AWS SysOps-A | Practice Quiz 02

Question 1 of 61

1. Question

A user is accessing RDS from an application. The user has enabled the Multi AZ feature with the MS SQL RDS DB. During a planned outage how will AWS ensure that a switch from DB to a standby replica will not affect access to the application?

RDS will have an internal IP which will redirect all requests to the new DB
RDS uses DNS to switch over to standby replica for seamless transition
The switch over changes Hardware so RDS does not need to worry about access
RDS will have both the DBs running independently and the user has to manually switch over

Question 2 of 61

2. Question

A user is planning to setup infrastructure on AWS for the Christmas sales. The user is planning to use Auto Scaling based on the schedule for proactive scaling. What advise would you give to the user?

It is good to schedule now because if the user forgets later on it will not scale up
The scaling should be setup only one week before Christmas
Wait till end of November before scheduling the activity
It is not advisable to use scheduled based scaling

Question 3 of 61

3. Question

A user is trying to understand the ACL and policy for an S3 bucket. Which of the below mentioned policy permissions is equivalent to the WRITE ACL on a bucket?

s3:GetObjectAcl
s3:GetObjectVersion
s3:ListBucketVersions
s3:DeleteObject

Question 4 of 61

4. Question

An application is generating a log file every 5 minutes. The log file is not critical but may be required only for verification in case of some major issue. The file should be accessible over the internet whenever required. Which of the below mentioned options is a best possible storage solution for it?

AWS S3
AWS Glacier
AWS RDS
AWS S3 RRS

Question 5 of 61

5. Question

A user is trying to connect to a running EC2 instance using SSH. However, the user gets a connection time out error. Which of the below mentioned options is not a possible reason for rejection?

The access key to connect to the instance is wrong
The security group is not configured properly
The private key used to launch the instance is not correct
The instance CPU is heavily loaded

Question 6 of 61

6. Question

A user is planning to use AWS Cloudformation. Which of the below mentioned functionalities does not help him to correctly understand Cloudfromation?

Cloudformation follows the DevOps model for the creation of Dev & Test.
AWS CloudFormation does not charge the user for its service but only charges for the AWS resources created with it.
CloudFormation works with a wide variety of AWS services, such as EC2, EBS, VPC, IAM, S3, RDS, ELB, etc
CloudFormation provides a set of application bootstrapping scripts which enable the user to install Software.

Question 7 of 61

7. Question

A user wants to disable connection draining on an existing ELB. Which of the below mentioned statements helps the user disable connection draining on the ELB?

The user can only disable connection draining from CLI
It is not possible to disable the connection draining feature once enabled
The user can disable the connection draining feature from EC2 -> ELB console or from CLI
The user needs to stop all instances before disabling connection draining

Question 8 of 61

8. Question

You are managing the AWS account of a big organization. The organization has more than 1000+ employees and they want to provide access to the various services to most of the employees. Which of the below mentioned options is the best possible solution in this case?

The user should create a separate IAM user for each employee and provide access to them as per the policy
The user should create an IAM role and attach STS with the role. The user should attach that role to the EC2 instance and setup AWS authentication on that server
The user should create IAM groups as per the organization’s departments and add each user to the group for better access control
Attach an IAM role with the organization’s authentication service to authorize each user for various AWS services

Question 9 of 61

9. Question

A user has created a VPC with CIDR 20.0.0.0/16 using the wizard. The user has created a public subnet CIDR (20.0.0.0/24) and VPN only subnets CIDR (20.0.1.0/24) along with the VPN gateway (vgw-12345) to connect to the user’s data centre. Which of the below mentioned options is a valid entry for the main route table in this scenario?

Destination: 20.0.0.0/24 and Target: vgw-12345
Destination: 20.0.0.0/16 and Target: ALL
Destination: 20.0.1.0/16 and Target: vgw-12345
Destination: 0.0.0.0/0 and Target: vgw-12345

Question 10 of 61

10. Question

A user has configured an Auto Scaling group with ELB. The user has enabled detailed CloudWatch monitoring on Auto Scaling. Which of the below mentioned statements will help the user understand the functionality better?

