Get Valid AWS-Certified-SysOps-Administrator Dumps PDF for Simple Good results | RealExamDumps

Question No 1 

A company website hosts patches for software that is sold globally. The website runs in AWS and performs well until a large software patch is released. The flood of downloads puts a strain on the web servers and leads to a poor customer experience. What can the SysOps Administrate propose to enhance customer experience, create a more available web platform and keep costs low?

A. Use an Amazon CloudFront distribution to cache static content including software patches.
B. Increase the size of the NAT instance to improve throughput.
C. Scale out the web servers in advance of patch releases to reduce Auto Scaling delays.
D. Move the content to IO1 and provision additional IOPS to the volume that contains the software patches.

Answer: A


Question No 2 

The InfoSec team has asked the SysOps Administrator to perform some hardening on the company Amazon RDS database instances. Based on this requirement, what actions should be recommended for the start of the security review? (Select TWO)

A. Use Amazon Inspector to present a detailed report of security vulnerabilities across the RDS database fleet
B. Review the security groups' inbound access rules for least privilege
C. Export AWS CloudTrail entries detailing all SSH activity on the RDS instances
D. Use the cat command to enumerate the allowed SSH keys in -/ ssh on each RDS instance
E. Report on the Parameter Group settings and ensure that encrypted connections are enforced

Answer: B, E


Question No 3 

A SysOps Administrator must provide data to show the overall usage of Amazon EC2 instances within each department, and must determine if the purchased Reserved instances are being used effectively. Which service should be used to provide the necessary information?

A. AWS Personal Health Dashboard
B. AWS Cost Explorer
C. AWS Service Catalog
D. AWS Application Discovery Service

Answer: B


Question No 4 

A company wants to ensure that each operation within their own isolated environment, and that they are only able to use pre-approved services. How can this requirement be met?

A. Set up an AWS Organization to create accounts for each department and apply service control policies to control access to AWS services.
B. Create 1AM roles for each department, and set policies that grant access to specific AWS services.
C. Use the AWS Service Catalog to create catalogs of AWS services that are approved for use by each department.
D. Request that each department create and manage its own AWS account and the resources within it.

Answer: A


Question No 5 

An organization finds that a high number of gps Amazon EBS volumes are running out of space. Which solution will provides the LEAST description with MINIMAL effort?

A. Create a snapshot and restore it to a larger gp2 volume.
B. Create a RAID 0 with another new gp2 volume to increase capacity.
C. Leverage the Elastic Volumes feature of EBS to increase gp2 volume size.
D. Write a script to migrate data to larger gp2 volume.

Answer: C


Question No 6 

After installing and configuring the Amazon CloudWatch agent on an EC2 instance, the anticipated system logs are not received by CloudWatch Logs. Which of the following are likely to be the cause of this problem? (Select TWO.)

A. A custom or third-party solution for logs is being used.
B. The IAM role attached to the EC2 instance does not have the proper permissions.
C. The CloudWatch agent does not support the operating system used.
D. A billing constraint is limiting the number of CloudWatch Logs within this account.
E. The EC2 instance is in a private subnet, and the VPC does not have a NAT gateway.

Answer: C, E


Question No 7 

A SysOps administrator has been tasked with deploying a company’s infrastructure as code. The administrator wants to write a single template that can be reused for multiple environment in a safe, repeatable manner. What is the recommended way to use AWS CloudFormation to meet this requirement?

A. Use parameters to provision the resources.
B. Use nested stacks to provision the resources.
C. Use Amazon EC2 user data to provision the resources.
D. Use stack policies to provision the resources.

Answer: A


Question No 8 

A SysOps Administrator notices a scale-up event for an Amazon Scaling group. Amazon CloudWatch shows a spike in the RequestCount metric for the associated Application Loader Balancer. The Administrator would like to know the IP address for the source of the requests. Where can the Administrator find this information?

A. Elastic Load Balancer access logs
B. AWS CloudTrail logs
C. Auto Scaling logs
D. EC2 instance logs

Answer: A


Question No 9 

An Amazon S3 bucket in a SysOps administrator account can be accessed by users in other AWS accounts. How can the Administrator ensure that the bucket is only accessible to members of the Administrator’s AWS account?

A. Move the S3 bucket from a public subnet to a private subnet in the Amazon VPC
B. Change the bucket access control list (ACL) to restrict access to the bucket owner
C. Enable server-side encryption for all objects in the bucket
D. Use only Amazon S3 per signed URLs for accessing objects in the bucket

Answer: D


Question No 10 

An organization would like to set up an option for its Developers to receive an email whenever production Amazon EC2 instances are funning over 80% CPU utilization. How can this be accomplished using an Amazon CloudWatch alarm?

A. Configure the alarm to send emails to subscribers using Amazon SES
B. Configure the alarm to send emails to subscribers using Amazon SNS
C. Configure the alarm to send emails to subscribers using Amazon Inspector.
D. Configure the alarm to send emails to subscribers using Amazon Cognito.

Answer: B