Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS SysOps > All section bad answer review > Flashcards

All section bad answer review Flashcards

1
Q

When you launch an EC2 instance and you get this error InstanceLimitExceeded, then you have reached your limit of a maximum number of vCPUs per AWS Region. Either launch the EC2 instance in a different AWS Region or contact AWS Support to increase your limit of the AWS Region.

A

Launch the EC2 instance in a different AWS Region because it’s a vCPU limit on a per-region level

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

You are getting an error InsufficientInstanceCapacity while trying to launch an EC2 instance. What’s the problem?

A

AWS does not have enough on-demand capacity regarding the particular AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

You’re trying to SSH into your EC2 instance and you are facing the following error Connection timed out. Which of the following is NOT a reason for this error?

A

You .pem file on your Linux machine doesn’t have 400 permissions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Your t2.small EC2 instance constantly runs out of CPU credits and therefore the performance is degraded. What is NOT a solution for this problem?

A

Purchase CPU credits for your EC2 instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

You are launching an EC2 instance in us-east-1 using AWS Lambda in us-east-1 using this Python script snippet:

ec2.create_instances(ImageId=’ami-0dc2d3e4c0f9ebd18’, MinCount=1, MaxCount=1)

It works well, so you decide to deploy your AWS Lambda function in us-west-1 as well. There, the function does not work and fails with InvalidAMIID.NotFound error. What’s the problem?

A

AMI is region locked and the same AMI ID can not be used across regions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Your company has a critical application that’s hosted on 100s of EC2 instances. The security team has created an AMI that’s updated and has all the security patches installed. The DevOps team must create the EC2 instances from the AMI approved by the security team, but there’s no IAM policy to prevent them from using another AMI. What AWS service would you use to ensure that all the EC2 instances are launched using the approved AMI?

A

AWS Config

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

You have a fleet of EC2 instances and you want to apply a patch to all of them without SSH into each EC2 instance. What’s the easiest way to patch this fleet of EC2 instances?

A

SSM Run Command

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

You would like to expose a fixed static IP to your end-users for compliance purposes, so they can write firewall rules that will be stable and approved by regulators. Which Load Balancer should you use?

A

Network Load Balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

You want toYou want to create a custom application-based cookie in your Application Load Balancer. Which of the following you can use as a cookie name?

A

AAPUSERC

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

You have an application that is RAM intensive that increases the RAM usage based on the number of clients requests it receives. This application is behind an Elastic Load Balancer and managed by an ASG. How do you handle scaling for this application?

A

Scale based on Number of Request Per Instance CloudWatch metric

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

You would like to link the success of your CloudFormation template to the success of installing and properly configuring launched EC2 instances. How can you achieve this?

A

Use WaitCondition and cfn-signal to let CloudFormation know of the success status

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What CloudFormation feature helps you analyze the upcoming changes on a CloudFormation stack update without actually executing them?

A

ChangeSets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

A SysOps Administrator created an AWS CloudFormation template for the first time. The stack failed with a status of ROLLBACK_COMPLETE. The Administrator identified and resolved the template issue that caused the failure. How should the Administrator continue with the stack deployment?

A

Delete the failed stack and create a new stack

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which of the following are NOT valid CloudFormation Pseudo Parameters?

A

AWS:AccountName

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

You have created a CloudFormation stack that has a lot of resources (ASG, ALB, EC2, RDS DB, S3 buckets, …). One of your teammates doesn’t know that the ALB has been created as part of the CloudFormation stack, so he deleted the ALB and created a new ALB. Later on, you attempted to update the stack, the update failed and the stack can’t be rolled back with the following error UPDATE_ROLLBACK_FAILED. What would you do to resolve this issue?

A

You can fix the errors manually (re-create the deleted ALB with the same configuration) or you can skip the ALB while updating the stack

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

You have enabled a Dead Letter Queue (DLQ) for your Lambda function and configured it to send failed messages to SNS. While testing, you don’t see any events there even though you can tell from CloudWatch metrics that you have failures. What is most likely the reason for this?

A

You Lambda function’s execution role is missing permissions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

You have enabled and configured Event Notifications in your S3 bucket to invoke a Lambda function every time an object is uploaded to your S3 bucket. You have noticed that there’s duplicate logging into CloudWatch Logs with the same request ID. What do you think is the reason for this?

A

The Lambda function has failed and retries have happened

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

You want to give another AWS account access to invoke a Lambda function in your AWS account. Which of the following can NOT be used to do so?

A

Lambda Execution Role

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Which of the following can NOT be used to secure access to files/data stored on an EFS file system?

A

Amazon Cognito

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Which of the following is NOT a Glacier Flexible retrieval mode?

A

Instant (10 seconds)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

You are looking to get recommendations for S3 Lifecycle Rules. How can you analyze the optimal number of days to move objects between different storage tiers?

A

S3 Analytics

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

You have an S3 bucket with 1000s of objects stored in it. You want to perform an update to each object in the bucket. What’s the most effective approach to do?

A

Use S3 Batch Operations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

You have an S3 bucket that has S3 Versioning enabled. This S3 bucket has a lot of objects, and you would like to remove old object versions to reduce costs. What’s the best approach to automate the deletion of these old object versions?

A

Use S3 Lifecycle Rules - Expiration Actions

24
Q

You suspect that some of your employees try to access files in an S3 bucket that they don’t have access to. How can you verify this is indeed the case without them noticing?

A

Enable S3 Access Logs and analyze them using Athena

25
Q

You have a large dataset stored in S3 that you want to access from on-premises servers using the NFS or SMB protocol. Also, you want to authenticate access to these files through on-premise Microsoft AD. What would you use?