It is not possible to setup detailed monitoring for Auto Scaling
In this case, Auto Scaling will send data every minute and will charge the user extra
Detailed monitoring will send data every minute without additional charges
Auto Scaling sends data every minute only and does not charge the user

Question 11 of 61

11. Question

An organization is generating digital policy files which are required by the admins for verification. Once the files are verified they may not be required in the future unless there is some compliance issue. If the organization wants to save them in a cost effective way, which is the best possible solution?

AWS RRS
AWS S3
AWS RDS
AWS Glacier

Question 12 of 61

12. Question

A user has created a VPC with CIDR 20.0.0.0/16 with only a private subnet and VPN connection using the VPC wizard. The user wants to connect to the instance in a private subnet over SSH. How should the user define the security rule for SSH?

Allow Inbound traffic on port 22 from the user’s network
The user has to create an instance in EC2 Classic with an elastic IP and configure the security group of a private subnet to allow SSH from that elastic IP
The user can connect to a instance in a private subnet using the NAT instance
Allow Inbound traffic on port 80 and 22 to allow the user to connect to a private subnet over the Internet

Question 13 of 61

13. Question

A system admin is managing buckets, objects and folders with AWS S3. Which of the below mentioned statements is true and should be taken in consideration by the sysadmin?

Folders support only ACL
Both the object and bucket can have an Access Policy but folder cannot have policy
Folders can have a policy
Both the object and bucket can have ACL but folders cannot have ACL

Question 14 of 61

14. Question

A user has created an ELB with the availability zone US-East-1. The user wants to add more zones to ELB to achieve High Availability. How can the user add more zones to the existing ELB?

It is not possible to add more zones to the existing ELB
Only option is to launch instances in different zones and add to ELB
The user should stop the ELB and add zones and instances as required
The user can add zones on the fly from the AWS console

Question 15 of 61

15. Question

A user has developed an application, which is required to send the data to a NoSQL database. The user wants to decouple the data sending such that the application keeps processing and sending data but does not wait for an acknowledgement of DB. Which of the below mentioned applications helps in this scenario?

AWS Simple Notification Service
AWS Simple Workflow
AWS Simple Queue Service
AWS Simple Query Service

Question 16 of 61

16. Question

A user has setup an EBS backed instance and a CloudWatch alarm when the CPU utilization is more than 65%. The user has setup the alarm to watch it for 5 periods of 5 minutes each. The CPU utilization is 60% between 9 AM to 6 PM. The user has stopped the EC2 instance for 15 minutes between 11 AM to 11:15 AM. What will be the status of the alarm at 11:30 AM?

Alarm
OK
Insufficient Data
Error

Question 17 of 61

17. Question

A user has received a message from the support team that an issue occurred 1 week back between 3 AM to 4 AM and the EC2 server was not reachable. The user is checking the CloudWatch metrics of that instance. How can the user find the data easily using the CloudWatch console?

The user can find the data by giving the exact values in the time Tab under CloudWatch metrics
The user can find the data by filtering values of the last 1 week for a 1 hour period in the Relative tab under CloudWatch metrics
It is not possible to find the exact time from the console. The user has to use CLI to provide the specific time
The user can find the data by giving the exact values in the Absolute tab under CloudWatch metrics

Question 18 of 61

18. Question

An organization is planning to create 5 different AWS accounts considering various security requirements. The organization wants to use a single payee account by using the consolidated billing option. Which of the below mentioned statements is true with respect to the above information?

Master (Payee) account will get only the total bill and cannot see the cost incurred by each account
Master (Payee) account can view only the AWS billing details of the linked accounts
It is not recommended to use consolidated billing since the payee account will have access to the linked accounts
Each AWS account needs to create an AWS billing policy to provide permission to the payee account

Question 19 of 61

19. Question

A user has created a VPC with CIDR 20.0.0.0/16. The user has created public and VPN only subnets along with hardware VPN access to connect to the user’s datacenter. The user wants to make so that all traffic coming to the public subnet follows the organization’s proxy policy. How can the user make this happen?

