AWS-SysOps Practice Test

AWS-SysOps Practice Test practice questions, page 4 of 38, with answer review and explanations.

Question 16

You need to design a VPC for a web-application consisting of an Elastic Load Balancer (ELB). a fleet of web/application servers, and an RDS database. The entire Infrastructure must be distributed over 2 availability zones. Which VPC configuration works while assuring the database is not available from the Internet?

  1. One public subnet for ELB one public subnet for the web-servers, and one private subnet for the database
  2. One public subnet for ELB two private subnets for the web-servers, two private subnets for RDS
  3. Two public subnets for ELB two private subnets for the web-servers and two private subnets for RDS
  4. Two public subnets for ELB two public subnets for the web-servers, and two public subnets for RDS

Question 17

An application that you are managing has EC2 instances & Dynamo OB tables deployed to several AWS Regions in order to monitor the performance of the application globally, you would like to see two graphs: 1) Avg CPU Utilization across all EC2 instances 2) Number of Throttled Requests for all DynamoDB tables. How can you accomplish this?

  1. Tag your resources with the application name, and select the tag name as the dimension in the Cloudwatch Management console to view the respective graphs
  2. Use the Cloud Watch CLI tools to pull the respective metrics from each regional endpoint Aggregate the data offline & store it for graphing in CloudWatch.
  3. Add SNMP traps to each instance and DynamoDB table Leverage a central monitoring server to capture data from each instance and table Put the aggregate data into Cloud Watch for graphing.
  4. Add a CloudWatch agent to each instance and attach one to each DynamoDB table. When configuring the agent set the appropriate application name & view the graphs in CloudWatch.

Question 18

When assessing an organization s use of AWS API access credentials which of the following three credentials should be evaluated? (Choose three.)

  1. Key pairs
  2. Console passwords
  3. Access keys
  4. Signing certificates
  5. Security Group memberships

Question 19

You have a Linux EC2 web server instance running inside a VPC The instance is In a public subnet and has an EIP associated with it so you can connect to It over the Internet via HTTP or SSH The instance was also fully accessible when you last logged in via SSH. and was also serving web requests on port 80. Now you are not able to SSH into the host nor does it respond to web requests on port 80 that were working fine last time you checked You have double-checked that all networking configuration parameters (security groups route tables. IGW'EIP. NACLs etc) are properly configured {and you haven't made any changes to those anyway since you were last able to reach the Instance). You look at the EC2 console and notice that system status check shows "impaired." Which should be your next step in troubleshooting and attempting to get the instance back to a healthy state so that you can log in again?

  1. Stop and start the instance so that it will be able to be redeployed on a healthy host system that most likely will fix the "impaired" system status
  2. Reboot your instance so that the operating system will have a chance to boot in a clean healthy state that most likely will fix the 'impaired" system status
  3. Add another dynamic private IP address to me instance and try to connect via mat new path, since the networking stack of the OS may be locked up causing the ג€impairedג€ system status.
  4. Add another Elastic Network Interface to the instance and try to connect via that new path since the networking stack of the OS may be locked up causing the "impaired" system status
  5. un-map and then re-map the EIP to the instance, since the IGWVNAT gateway may not be working properly, causing the "impaired" system status

Question 20

What is a placement group?

  1. A collection of Auto Scaling groups in the same Region
  2. Feature that enables EC2 instances to interact with each other via nigh bandwidth, low latency connections
  3. A collection of Elastic Load Balancers in the same Region or Availability Zone
  4. A collection of authorized Cloud Front edge locations for a distribution