryption on each host's local drive Restart each host to encrypt the drive
D. Enable encryption on a newly created volume and copy all data from the original volume Reconnect each host to the new volume.

Answer: D


Question No 5 

A company wants to ensure that each operation within their own isolated environment, and that they are only able to use pre-approved services. How can this requirement be met?

A. Set up an AWS Organization to create accounts for each department and apply service control policies to control access to AWS services.
B. Create 1AM roles for each department, and set policies that grant access to specific AWS services.
C. Use the AWS Service Catalog to create catalogs of AWS services that are approved for use by each department.
D. Request that each department create and manage its own AWS account and the resources within it.

Answer: A


Question No 6 

An organization finds that a high number of gps Amazon EBS volumes are running out of space. Which solution will provides the LEAST description with MINIMAL effort?

A. Create a snapshot and restore it to a larger gp2 volume.
B. Create a RAID 0 with another new gp2 volume to increase capacity.
C. Leverage the Elastic Volumes feature of EBS to increase gp2 volume size.
D. Write a script to migrate data to larger gp2 volume.

Answer: C

Question No 7 

A SysOps administrator has been tasked with deploying a company’s infrastructure as code. The administrator wants to write a single template that can be reused for multiple environment in a safe, repeatable manner. What is the recommended way to use AWS CloudFormation to meet this requirement?

A. Use parameters to provision the resources.
B. Use nested stacks to provision the resources.
C. Use Amazon EC2 user data to provision the resources.
D. Use stack policies to provision the resources.

Answer: A


Question No 8 

A SysOps Administrator notices a scale-up event for an Amazon Scaling group. Amazon CloudWatch shows a spike in the RequestCount metric for the associated Application Loader Balancer. The Administrator would like to know the IP address for the source of the requests. Where can the Administrator find this information?

A. Elastic Load Balancer access logs
B. AWS CloudTrail logs
C. Auto Scaling logs
D. EC2 instance logs

Answer: A


Question No 9 

An application access data through a file system interface. The application runs on Amazon EC2 instance in multiple availability Zones, all of which must share the same data. While the amount of data is currently small, the company that it will grow to tens of terabytes over the lifetime of the application. What is the MOST scalable storage solution to full this requirement?

A. Connect a large Amazon EBS volume to multiple instances and schedule snapshots.
B. Deploy Amazon EFS in the VPC and create mount targets in multiple subnets.
C. Launch an EC2 instance and share data using SMB/QFS or NFS.
D. Deploy an AWS Storage Gateway cached volume on Amazon EC2.

Answer: B


Question No 10 

A company's application stores documents within on Amazon S3 bucket .The application is running on Amazon EC2 m a VPC. A recent change m security requirements states that traffic between the company's application and the S3 bucket must never leave the Amazon network. What AWS feature can provide this functionality?

A. Security groups
B. NAT gateways
C. Virtual private gateway
D. Gateway VPC endpoints

Answer: D