Setting up a NAT with the proxy protocol and configure that the public subnet receives traffic from NAT
Setting up a proxy policy in the internet gateway connected with the public subnet
It is not possible to setup the proxy policy for a public subnet
Setting the route table and security group of the public subnet which receives traffic from a virtual private gateway

Question 20 of 61

20. Question

A sysadmin is maintaining an application on AWS. The application is installed on EC2 and user has configured ELB and Auto Scaling. Considering future load increase, the user is planning to launch new servers proactively so that they get registered with ELB. How can the user add these instances with Auto Scaling?

Increase the desired capacity of the Auto Scaling group
Increase the maximum limit of the Auto Scaling group
Launch an instance manually and register it with ELB on the fly
Decrease the minimum limit of the Auto Scaling group

Question 21 of 61

21. Question

An admin is planning to monitor the ELB. Which of the below mentioned services does not help the admin capture the monitoring information about the ELB activity

ELB Access logs
ELB health check
CloudWatch metrics
ELB API calls with CloudTrail

Question 22 of 61

22. Question

An organization has created 5 IAM users. The organization wants to give them the same login ID but different passwords. How can the organization achieve this?

It is not possible to have the same login ID for multiple IAM users of the same account
The organization should create a separate login ID but give the IAM users the same alias so that each one can login with their alias
The organization should create various groups and add each user with the same login ID to different groups. The user can login with their own group ID
The organization should create each user in a separate region so that they have their own URL to login

Question 23 of 61

23. Question

A user has created an ELB with three instances. How many security groups will ELB create by default?

3
5
2
1

Question 24 of 61

24. Question

A user has created a photo editing software and hosted it on EC2. The software accepts requests from the user about the photo format and resolution and sends a message to S3 to enhance the picture accordingly. Which of the below mentioned AWS services will help make a scalable software with the AWS infrastructure in this scenario?

AWS Glacier
AWS Elastic Transcoder
AWS Simple Notification Service
AWS Simple Queue Service

Question 25 of 61

25. Question

A user is planning to evaluate AWS for their internal use. The user does not want to incur any charge on his account during the evaluation. Which of the below mentioned AWS services would incur a charge if used?

AWS S3 with 1 GB of storage
AWS micro instance running 24 hours daily
AWS ELB running 24 hours a day
AWS PIOPS volume of 10 GB size

Question 26 of 61

26. Question

A user is planning to use AWS CloudFormation for his automatic deployment requirements. Which of the below mentioned components are required as a part of the template?

Parameters
Outputs
Template version
Resources

Question 27 of 61

27. Question

A user has setup a billing alarm using CloudWatch for $200. The usage of AWS exceeded $200 after some days. The user wants to increase the limit from $200 to $400? What should the user do?

Create a new alarm of $400 and link it with the first alarm
It is not possible to modify the alarm once it has crossed the usage limit
Update the alarm to set the limit at $400 instead of $200
Create a new alarm for the additional $200 amount

Question 28 of 61

28. Question

A user has launched 10 instances from the same AMI ID using Auto Scaling. The user is trying to see the average CPU utilization across all instances of the last 2 weeks under the CloudWatch console. How can the user achieve this?

View the Auto Scaling CPU metrics
Aggregate the data over the instance AMI ID
The user has to use the CloudWatchanalyser to find the average data across instances
It is not possible to see the average CPU utilization of the same AMI ID since the instance ID is different

Question 29 of 61

29. Question

A user has launched an EC2 instance from an instance store backed AMI. The infrastructure team wants to create an AMI from the running instance. Which of the below mentioned steps will not be performed while creating the AMI?

Define the AMI launch permissions
Upload the bundled volume
Register the AMI
Bundle the volume

Question 30 of 61

30. Question

A user has created a queue named “queue2” in US-East region with AWS SQS. The user’s AWS account ID is 123456789012. If the user wants to perform some action on this queue, which of the below Queue URL should he use?

http://sqs.us-east-1.amazonaws.com/123456789012/queue2
http://sqs.amazonaws.com/123456789012/queue2
http://sqs. 123456789012.us-east-1.amazonaws.com/queue2
http://123456789012.sqs.us-east-1.amazonaws.com/queue2

Question 31 of 61

31. Question

An organization is planning to use AWS for 5 different departments. The finance department is responsible to pay for all the accounts. However, they want the cost separation for each account to map with the right cost centre. How can the finance department achieve this?

Create 5 separate accounts and make them a part of one consolidated billing
Create 5 separate accounts and use the IAM cross account access with the roles for better management
Create 5 separate IAM users and set a different policy for their access
Create 5 separate IAM groups and add users as per the department’s employees

Question 32 of 61

32. Question

A root AWS account owner is trying to understand various options to set the permission to AWS S3. Which of the below mentioned options is not the right option to grant permission for S3?

User Access Policy
S3 Object Policy
S3 Bucket Policy
S3 ACL

Question 33 of 61

33. Question

An organization is planning to use AWS for their production roll out. The organization wants to implement automation for deployment such that it will automatically create a LAMP stack, download the latest PHP installable from S3 and setup the ELB. Which of the below mentioned AWS services meets the requirement for making an orderly deployment of the software?

AWS Elastic Beanstalk
AWS Cloudfront
AWS Cloudformation
AWS DevOps

Question 34 of 61

34. Question

A user has launched an ELB which has 5 instances registered with it. The user deletes the ELB by mistake. What will happen to the instances?

ELB will ask the user whether to delete the instances or not
Instances will be terminated
ELB cannot be deleted if it has running instances registered with it
Instances will keep running

Question 35 of 61

35. Question

A user is running one instance for only 3 hours every day. The user wants to save some cost with the instance. Which of the below mentioned Reserved Instance categories is advised in this case?

The user should not use RI; instead only go with the on-demand pricing
The user should use the AWS high utilized RI
The user should use the AWS medium utilized RI
The user should use the AWS low utilized RI

Question 36 of 61

36. Question

A user has created a VPC with CIDR 20.0.0.0/24. The user has created a public subnet with CIDR 20.0.0.0/25. The user is trying to create the private subnet with CIDR 20.0.0.128/25. Which of the below mentioned statements is true in this scenario?

It will not allow the user to create the private subnet due to a CIDR overlap
It will allow the user to create a private subnet with CIDR as 20.0.0.128/25
This statement is wrong as AWS does not allow CIDR 20.0.0.0/25
It will not allow the user to create a private subnet due to a wrong CIDR range

Question 37 of 61

37. Question

A user has configured Elastic Load Balancing by enabling a Secure Socket Layer (SSL) negotiation configuration known as a Security Policy. Which of the below mentioned options is not part of this secure policy while negotiating the SSL connection between the user and the client?

SSL Protocols
Client Order Preference
SSL Ciphers
Server Order Preference

Question 38 of 61

38. Question

An organization has setup consolidated billing with 3 different AWS accounts. Which of the below mentioned advantages will organization receive in terms of the AWS pricing?

The consolidated billing does not bring any cost advantage for the organization
All AWS accounts will be charged for S3 storage by combining the total storage of each account
EC2 instances of each account will receive a total of 750*3 micro instance hours free
The free usage tier for all the 3 accounts will be 3 years and not a single year

Question 39 of 61

39. Question

A user has setup connection draining with ELB to allow in-flight requests to continue while the instance is being deregistered through Auto Scaling. If the user has not specified the draining time, how long will ELB allow in-flight requests traffic to continue?

600 seconds
3600 seconds
300 seconds
0 seconds

Question 40 of 61

40. Question

A user has created an S3 bucket which is not publicly accessible. The bucket is having thirty objects which are also private. If the user wants to make the objects public, how can he configure this with minimal efforts?

User should select all objects from the console and apply a single policy to mark them public
User can write a program which programmatically makes all objects public using S3 SDK
Set the AWS bucket policy which marks all objects as public
Make the bucket ACL as public so it will also mark all objects as public

Question 41 of 61

41. Question

A user is checking the CloudWatch metrics from the AWS console. The user notices that the CloudWatch data is coming in UTC. The user wants to convert the data to a local time zone. How can the user perform this?

