Question 1

An organization has setup Auto Scaling with ELB. Due to some manual error, one of the instances got rebooted. Thus, it failed the Auto Scaling health check. Auto Scaling has marked it for replacement. How can the system admin ensure that the instance does not get terminated?

Accepted Answer

The system admin can change the health status of the instance to healthy using Auto Scaling commands, which will prevent it from being terminated.

Question 2

A user has launched an EBS backed EC2 instance in the US-East-1a region. The user stopped the instance and started it back after 20 days. AWS throws up an 'InsufficientInstanceCapacity' error. What can be the possible reason for this?

Accepted Answer

When an 'InsufficientInstanceCapacity' error occurs, it typically means that AWS does not have enough available capacity in the specified availability zone to fulfill the request.

Question 3

A user has launched an EC2 instance and deployed a production application in it. The user wants to prohibit any mistakes from the production team to avoid accidental termination. How can the user achieve this?

Accepted Answer

The user can set the DisableApiTermination attribute on the EC2 instance to prevent it from being accidentally terminated.

Question 4

A user has enabled termination protection on an EC2 instance. The user has also set Instance initiated shutdown behavior to terminate. When the user shuts down the instance from the OS, what will happen?

Accepted Answer

When Instance initiated shutdown behavior is set to terminate, the instance will be terminated when it is shut down from the OS, regardless of whether termination protection is enabled.

Question 5

A user has created a VPC with public and private subnets using the VPC wizard. Which of the below mentioned statements is true in this scenario?

Accepted Answer

When using the VPC wizard to create a VPC with public and private subnets, the main route table is associated with the private subnet, and a custom route table is created and associated with the public subnet.

Question 6

A user has configured an EC2 instance in the US-East-1a zone. The user has enabled detailed monitoring of the instance. The user is trying to get the data from CloudWatch using a CLI. Which of the below mentioned CloudWatch endpoint URLs should the user use?

Accepted Answer

The answer of A user has configured an EC2 instance...

Question 7

A user has configured ELB with Auto Scaling. The user suspended the Auto Scaling AddToLoadBalancer (which adds instances to the load balancer. process for a while). What will happen to the instances launched during the suspension period?

Accepted Answer

When the AddToLoadBalancer process is suspended, instances launched during this period will not be automatically registered with the ELB. The user must manually register them once the process is resumed.

Question 8

A user has created a VPC with two subnets: one public and one private. The user is planning to run the patch update for the instances in the private subnet. How can the instances in the private subnet connect to the Internet?

Accepted Answer

A NAT (Network Address Translation) gateway or instance with an elastic IP allows instances in a private subnet to connect to the internet for updates while preventing inbound connections from the internet.

Question 9

A user is creating a Cloudformation stack. Which of the below mentioned limitations does not hold true for Cloudformation?

Accepted Answer

The limitation of 100 templates per account does not exist in AWS CloudFormation.

Question 10

An organization has created 10 IAM users. The organization wants each of the IAM users to have access to a separate DynamoDB table. All the users are added to the same group and the organization wants to setup a group level policy for this. How can the organization achieve this?

Accepted Answer

The organization can create a policy that uses policy variables, such as ${aws:username}, to dynamically grant access to resources with names that match the IAM user names. This allows each user to access their respective DynamoDB table without needing separate policies for each user.

Question 11

A user is trying to pre-warm a blank EBS volume attached to a Linux instance. Which of the below mentioned steps should be performed by the user?

Accepted Answer

Unmounting the volume before pre-warming ensures that the data is not being accessed during the process, which is necessary for pre-warming a blank EBS volume.

Question 12

A user has moved an object to Glacier using the life cycle rules. The user requests to restore the archive after 6 months. When the restore request is completed the user accesses that archive. Which of the below mentioned statements is not true in this condition?

Accepted Answer

The restored object's storage class will be Standard, not RRS (Reduced Redundancy Storage).

Question 13

A user has configured an HTTPS listener on an ELB. The user has not configured any security policy which can help to negotiate SSL between the client and ELB. What will ELB do in this scenario?

Accepted Answer

By default, ELB will select the latest version of the security policy if none is specified by the user.

Question 14

A sysadmin has created the below mentioned policy on an S3 bucket named cloudacademy. The bucket has both AWS. j p g and index.html objects. What does this policy define?

Accepted Answer

The answer of A sysadmin has created the below mentioned...

Question 15

A user has two EC2 instances running in two separate regions. The user is running an internal memory management tool, which captures the data and sends it to CloudWatch in US East, using a CLI with the same namespace and metric. Which of the below mentioned options is true with respect to the above statement?

Accepted Answer

CloudWatch can receive and aggregate custom metrics from different regions as long as they are sent to the same namespace and metric.

Question 16

A user has enabled versioning on an S3 bucket. The user is using server side encryption for data at rest. If the user is supplying his own keys for encryption (SSE-C), what is recommended to the user for the purpose of security?

Accepted Answer

It is recommended that the user manually rotates their encryption keys regularly to enhance security when using SSE-C, as AWS does not manage key rotation for customer-provided keys.

Question 17

A user runs the command "dd if=/dev/xvdf of=/dev/null bs=1M" on an EBS volume created from a snapshot and attached to a Linux instance. Which of the below mentioned activities is the user performing with the step given above?

Accepted Answer

The command "dd if=/dev/xvdf of=/dev/null bs=1M" is used to read the entire EBS volume, which effectively pre-warms the volume by ensuring all blocks are loaded from the snapshot into the volume.

Question 18

A user has created an EBS volume of 10 GB and attached it to a running instance. The user is trying to access EBS for first time. Which of the below mentioned options is the correct statement with respect to a first time EBS access?

Accepted Answer

When accessing an EBS volume for the first time, there may be a temporary loss of IOPS performance due to the need to initialize the volume.

Question 19

A sys admin has enabled a log on ELB. Which of the below mentioned activities are not captured by the log?

Accepted Answer

Front end processing time is not captured by the log.

Question 20

A user has launched an EC2 Windows instance from an instance store backed AMI. The user wants to convert the AMI to an EBS backed AMI. How can the user convert it?

Accepted Answer

The answer of A user has launched an EC2 Windows...

Exam 13: AWS Certified SysOps Administrator (SOA-C01)