Free Assessment: AWS Certified SysOps Administrator – Associate Quiz Part 2

Which of the following two characteristics Amazon EBS snapshot have?

A user runs the command “dd if=/dev/zero of=/dev/xvdf bs=1M” on a fresh blank EBS
volume attached to a Linux instance. Which of the below mentioned activities is the user
performing with the command given above?

A user has provisioned 2000 IOPS to the EBS volume. The application hosted on that
EBS is experiencing less IOPS than provisioned. Which of the below mentioned options
does not affect the IOPS of the volume?

f you want to add more availability zones to existing ELB and you want to perform
this activity from CLI. Which of the below mentioned command helps the system admin
to add new zones to the existing ELB?

you have configured ELB with Auto Scaling. You have suspended the Auto Scaling
AddToLoadBalancer (which adds instances to the load balancer). process for a while.
What will happen to the instances launched during the suspension period?

If you configured an HTTPS listener on an ELB but you have not configured any
security policy which help to negotiate SSL between the ELB and Client. What will ELB
do in this scenario?

Chef turns infrastructure into code.

y default, a Load Balancer routes each request independently to the registered
instance with the smallest load.

Which of the following is NOT one of the four areas of the performance efficiency
pillar?

There are two types of sticky session.

It is possible to share an AMI between regions by default, State whether True or
False?

Select the feature in S3 that helps replicates data across AWS regions. Choose an answer
from the options below

In five regions around the globe your website is hosted in 10 EC2 instances How could
you configure your site to maintain availability with minimum downtime if one of the five
regions was to lose network connectivity for an extended period?

The user requests to restore the archive after 6 months and has moved an object to
Glacier using the life cycle rules. When the restore request is completed the user accesses
that archive. Which of the below mentioned statements is not true in this condition?

A storage admin wants to encrypt all the objects stored in S3 using server side
encryption. The user does not want to use the AES 256 encryption key provided by S3.
How can the user achieve this?

ou are planning to deploy a production database to EC2 and need to choose the best
storage type. You anticipate that you will need 20,000 IOPS, and an average of 8,000 –
10,000 IOPS. What storage medium should you choose?

Which AWS-specific storage option would you set up for low cost, reliability, and
security? If a company is setting up an application that is used to share files. Because
these files are important to the sales team, the application must be highly available.

The user requests to restore the archive after 6 months and has moved an object
to Glacier using the life cycle rules. When the restore request is completed the user
accesses that archive. Which of the below mentioned statements is not true in this
condition?

If you want to optimize performance for a compute cluster that requires low internode latency, which feature in the following list should you use?

The term pilot light is often used to describe a DR scenario in which a minimal version
of an environment is always running in the cloud

Which of the below mentioned AWS RDS logs cannot be viewed from the console for
MySQL?

Select the below services is a fully managed MySQL Solution from AWS. Choose
an answer from the options below

Select the feature in S3 that helps replicates data across AWS regions. Choose an
answer from the options below

Which AWS-specific storage option would you set up for low cost, reliability, and
security? If a company is setting up an application that is used to share files. Because these
files are important to the sales team, the application must be highly available

to restrict access to data in S3 Which features can be used? Choose the 3 correct
answers from the options below

Which of the following are steps you should take in securing your Root AWS account?
(Choose 3)

IAM policies are written using ________.

Which of the following is AWS’ managed DDoS protection service?

You need to use an AWS service to assess the security and compliance of your EC2
instances. Which of the following services should you use?

Under the Shared Responsibility model, for which of the following does AWS not
assume responsibility?

The AWS Risk and Compliance Program is made up of which of the following
components? (Choose 3)

How would a system administrator add an additional layer of login security to a user’s
AWS Management Console?

True or False: The Standard version of AWS Shield offers automated application (layer
7) traffic monitoring.

Which of the below mentioned statements is not true with respect to the limitations
of IAM if an organization is planning to create a user with IAM. They are trying to
understand the limitations of IAM so that they can plan accordingly.

If you configured an HTTPS listener on an ELB but you have not configured any
security policy which help to negotiate SSL between the ELB and Client. What will ELB
do in this scenario?

A user has configured ELB with SSL using a security policy for secure negotiation
between the client and load balancer. Which of the below mentioned security policies is
supported by ELB?

A storage admin wants to encrypt all the objects stored in S3 using server side
encryption. The user does not want to use the AES 256 encryption key provided by S3.
How can the user achieve this?

An organization is trying to create various IAM users. Which of the below mentioned
options is not a valid IAM username?

The user is using server side encryption for data at rest and has enabled versioning
on an S3 bucket If the user is supplying his own keys for encryption (SSE-C), what is
recommended to the user for the purpose of security?

To restrict access to data in S3 Which features can be used? Choose the 3 correct
answers from the options below.

You need to implement an automated service that will scan your AWS environment
with the goal of both improving security and reducing costs. Which service should you use?

Which of the following is true about security groups? (Choose 2)

Which of the following cloud security controls ensures that only authorized and
authenticated users are able to access your resources?

Which of the following is NOT considered a fault tolerant tool?

True or False: Identity Access Management (IAM) is a Regional service.

A user has launched an instance in that subnet and has created a VPC with a public
subnet and a security group. The user is still unable to connect to the instance. The internet
gateway has also been created and attached to the route table. What can be the reason for
the error?

Can you delete a subnet which has instances in it?

A user has created a VPC with public and private subnets using the VPC wizard. The
user has not launched any instance manually and is trying to delete the VPC. What will
happen in this scenario?

To send traffic to a secondary host in the event that the primary host went down
What would we need to attach to a Bastion host or NAT host for high availability? Chose
the correct answer

Which AWS-specific storage option would you set up for low cost, reliability, and
security? If a company is setting up an application that is used to share files. Because
these files are important to the sales team, the application must be highly available.