In the CloudWatch dashboard the user should set the local timezone so that CloudWatch shows the data only in the local time zone
In the CloudWatch console select the local timezone under the Time Range tab to view the data as per the local timezone
The CloudWatch data is always in UTC; the user has to manually convert the data
The user should have send the local timezone while uploading the data so that CloudWatch will show the data only in the local timezone

Question 42 of 61

42. Question

A user has created a queue named “myqueue” with SQS. There are four messages published to queue, which are not received by the consumer yet. If the user tries to delete the queue, what will happen?

A user can never delete a queue manually. AWS deletes it after 30 days of inactivity on queue
It will delete the queue
It will initiate the delete but wait for four days before deleting until all messages are deleted automatically.
I t will ask user to delete the messages first

Question 43 of 61

43. Question

A customer is using AWS for Dev and Test. The customer wants to setup the Dev environment with CloudFormation. Which of the below mentioned steps are not required while using CloudFormation?

Create a stack
Configure a service
Create and upload the template
Provide the parameters configured as part of the template

Question 44 of 61

44. Question

A user has configured ELB with three instances. The user wants to achieve High Availability as well as redundancy with ELB. Which of the below mentioned AWS services helps the user achieve this for ELB?

Route 53
AWS Mechanical Turk
Auto Scaling
AWS EMR

Question 45 of 61

45. Question

A user has enabled the Multi AZ feature with the MS SQL RDS database server. Which of the below mentioned statements will help the user understand the Multi AZ feature better?

In a Multi AZ, AWS runs two DBs in parallel and copies the data asynchronously to the replica copy
In a Multi AZ, AWS runs two DBs in parallel and copies the data synchronously to the replica copy
In a Multi AZ, AWS runs just one DB but copies the data synchronously to the standby replica
AWS MS SQL does not support the Multi AZ feature

Question 46 of 61

46. Question

An organization is setting up programmatic billing access for their AWS account. Which of the below mentioned services is not required or enabled when the organization wants to use programmatic access?

Programmatic access
AWS bucket to hold the billing report
AWS billing alerts
Monthly Billing report

Question 47 of 61

47. Question

A user has stored data on an encrypted EBS volume. The user wants to share the data with his friend’s AWS account. How can user achieve this?

Create an AMI from the volume and share the AMI
Copy the data to an unencrypted volume and then share
Take a snapshot and share the snapshot with a friend
If both the accounts are using the same encryption key then the user can share the volume directly

Question 48 of 61

48. Question

A user is planning to setup notifications on the RDS DB for a snapshot. Which of the below mentioned event categories is not supported by RDS for this snapshot source type?

Backup
Creation
Deletion
Restoration

Question 49 of 61

49. Question

A user has created a web application with Auto Scaling. The user is regularly monitoring the application and he observed that the traffic is highest on Thursday and Friday between 8 AM to 6 PM. What is the best solution to handle scaling in this case?

Add a new instance manually by 8 AM Thursday and terminate the same by 6 PM Friday
Schedule Auto Scaling to scale up by 8 AM Thursday and scale down after 6 PM on Friday
Schedule a policy which may scale up every day at 8 AM and scales down by 6 PM
Configure a batch process to add a instance by 8 AM and remove it by Friday 6 PM

Question 50 of 61

50. Question

A user has launched an EC2 instance. The user is planning to setup the CloudWatch alarm. Which of the below mentioned actions is not supported by the CloudWatch alarm?

Notify the Auto Scaling launch config to scale up
Send an SMS using SNS
Notify the Auto Scaling group to scale down
Stop the EC2 instance

Question 51 of 61

51. Question

A root account owner has created an S3 bucket testmycloud. The account owner wants to allow everyone to upload the objects as well as enforce that the person who uploaded the object should manage the permission of those objects. Which is the easiest way to achieve this?

The root account owner should create a bucket policy which allows the IAM users to upload the object
The root account owner should create the bucket policy which allows the other account owners to set the object policy of that bucket
The root account should use ACL with the bucket to allow everyone to upload the object
The root account should create the IAM users and provide them the permission to upload content to the bucket

Question 52 of 61

52. Question

A user has setup a CloudWatch alarm on an EC2 action when the CPU utilization is above 75%. The alarm sends a notification to SNS on the alarm state. If the user wants to simulate the alarm action how can he achieve this?