A

AWS Storage Gateway - File Gateway

26
Q

Amazon CloudFront generates a set of reports about your CloudFront Distribution activity. Which of the following is NOT a valid report?

A

Access Logs Report

27
Q

You have a React Single Page Application hosted on an S3 Bucket and served through CloudFront Distribution. You have made an update to your React application and pushed it to S3, but the old version is still cached at CloudFront, and clients still see the old version. You want the new update to be propagated immediately. What would you do?

A

Use CloudFront Invalidation

28
Q

When creating a new CloudFront Distribution, what provides the most caching efficiency while making sure users get Cache Behavior based on the “color” attribute in a cookie?

A

Cookies

29
Q

You manage many RDS DB instances and you want to be notified of when there’s a change in DB instance state, DB Parameter Groups, DB Security Groups, DB Snapshots, etc. What should you use?

A

RDS Events & Event subscriptions

30
Q

You have an un-encrypted RDS DB instance and you want to create Read Replicas. Can you configure the RDS Read Replicas to be encrypted?

A

No

31
Q

Sometimes, your RDS database experiences failures and you would like to automatically recover it in case these failures happen. What should you use?

A

Enable Multi-AZ

32
Q

Your RDS backups are impacting your production database when they run. What can you do to improve the performance of your production database when backups are taken?

A

Enable Multi-AZ

33
Q

What option of the Performance Insights dashboard should you use to figure out which SQL queries are affecting the most to the performance of your database?

A

SQL Statements

34
Q

You have a production Aurora DB Cluster. You want to create a test environment that uses the same data in this prod DB Cluster. What is the most cost-effective way to do this?

A

Use Aurora Database Cloning to create a new DB Cluster (clone) of the production DB Cluster

35
Q

How would you monitor your EC2 instance memory usage in CloudWatch?

A

Use Unified CloudWatch Agent to push memory usage as a custom metric to CloudWatch

36
Q

Someone changed the configuration of a resource and made it non-compliant. Which AWS service can you use to find out who made the change?

A

AWS CloudTrail

37
Q

You’re using AWS Service Catalog to make it easy for your users to provision AWS resources. You have created a portfolio and a set of products. How should you standardize tags across provisioned products?

A

AWS Service Catalog - TagOptions Library

38
Q

What can you use to standardize tags across resources in all AWS Accounts inside your AWS Organization?

A

AWS Organization - Tag Policies

39
Q

You manage a set of AWS Accounts using AWS Organization which has Consolidated Billing feature enabled and Reserved Instance Discount Sharing turned on. You have an AWS Account that purchased a set of reserved EC2 instances that the owner doesn’t want to share with the AWS Organization. What should you do?

A

Disable Reserved Instance Discount Sharing at the AWS account level

40
Q

AWS EC2 experiences an outage and you would like to get a list of all your resources that are affected. What should you use?

A

AWS Personal Health Dashboard

41
Q

For accounting reasons, you need to separate costs into categories in AWS, such as Environment. How do you achieve this?

A

Use Cost Allocation Tags

42
Q

What should you use to control access to your KMS CMKs?

A

KMS Key Policies

43
Q

AWS GuardDuty scans the following data, EXCEPT:

A

CloudWatch Logs

44
Q

You have a website hosted on a fleet of EC2 instances fronted by an Application Load Balancer. What you should use to protect your website from common web application attacks (e.g., SQL Injection)?

A

AWS WAF

45
Q

AWS Certificate Manager helps you easily provision, manage, and deploy SSL/TLS certificates. It’s integrated with the following AWS services EXCEPT:

A

EC2

46
Q

You have purchased “mycoolcompany.com” on Route 53 Registrar and would like for it to point to “lb1-1234.us-east-2.elb.amazonaws.com”. Which Route 53 record type is IMPOSSIBLE to set up for this?

A

CNAME

47
Q

You have a corporate network of size 10.0.0.0/8 and a satellite office of size 192.168.0.0/16. Which CIDR is acceptable for your AWS VPC if you plan on connecting your networks later on?

A

172.16.0.0/16

48
Q

You plan on creating a subnet and want it to have at least capacity for 28 EC2 instances. What’s the minimum size you need to have for your subnet?

A

/26

49
Q

You have attached an Internet Gateway to your VPC, but your EC2 instances still don’t have access to the Internet. What is NOT a possible issue?

A

The Security Group doesn’t allow network in

50
Q

You have established a Direct Connect connection between your Corporate Data Center and VPC A in your AWS Account. You need to access VPC B in another AWS Region from your Corporate Data Center as well. What should you do?

A

Use a Direct Connect Gateway

51
Q

You have created a new VPC with 4 subnets in it. You begin to launch a set of EC2 instances inside these subnets but you noticed that these EC2 instances don’t get assigned public hostnames and DNS resolution isn’t working. What should you do to resolve this issue?

A

Enable DNS Resolution and DNS Hostnames in your VPC

52
Q

You have 3 VPCs A, B, and C. You want to establish a VPC Peering connection between all the 3 VPCs. what should you do?

A

Establish 3 VPC Peering connections (A-B, A-C, and B-C)

53
Q

If you want a 500 Mbps Direct Connect connection from your corporate data center to AWS. You would create a …………… connection.

A

Hosted

54
Q

You have an internal web application hosted in a private subnet in your VPC that you want to be used by other customers. You don’t want to expose the application to the Internet or open your whole VPC to other customers. What should you do?

A

Use VPC Endpoint Services

55
Q

How can you restrict access to your Amazon ElasticSearch domain to your company’s CIDR block?

A

Using IP-Based Policies

56
Q

Which of the following are NOT a supported Kibana Authentication type in your Amazon ElasticSearch domain?

A

IAM Users and Roles

AWS SysOps (2 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions