AWS SysOps-A | Practice Quiz 03

Question 1 of 60

1. Question

An organization (Account ID 123412341234. has attached the below mentioned IAM policy to a user. What does this policy statement entitle the user to perform?
{
“Version”: “2012-10-17”,
“Statement”: [{
“Sid”: “AllowUsersAllActionsForCredentials”,
“Effect”: “Allow”,
“Action”: [
“iam:*LoginProfile”,
“iam:*AccessKey*”,
“iam:*SigningCertificate*”
],
“Resource”: [“arn:aws:iam:: 123412341234:user/${aws:username}”]
}]
}

The policy will give an invalid resource error
The policy allows the IAM user to modify all credentials using only the console
The policy allows the user to modify all IAM user’s password, sign in certificates and access keys using only CLI, SDK or APIs
The policy allows the IAM user to modify all IAM user’s credentials using the console, SDK, CLI or APIs

Question 2 of 60

2. Question

A user has setup a web application on EC2. The user is generating a log of the application performance at every second. There are multiple entries for each second. If the user wants to send that data to CloudWatch every minute, what should he do?

The user should send only the data of the 60th second as CloudWatch will map the receive data timezone with the sent data timezone
It is not possible to send the custom metric to CloudWatch every minute
Give CloudWatch the Min, Max, Sum, and SampleCount of a number of every minute
Calculate the average of one minute and send the data to CloudWatch

Question 3 of 60

3. Question

A user has launched an EBS backed instance. The user started the instance at 9 AM in the morning. Between 9 AM to 10 AM, the user is testing some script. Thus, he stopped the instance twice and restarted it. In the same hour the user rebooted the instance once. For how many instance hours will AWS charge the user?

3 hours
4 hours
2 hours
1 hour

Question 4 of 60

4. Question

A user has launched a large EBS backed EC2 instance in the US-East-1a region. The user wants to achieve Disaster Recovery (DR) for that instance by creating another small instance in Europe. How can the user achieve DR?

Copy the running instance using the “Instance Copy” command to the EU region
Create an AMI of the instance and copy the AMI to the EU region. Then launch the instance from the EU AMI
Copy the instance from the US East region to the EU region
Use the “Launch more like this” option to copy the instance from one region to another

Question 5 of 60

5. Question

A user has configured the Auto Scaling group with the minimum capacity as 3 and the maximum capacity as 5. When the user configures the AS group, how many instances will Auto Scaling launch?

3
0
5
2

Question 6 of 60

6. Question

A user has configured CloudWatch monitoring on an EBS backed EC2 instance. If the user has not attached any additional device, which of the below mentioned metrics will always show a 0 value?

DiskReadBytes
NetworkIn
NetworkOut
CPUUtilization

Question 7 of 60

7. Question

A user is trying to aggregate all the CloudWatch metric data of the last 1 week. Which of the below mentioned statistics is not available for the user as a part of data aggregation?

Aggregate
Sum
Sample data
Average

Question 8 of 60

8. Question

A user has created numerous EBS volumes. What is the general limit for each AWS account for the maximum number of EBS volumes that can be created?

10000
5000
100
1000

Question 9 of 60

9. Question

An organization has configured the custom metric upload with CloudWatch. The organization has given permission to its employees to upload data using CLI as well SDK. How can the user track the calls made to CloudWatch?

The user can enable logging with CloudWatch which logs all the activities
Use CloudTrail to monitor the API calls
Create an IAM user and allow each user to log the data using the S3 bucket
Enable detailed monitoring with CloudWatch

Question 10 of 60

10. Question

A user is launching an EC2 instance in the US East region. Which of the below mentioned options is recommended by AWS with respect to the selection of the availability zone?

Always select the US-East-1-a zone for HA
Do not select the AZ; instead let AWS select the AZ
The user can never select the availability zone while launching an instance
Always select the AZ while launching an instance

Question 11 of 60

11. Question

An organization has created 50 IAM users. The organization has introduced a new policy which will change the access of an IAM user. How can the organization implement this effectively so that there is no need to apply the policy at the individual user level?