Run activities on the CPU such that its utilization reaches above 75%
From the AWS console change the state to ‘Alarm’
The user can set the alarm state to ‘Alarm’ using CLI
Run the SNS action manually

Question 53 of 61

53. Question

An organization has added 3 of his AWS accounts to consolidated billing. One of the AWS accounts has purchased a Reserved Instance (RI) of a small instance size in the us-east-1a zone. All other AWS accounts are running instances of a small size in the same zone. What will happen in this case for the RI pricing?

Only the account that has purchased the RI will get the advantage of RI pricing
One instance of a small size and running in theus-east-1a zone of each AWS account will get the benefit of RI pricing
Any single instance from all the three accounts can get the benefit of AWS RI pricing if they are running in the same zone and are of the same size
If there are more than one instances of a small size running across multiple accounts in the same zone no one will get the benefit of RI

Question 54 of 61

54. Question

A user is trying to save some cost on the AWS services. Which of the below mentioned options will not help him save cost?

Delete the unutilized EBS volumes once the instance is terminated
Delete the AutoScaling launch configuration after the instances are terminated
Release the elastic IP if not required once the instance is terminated
Delete the AWS ELB after the instances are terminated

Question 55 of 61

55. Question

A user has enabled detailed CloudWatch metric monitoring on an Auto Scaling group. Which of the below mentioned metrics will help the user identify the total number of instances in an Auto Scaling group cluding pending, terminating and running instances?

GroupTotalInstances
GroupSumInstances
It is not possible to get a count of all the three metrics together. The user has to find the individual number of running, terminating and pending instances and sum it
GroupInstancesCount

Question 56 of 61

56. Question

A user is trying to configure the CloudWatch billing alarm. Which of the below mentioned steps should be performed by the user for the first time alarm creation in the AWS Account Management section?

Enable Receiving Billing Reports
Enable Receiving Billing Alerts
Enable AWS billing utility
Enable CloudWatch Billing Threshold

Question 57 of 61

57. Question

A sysadmin is trying to understand the Auto Scaling activities. Which of the below-mentioned processes is not performed by Auto Scaling?

Reboot Instance
Schedule Actions
Replace Unhealthy
Availability Zone Balancing

Question 58 of 61

58. Question

A user wants to make so that whenever the CPU utilization of the AWS EC2 instance is above 90%, the redlight of his bedroom turns on. Which of the below mentioned AWS services is helpful for this purpose?

AWS CloudWatch + AWS SES
AWS CloudWatch + AWS SNS
It is not possible to configure the light with the AWS infrastructure services
AWS CloudWatch and a dedicated software turning on the light

Question 59 of 61

59. Question

A user has launched an EBS backed EC2 instance. The user has rebooted the instance. Which of the below mentioned statements is not true with respect to the reboot action?

The private and public address remains the same
The Elastic IP remains associated with the instance
The volume is preserved
The instance runs on a new host computer

Question 60 of 61

60. Question

A user has created an ELB with Auto Scaling. Which of the below mentioned offerings from ELB helps the user to stop sending new requests traffic from the load balancer to the EC2 instance when the instance is being deregistered while continuing in-flight requests?

ELB sticky session
ELB deregistration check
ELB connection draining
ELB auto registration Off

Question 61 of 61

61. Question

A user is trying to setup a recurring Auto Scaling process. The user has setup one process to scale up every day at 8 am and scale down at 7 PM. The user is trying to setup another recurring process which scales up on the 1st of every month at 8 AM and scales down the same day at 7 PM. What will Auto Scaling do in this scenario

Auto Scaling will execute both processes but will add just one instance on the 1st
Auto Scaling will add two instances on the 1st of the month
Auto Scaling will schedule both the processes but execute only one process randomly
Auto Scaling will throw an error since there is a conflict in the schedule of two separate Auto Scaling Processes

AWS SysOps-A | Practice Quiz 02