AWS-SysOps Practice Test

AWS-SysOps Practice Test practice questions, page 31 of 38, with answer review and explanations.

Question 151

A user has created a VPC with CIDR 20.0.0.0/16. The user has created public and VPN only subnets along with hardware VPN access to connect to the user's datacenter. The user wants to make so that all traffic coming to the public subnet follows the organization's proxy policy. How can the user make this happen?

  1. Setting up a NAT with the proxy protocol and configure that the public subnet receives traffic from NAT
  2. Setting up a proxy policy in the internet gateway connected with the public subnet
  3. It is not possible to setup the proxy policy for a public subnet
  4. Setting the route table and security group of the public subnet which receives traffic from a virtual private gateway

Question 152

A user has created a VPC with CIDR 20.0.0.0/24. The user has created a public subnet with CIDR 20.0.0.0/25 and a private subnet with CIDR 20.0.0.128/25. The user has launched one instance each in the private and public subnets. Which of the below mentioned options cannot be the correct IP address (private IP. assigned to an instance in the public or private subnet?

  1. 20.0.0.255
  2. 20.0.0.132
  3. 20.0.0.122
  4. 20.0.0.55

Question 153

A user has launched an EBS backed EC2 instance. The user has rebooted the instance. Which of the below mentioned statements is not true with respect to the reboot action?

  1. The private and public address remains the same
  2. The Elastic IP remains associated with the instance
  3. The volume is preserved
  4. The instance runs on a new host computer

Question 154

A user has setup a web application on EC2. The user is generating a log of the application performance at every second. There are multiple entries for each second. If the user wants to send that data to CloudWatch every minute, what should he do?

  1. The user should send only the data of the 60th second as CloudWatch will map the receive data timezone with the sent data timezone
  2. It is not possible to send the custom metric to CloudWatch every minute
  3. Give CloudWatch the Min, Max, Sum, and SampleCount of a number of every minute
  4. Calculate the average of one minute and send the data to CloudWatch

Question 155

An AWS root account owner is trying to create a policy to access RDS. Which of the below mentioned statements is true with respect to the above information?

  1. Create a policy which allows the users to access RDS and apply it to the RDS instances
  2. The user cannot access the RDS database if he is not assigned the correct IAM policy
  3. The root account owner should create a policy for the IAM user and give him access to the RDS services
  4. The policy should be created for the user and provide access for RDS