Use the IAM groups and add users as per their role to different groups and apply policy to group
The user can create a policy and apply it to multiple users in a single go with the AWS CLI
Add each user to the IAM role as per their organization role to achieve effective policy setup
Use the IAM role and implement access at the role level

Question 12 of 60

12. Question

An organization is using AWS since a few months. The finance team wants to visualize the pattern of AWS spending. Which of the below AWS tool will help for this requirement?

AWS Cost Manager
AWS Cost Explorer
AWS CloudWatch
AWS Consolidated Billing

Question 13 of 60

13. Question

A user has configured an Auto Scaling group with ELB. The user has enabled detailed CloudWatch monitoring on Auto Scaling. Which of the below mentioned statements will help the user understand the functionality better?

It is not possible to setup detailed monitoring for Auto Scaling
In this case, Auto Scaling will send data every minute and will charge the user extra
Detailed monitoring will send data every minute without additional charges
Auto Scaling sends data every minute only and does not charge the user

Question 14 of 60

14. Question

A user has setup Auto Scaling with ELB on the EC2 instances. The user wants to configure that whenever the CPU utilization is below 10%, Auto Scaling should remove one instance. How can the user configure this?

The user can get an email using SNS when the CPU utilization is less than 10%. The user can use the desired capacity of Auto Scaling to remove the instance
Use CloudWatch to monitor the data and Auto Scaling to remove the instances using scheduled actions
Configure CloudWatch to send a notification to Auto Scaling Launch configuration when the CPU utilization is less than 10% and configure the Auto Scaling policy to remove the instance
Configure CloudWatch to send a notification to the Auto Scaling group when the CPU Utilization is less than 10% and configure the Auto Scaling policy to remove the instance

Question 15 of 60

15. Question

A Sys-admin has created a shopping cart application and hosted it on EC2. The EC2 instances are running behind ELB. The admin wants to ensure that the end user request will always go to the EC2 instance where the user session has been created. How can the admin configure this?

Enable ELB cross zone load balancing
Enable ELB cookie setup
Enable ELB sticky session
Enable ELB connection draining

Question 16 of 60

16. Question

An organization has created 50 IAM users. The organization wants that each user can change their password but cannot change their access keys. How can the organization achieve this?

The organization has to create a special password policy and attach it to each user
The root account owner has to use CLI which forces each IAM user to change their password on first login
By default each IAM user can modify their passwords
Root account owner can set the policy from the IAM console under the password policy screen

Question 17 of 60

17. Question

A user has created a subnet with VPC and launched an EC2 instance in that subnet with only default settings.Which of the below mentioned options is ready to use on the EC2 instance as soon as it is launched?

Public IP address
Internet gateway
Elastic IP
Private IP address

Question 18 of 60

18. Question

A user is trying to delete an Auto Scaling group from CLI. Which of the below mentioned steps are to be performed by the user?

Terminate the instances with the ec2-terminate-instance command
Terminate the Auto Scaling instances with the as-terminate-instance command
Set the minimum size and desired capacity to 0
There is no need to change the capacity. Run the as-delete-group command and it will reset all values to 0

Question 19 of 60

19. Question

A user is launching an instance. He is on the “Tag the instance” screen. Which of the below mentioned information will not help the user understand the functionality of an AWS tag?

Each tag will have a key and value
The user can apply tags to the S3 bucket
The maximum value of the tag key length is 64 unicode characters
AWS tags are used to find the cost distribution of various resources

Question 20 of 60

20. Question

A user has a refrigerator plant. The user is measuring the temperature of the plant every 15 minutes. If the user wants to send the data to CloudWatch to view the data visually, which of the below mentioned statements is true with respect to the information given above?

The user needs to use AWS CLI or API to upload the data
The user can use the AWS Import Export facility to import data to CloudWatch
The user will upload data from the AWS console
The user cannot upload data to CloudWatch since it is not an AWS service metric

Question 21 of 60

21. Question

A user has recently started using EC2. The user launched one EC2 instance in the default subnet in EC2-VPC Which of the below mentioned options is not attached or available with the EC2 instance when it is launched?

Public IP address
Internet gateway
Elastic IP
Private IP address

Question 22 of 60

22. Question

A user has setup an RDS DB with Oracle. The user wants to get notifications when someone modifies the security group of that DB. How can the user configure that?

It is not possible to get the notifications on a change in the security group
Configure SNS to monitor security group changes
Configure event notification on the DB security group
Configure the CloudWatch alarm on the DB for a change in the security group

Question 23 of 60

23. Question

An organization wants to move to Cloud. They are looking for a secure encrypted database storage option. Which of the below mentioned AWS functionalities helps them to achieve this?

AWS MFA with EBS
AWS EBS encryption
Multi-tier encryption with Redshift
AWS S3 server-side storage

Question 24 of 60

24. Question

A user is publishing custom metrics to CloudWatch. Which of the below mentioned statements will help the user understand the functionality better?

The user can use the CloudWatch Import tool
The user should be able to see the data in the console after around 15 minutes
If the user is uploading the custom data, the user must supply the namespace, timezone, and metric name as part of the command
The user can view as well as upload data using the console, CLI and APIs

Question 25 of 60

25. Question

You are building an online store on AWS that uses SQS to process your customer orders. Your backend system needs those messages in the same sequence the customer orders have been put in. How can you achieve that?

It is not possible to do this with SQS
You can use sequencing information on each message
You can do this with SQS but you also need to use SWF
Messages will arrive in the same order by default

Question 26 of 60

26. Question

A user has configured the AWS CloudWatch alarm for estimated usage charges in the US East region. Which of the below mentioned statements is not true with respect to the estimated charges?

It will include the estimated charges of every AWS service
It will store the estimated charges data of the last 14 days
The metric data will represent the data of all the regions
The metric data will show data specific to that region

Question 27 of 60

27. Question

A user is trying to understand AWS SNS. To which of the below mentioned end points is SNS unable to send a notification?

Email JSON
HTTP
AWS SQS
AWS SES

Question 28 of 60

28. Question

A user has configured a VPC with a new subnet. The user has created a security group. The user wants to configure that instances of the same subnet communicate with each other. How can the user configure this with the security group?

There is no need for a security group modification as all the instances can communicate with each other inside the same subnet
Configure the subnet as the source in the security group and allow traffic on all the protocols and ports
Configure the security group itself as the source and allow traffic on all the protocols and ports
The user has to use VPC peering to configure this

Question 29 of 60

29. Question

An organization is using cost allocation tags to find the cost distribution of different departments and projects. One of the instances has two separate tags with the key/ value as “InstanceName/HR”, “CostCenter/HR”. What will AWS do in this case?

InstanceName is a reserved tag for AWS. Thus, AWS will not allow this tag
AWS will not allow the tags as the value is the same for different keys
AWS will allow tags but will not show correctly in the cost allocation report due to the same value of the two separate keys
AWS will allow both the tags and show properly in the cost distribution report

Question 30 of 60

30. Question

A system admin is planning to setup event notifications on RDS. Which of the below mentioned services will help the admin setup notifications?

AWS SES
AWS Cloudtrail
AWS Cloudwatch
AWS SNS

Question 31 of 60

31. Question

A user has launched two EBS backed EC2 instances in the US-East-1a region. The user wants to change the zone of one of the instances. How can the user change it?

Stop one of the instances and change the availability zone
The zone can only be modified using the AWS CLI
From the AWS EC2 console, select the Actions – > Change zones and specify new zone
Create an AMI of the running instance and launch the instance in a separate AZ

Question 32 of 60

32. Question

A sys admin is trying to understand EBS snapshots. Which of the below mentioned statements will not be useful to the admin to understand the concepts about a snapshot?

Snapshot is synchronous
It is recommended to stop the instance before taking a snapshot for consistent data
Snapshot is incremental
Snapshot captures the data that has been written to the hard disk when the snapshot command was executed

Question 33 of 60

33. Question

A user has created a VPC with CIDR 20.0.0.0/24. The user has created a public subnet with CIDR 20.0.0.0/25 and a private subnet with CIDR 20.0.0.128/25. The user has launched one instance each in the private and public subnets. Which of the below mentioned options cannot be the correct IP address (private IP) assigned to an instance in the public or private subnet?

20.0.0.255
20.0.0.132
20.0.0.122
20.0.0.55

Question 34 of 60

34. Question

A user has launched an EBS backed EC2 instance. What will be the difference while performing the restart or stop/start options on that instance?

For restart it does not charge for an extra hour, while every stop/start it will be charged as a separate hour
Every restart is charged by AWS as a separate hour, while multiple start/stop actions during a single hour will be counted as a single hour
For every restart or start/stop it will be charged as a separate hour
For restart it charges extra only once, while for every stop/start it will be charged as a separate hour

Question 35 of 60

35. Question

A user has created a VPC with a public subnet. The user has terminated all the instances which are part of the subnet. Which of the below mentioned statements is true with respect to this scenario?

The user cannot delete the VPC since the subnet is not deleted
All network interface attached with the instances will be deleted
When the user launches a new instance it cannot use the same subnet
The subnet to which the instances were launched with will be deleted

Question 36 of 60

36. Question

A user has deployed an application on an EBS backed EC2 instance. For a better performance of application, it requires dedicated EC2 to EBS traffic. How can the user achieve this?

Launch the EC2 instance as EBS provisioned with PIOPS EBS
Launch the EC2 instance as EBS enhanced with PIOPS EBS
Launch the EC2 instance as EBS dedicated with PIOPS EBS
Launch the EC2 instance as EBS optimized with PIOPS EBS

Question 37 of 60

37. Question

What would happen to an RDS (Relational Database Service) multi-Availability Zone deployment if the primary DB instance fails?

The IP of the primary DB Instance is switched to the standby DB Instance.
A new DB instance is created in the standby availability zone.
The canonical name record (CNAME) is changed from primary to standby.
The RDS (Relational Database Service) DB instance reboots.

Question 38 of 60

38. Question

A user has launched an EC2 Windows instance from an instance store backed AMI. The user wants to convert the AMI to an EBS backed AMI. How can the user convert it?

Attach an EBS volume to the instance and unbundle all the AMI bundled data inside the EBS
A Windows based instance store backed AMI cannot be converted to an EBS backed AMI
It is not possible to convert an instance store backed AMI to an EBS backed AMI
Attach an EBS volume and use the copy command to copy all the ephemeral content to the EBS Volume

Question 39 of 60

39. Question

A user has launched an EC2 instance from an instance store backed AMI. The user has attached an additional instance store volume to the instance. The user wants to create an AMI from the running instance. Will the AMI have the additional instance store volume data?

Yes, the block device mapping will have information about the additional instance store volume
No, since the instance store backed AMI can have only the root volume bundled
It is not possible to attach an additional instance store volume to the existing instance store backed AMI instance
No, since this is ephemeral storage it will not be a part of the AMI

Question 40 of 60

40. Question

A user has configured ELB with Auto Scaling. The user suspended the Auto Scaling terminate process only for a while. What will happen to the availability zone rebalancing process (AZRebalance) during this period?

Auto Scaling will not launch or terminate any instances
Auto Scaling will allow the instances to grow more than the maximum size
Auto Scaling will keep launching instances till the maximum instance size
It is not possible to suspend the terminate process while keeping the launch active

Question 41 of 60

41. Question

A user is trying to understand the CloudWatch metrics for the AWS services. It is required that the user should first understand the namespace for the AWS services. Which of the below mentioned is not a valid namespace for the AWS services?

AWS/StorageGateway
AWS/CloudTrail
AWS/ElastiCache
AWS/SWF

Question 42 of 60

42. Question

An organization has created a Queue named “modularqueue” with SQS. The organization is not performing any operations such as SendMessage, ReceiveMessage, DeleteMessage, GetQueueAttributes, SetQueueAttributes, AddPermission, and RemovePermission on the queue. What can happen in this scenario?

AWS SQS sends notification after 15 days for inactivity on queue
AWS SQS can delete queue after 30 days without notification
AWS SQS marks queue inactive after 30 days
AWS SQS notifies the user after 2 weeks and deletes the queue after 3 weeks.

Question 43 of 60

43. Question

The CFO of a company wants to allow one of his employees to view only the AWS usage report page. Which of the below mentioned IAM policy statements allows the user to have access to the AWS usage report page?

