Aws Sysops PDF
Aws Sysops PDF
Aws Sysops PDF
Enrolling now you will get access to 582 questions in a unique set of AWS
SysOps dumps
Question 1
You are currently hosting multiple applications in a VPC and have logged numerous port scans coming in
from a specific IP address block. Your security team has requested that all access from the offending IP
address block be denied for the next 24 hours.
Which of the following is the best method to quickly and temporarily deny access from the specified IP
address block?
Options:
A. Create an AD policy to modify Windows Firewall settings on all hosts in the VPC to deny access
from
B. Modify the Network ACLs associated with all public subnets in the VPC to deny access from the
IP
address block
C. Add a rule to all of the VPC 5 Security Groups to deny access from the IP address block
D. Modify the Windows Firewall settings on all Amazon Machine Images (AMIs) that your
organization
Answer: B
Explanation:
Explanation:
http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_SecurityGroups.html
Question 2
https://www.certification-questions.com
Amazon AWS SysOps
When preparing for a compliance assessment of your system built inside of AWS. what are three best-
practices for you to prepare for an audit? (Choose three.)
Options:
B. Request and obtain applicable third-party audited AWS compliance reports and certifications
C. Request and obtain a compliance and security tour of an AWS data center for a pre-
assessment
security review
D. Request and obtain approval from AWS to perform relevant network scans and in-depth
penetration
E. Schedule meetings with AWS's third-party auditors to provide evidence of AWS compliance that
maps
Answer: A, B, D
Question 3
You have started a new job and are reviewing your company's infrastructure on AWS You notice one web
application where they have an Elastic Load Balancer (&B) in front of web instances in an Auto Scaling
Group When you check the metrics for the ELB in CloudWatch you see four healthy instances in
Availability Zone (AZ) A and zero in AZ B There are zero unhealthy instances.
What do you need to fix to balance the instances across AZs?
Options:
D. Make sure the maximum size of the Auto Scaling Group is greater than 4
Answer: B
Question 4
You have been asked to leverage Amazon VPC BC2 and SOS to implement an application that submits
https://www.certification-questions.com
Amazon AWS SysOps
and receives millions of messages per second to a message queue. You want to ensure your application
has sufficient bandwidth between your EC2 instances and SQS
Which option will provide the most scalable solution for communicating between the application and SQS?
Options:
A. Ensure the application instances are properly configured with an Elastic Load Balancer
B. Ensure the application instances are launched in private subnets with the EBS-optimized option
enabled
C. Ensure the application instances are launched in public subnets with the associate-public-IP-
D. Launch application instances in private subnets with an Auto Scaling group and Auto Scaling
triggers
Answer: B
Explanation:
Explanation:
http://www.cardinalpath.com/autoscaling-your-website-with-amazon-web-services-part-2/
Question 5
You have identified network throughput as a bottleneck on your m1.small EC2 instance when uploading
data Into Amazon S3 In the same region.
How do you remedy this situation?
Options:
Answer: B
Explanation:
Explanation:
https://media.amazonwebservices.com/AWS_Amazon_EMR_Best_Practices.pdf
https://www.certification-questions.com
Amazon AWS SysOps
Question 6
When attached to an Amazon VPC which two components provide connectivity with external networks?
(Choose two.)
Options:
Answer: C, D
Question 7
Your application currently leverages AWS Auto Scaling to grow and shrink as load Increases/ decreases
and has been performing well Your marketing team expects a steady ramp up in traffic to follow an
upcoming campaign that will result in a 20x growth in traffic over 4 weeks Your forecast for the
approximate number of Amazon EC2 instances necessary to meet the peak demand is 175.
What should you do to avoid potential service disruptions during the ramp up in traffic?
Options:
A. Ensure that you have pre-allocated 175 Elastic IP addresses so that each server will be able to
obtain
one as it launches
B. Check the service limits in Trusted Advisor and adjust as necessary so the forecasted count
remains
within limits.
C. Change your Auto Scaling configuration to set a desired capacity of 175 prior to the launch of
the
marketing campaign
D. Pre-warm your Elastic Load Balancer to match the requests per second anticipated during peak
Answer: D
https://www.certification-questions.com
Amazon AWS SysOps
Question 8
Which two AWS services provide out-of-the-box user configurable automatic backup-as-a-service and
backup rotation options? (Choose two.)
Options:
A. Amazon S3
B. Amazon RDS
C. Amazon EBS
Answer: B, D
Question 9
An organization has configured a VPC with an Internet Gateway (IGW). pairs of public and private subnets
(each with one subnet per Availability Zone), and an Elastic Load Balancer (ELB) configured to use the
public subnets. The application s web tier leverages the ELB. Auto Scaling and a mum-AZ RDS database
instance The organization would like to eliminate any potential single points ft failure in this design.
What step should you take to achieve this organization's objective?
Options:
C. Create and configure a second Elastic Load Balancer to provide a redundant load balancer.
D. Create a second multi-AZ RDS instance in another Availability Zone and configure replication to
Answer: A
Question 10
Which of the following are characteristics of Amazon VPC subnets? (Choose two.)
Options:
C. Instances in a private subnet can communicate with the internet only if they have an Elastic IP.
D. By default, all subnets can route between each other, whether they are private or public
https://www.certification-questions.com
Amazon AWS SysOps
Answer: C, E
Would you like to see more? Don't miss our AWS SysOps
PDF file at:
https://www.certification-questions.com/amazon-pdf/aws-sysops-pdf.html
https://www.certification-questions.com