Question 1

A database is running on an Amazon RDS Multi-AZ DB instance. A recent security audit found the database to be cut of compliance because it was not encrypted. Which approach will resolve the encryption requirement?

Accepted Answer

The correct approach is to log in to the RDS console and select the encryption box to encrypt the database. This will encrypt the database at rest, which is the requirement of the security audit.

Question 2

Which services allow the customer to retain run administrative privileges or the undertying EC2 instances? (Choose two.)

Accepted Answer

The answer of Which services allow the customer to retain...

Question 3

A company is auditing their infrastructure to obtain a compliance certification. Which of the following options are the company's responsibility within the Shared Responsibility Model? (Select two.)

Accepted Answer

The answer of A company is auditing their infrastructure to...

Question 4

A user has launched an EC2 Windows instance from an instance store backed AMI. The user wants to convert the AMI to an EBS backed AMI. How can the user convert it?

Accepted Answer

The answer of A user has launched an EC2 Windows...

Question 5

A user needs to put sensitive data in an Amazon S3 bucket that can be accessed through an S3 VPC endpoint only. The user must ensure that resources in the VPC can only access the single S3 bucket. Which combination of actions will meet the requirements? (select TWO.)

Accepted Answer

The answer of A user needs to put sensitive data...

Question 6

After installing and configuring the Amazon CloudWatch agent on an EC2 instance, the anticipated system logs are not being received by CloudWatch Logs. Which of the following are likely to be the cause of this problem? (Select TWO.)

Accepted Answer

The answer of After installing and configuring the Amazon CloudWatch...

Question 7

A user has launched an EC2 instance from an instance store backed AMI. The user has attached an additional instance store volume to the instance. The user wants to create an AMI from the running instance. Will the AMI have the additional instance store volume data?

Accepted Answer

The answer of A user has launched an EC2 instance...

Question 8

A company's static website hosted on Amazon S3 was launched recently, and is being used by tens of thousands of users. Subsequently, website users are experiencing 503 service unavailable errors. Why are these errors occurring?

Accepted Answer

Amazon S3 can return a 503 error if the request rate is too high, indicating that the service is being overwhelmed by the number of requests.

Question 9

The Security team has decided that there will be no public internet access to HTTP (TCP port 80) because if it is moving to HTTPS for all incoming web traffic. The team has asked a SysOps Administrator to provide a report on any security groups that are not compliant. What should the SysOps Administrator do to provide near real-time compliance reporting?

Accepted Answer

The answer of The Security team has decided that there...

Question 10

A user has created a VPC with the public subnet. The user has created a security group for that VPC. Which of the below mentioned statements is true when a security group is created?

Accepted Answer

By default, a security group allows all outbound traffic and denies all inbound traffic.

Question 11

A company's customers are reporting increased latency while accessing static web content from Amazon S3. A SysOps Administrator observed a very high rate of read operations on a particular S3 bucket. What will minimize latency by reducing load on the S3 bucket?

Accepted Answer

Creating an Amazon CloudFront distribution with the S3 bucket as the origin will cache the content at edge locations, reducing latency and load on the S3 bucket by serving content closer to the end users.

Question 12

A company needs to implement a system for object-based storage in a write-once, read-many (WORM) model. Objects cannot be deleted or changed after they are stored, even by an AWS account root user or administrators. Which solution will meet these requirements?

Accepted Answer

The answer of A company needs to implement a system...

Question 13

A user has created a web application with Auto Scaling. The user is regularly monitoring the application and he observed that the traffic is highest on Thursday and Friday between 8 AM to 6 PM. What is the best solution to handle scaling in this case?

Accepted Answer

Scheduling Auto Scaling to scale up and down based on the observed traffic pattern is the most efficient and automated way to handle predictable traffic spikes.

Question 14

A user has launched an EBS backed EC2 instance. The user has rebooted the instance. Which of the below mentioned statements is not true with respect to the reboot action?

Accepted Answer

Rebooting an EBS-backed EC2 instance does not change the host computer; it remains on the same host.

Question 15

An application resides on multiple EC2 instances in public subnets in two Availability Zones. To improve security, the Information Security team has deployed an Application Load Balancer (ALB) in separate subnets and pointed the DNS at the ALB instead of the EC2 instances. After the change, traffic is not reaching the instances, and an error is being returned from the ALB. What steps must a SysOps Administrator take to resolve this issue and improve the security of the application? (Select TWO.)

Accepted Answer

The answer of An application resides on multiple EC2 instances...

Question 16

Malicious traffic is reaching company web servers. A SysOps Administrator is tasked with blocking this traffic. The malicious traffic is distributed over many IP addresses and represents much higher traffic than is typically seen from legitimate users. How should the Administrator protect the web servers?

Accepted Answer

AWS WAF can be used to set rate-based rules to automatically block IP addresses that exceed a certain request threshold, effectively mitigating distributed malicious traffic.

Question 17

A SysOps Administrator has configured a CloudWatch agent to send custom metrics to Amazon CloudWatch and is now assembling a CloudWatch dashboard to display these metrics. What steps should be the Administrator take to complete this task?

Accepted Answer

The answer of A SysOps Administrator has configured a CloudWatch...

Question 18

As part of an operational audit, an Administrator is tasked with showing that all security responsibilities under the customer's control are properly executed. Which of the following items is the customer responsible for providing to the auditor? (Select TWO.)

Accepted Answer

The answer of As part of an operational audit, an...

Question 19

An Amazon EC2 instance has a secondary Amazon Elastic Block Store (EBS) volume attached that contains sensitive data. A new company policy requires the secondary volume to be encrypted at rest. Which solution will meet this requirement?

Accepted Answer

Create a snapshot of the volume, then create a new encrypted volume from that snapshot, and finally detach the original volume and attach the new encrypted volume to the instance. This process ensures the data is encrypted at rest.

Question 20

An e-commerce company wants to lower costs on its nightly jobs that aggregate the current day's sales and store the results in Amazon S3. The jobs are currently run using multiple on-demand instances and the job take just under 2 hours to complete. If a job fails for any reason, it needs to be restarted from the beginning. What method is the MOST cost effective based on these requirements?

Accepted Answer

The answer of An e-commerce company wants to lower costs...

Exam 13: AWS Certified SysOps Administrator (SOA-C01)