"Effect": "Allow", "Action": [“Describe”], "Resource": "Billing"
"Effect": "Allow", "Action": ["AccountUsage], "Resource": "*"
"Effect": "Allow", "Action": ["aws-portal:ViewUsage"], "Resource": "*"
"Effect": "Allow", "Action": ["aws-portal: ViewBilling"], "Resource": "*"

Question 44 of 60

44. Question

A sysadmin has enabled logging on ELB. Which of the below mentioned fields will not be a part of the log file name?

Load Balancer IP
EC2 instance IP
S3 bucket name
Random string

Question 45 of 60

45. Question

A user is trying to understand the detailed CloudWatch monitoring concept. Which of the below mentioned services does not provide detailed monitoring with CloudWatch?

AWS EMR
AWS RDS
AWS ELB
AWS Route53

Question 46 of 60

46. Question

A user has configured ELB with SSL using a security policy for secure negotiation between the client and load balancer. Which of the below mentioned security policies is supported by ELB?

Dynamic Security Policy
All the other options
Predefined Security Policy
Default Security Policy

Question 47 of 60

47. Question

A user is trying to connect to a running EC2 instance using SSH. However, the user gets an Unprotected Private Key File error. Which of the below mentioned options can be a possible reason for rejection?

The private key file has the wrong file permission
The ppk file used for SSH is read only
The public key file has the wrong permission
The user has provided the wrong user name for the OS login

Question 48 of 60

48. Question

A user has created a VPC with CIDR 20.0.0.0/24. The user has used all the IPs of CIDR and wants to increase the size of the VPC. The user has two subnets: public (20.0.0.0/25) and private (20.0.0.128/25). How can the user change the size of the VPC?

The user can delete all the instances of the subnet. Change the size of the subnets to 20.0.0.0/32 and 20.0.1.0/32, respectively. Then the user can increase the size of the VPC using CLI
It is not possible to change the size of the VPC once it has been created
User can add a subnet with a higher range so that it will automatically increase the size of the VPC
User can delete the subnets first and then modify the size of the VPC

Question 49 of 60

49. Question

A user has launched 5 instances in EC2-CLASSIC and attached 5 elastic IPs to the five different instances in the US East region. The user is creating a VPC in the same region. The user wants to assign an elastic IP to the VPC instance. How can the user achieve this?

The user has to request AWS to increase the number of elastic IPs associated with the account
AWS allows 10 EC2 Classic IPs per region; so it will allow to allocate new Elastic IPs to the same region
The AWS will not allow to create a new elastic IP in VPC; it will throw an error
The user can allocate a new IP address in VPC as it has a different limit than EC2

Question 50 of 60

50. Question

A user has launched an EC2 instance store backed instance in the US-East-1a zone. The user created AMI #1 and copied it to the Europe region. After that, the user made a few updates to the application running in the US-East-1a zone. The user makes an AMI#2 after the changes. If the user launches a new instance in Europe from the AMI #1 copy, which of the below mentioned statements is true?

The new instance will have the changes made after the AMI copy as AWS just copies the reference of the original AMI during the copying. Thus, the copied AMI will have all the updated data
The new instance will have the changes made after the AMI copy since AWS keeps updating the AMI
It is not possible to copy the instance store backed AMI from one region to another
The new instance in the EU region will not have the changes made after the AMI copy

Question 51 of 60

51. Question

An AWS account owner has setup multiple IAM users. One IAM user only has CloudWatch access. He has setup the alarm action, which stops the EC2 instances when the CPU utilization is below the threshold limit. What will happen in this case?

It is not possible to stop the instance using the CloudWatch alarm
CloudWatch will stop the instance when the action is executed
The user cannot set an alarm on EC2 since he does not have the permission
The user can setup the action but it will not be executed if the user does not have EC2 rights

Question 52 of 60

52. Question

When an EC2 instance that is backed by an S3-based AMI is terminated, what happens to the data on the root volume?

Data is automatically saved as an EBS snapshot.
Data is automatically saved as an EBS volume.
Data is unavailable until the instance is restarted.
Data is automatically deleted.

Question 53 of 60

53. Question

A user has setup a VPC with CIDR 20.0.0.0/16. The VPC has a private subnet (20.0.1.0/24) and a public subnet (20.0.0.0/24). The user’s data centre has CIDR of 20.0.54.0/24 and 20.1.0.0/24. If the private subnet wants to communicate with the data centre, what will happen?

It will allow traffic communication on both the CIDRs of the data centre
It will not allow traffic with data centre on CIDR 20.1.0.0/24 but allows traffic communication on 20.0.54.0/24
It will not allow traffic communication on any of the data centre CIDRs
It will allow traffic with data centre on CIDR 20.1.0.0/24 but does not allow on 20.0.54.0/24

Question 54 of 60

54. Question

A user has launched an EC2 Windows instance from an instance store backed AMI. The user wants to convert the AMI to an EBS backed AMI. How can the user convert it?

A Windows based instance store backed AMI cannot be converted to an EBS backed AMI
It is not possible to convert an instance store backed AMI to an EBS backed AMI
Attach an EBS volume and use the copy command to copy all the ephemeral content to the EBS Volume
Attach an EBS volume to the instance and unbundle all the AMI bundled data inside the EBS

Question 55 of 60

55. Question

A system admin wants to add more zones to the existing ELB. The system admin wants to perform this activity from CLI. Which of the below mentioned command helps the system admin to add new zones to the existing ELB?

elb-enable-zones-for-lb
elb-add-zones-for-lb
It is not possible to add more zones to the existing ELB
elb-configure-zones-for-lb

Question 56 of 60

56. Question

A user is sending the data to CloudWatch using the CloudWatch API. The user is sending data 90 minutes in the future. What will CloudWatch do in this case?

CloudWatch will accept the data
It is not possible to send data of the future
It is not possible to send the data manually to CloudWatch
The user cannot send data for more than 60 minutes in the future

Question 57 of 60

57. Question

A system admin is planning to encrypt all objects being uploaded to S3 from an application. The system admin does not want to implement his own encryption algorithm; instead he is planning to use server side encryption by supplying his own key (SSE-C.. Which parameter is not required while making a call for SSE-C?

x-amz-server-side-encryption-customer-key-AES-256
x-amz-server-side-encryption-customer-key
x-amz-server-side-encryption-customer-algorithm
x-amz-server-side-encryption-customer-key-MD5

Question 58 of 60

58. Question

A user has created a subnet in VPC and launched an EC2 instance within it. The user has not selected the option to assign the IP address while launching the instance. Which of the below mentioned statements is true with respect to this scenario?

The instance will always have a public DNS attached to the instance by default
The user can directly attach an elastic IP to the instance
The instance will never launch if the public IP is not assigned
The user would need to create an internet gateway and then attach an elastic IP to the instance to connect from internet

Question 59 of 60

59. Question

Which of the following statements about this S3 bucket policy is true?

{
“Id”: “IPAllowPolicy”
“Statement”:[
{
“Sid”: “IPAllow”,
“Action”: “s3”,
“Effect”: “Allow”,
“Resource”: “arn:aws:s3:::mybucket/*,
“Condition”: {
“IPAddress”: {
“aws:SourceIP”: “192.168.100.0/24”
},
“NotipAddress”: {
“aws:SourceIp”: “192.168.100.188/32
}
},
“Principal”: {
“AWS”: {
“*”
]
}
}
]
}

Denies the server with the IP address 192.166 100.0 full access to the "mybucket" bucket
Denies the server with the IP address 192.166 100.188 full access to the "mybucket bucket
Grants all the servers within the 192 168 100 0/24 subnet full access to the "mybucket" bucket
Grants all the servers within the 192 168 100 188/32 subnet full access to the "mybucket" bucket

Question 60 of 60

60. Question

A user has created an Auto Scaling group with default configurations from CLI. The user wants to setup the CloudWatch alarm on the EC2 instances, which are launched by the Auto Scaling group. The user has setup an alarm to monitor the CPU utilization every minute. Which of the below mentioned statements is true?

It will fetch the data at every minute but the four data points [corresponding to 4 minutes] will not have value since the EC2 basic monitoring metrics are collected every five minutes
It will fetch the data at every minute as detailed monitoring on EC2 will be enabled by the default launch configuration of Auto Scaling
The alarm creation will fail since the user has not enabled detailed monitoring on the EC2 instances
The user has to first enable detailed monitoring on the EC2 instances to support alarm monitoring at every minute

AWS SysOps-A | Practice Quiz 03