Pearson SOA-C01 New Attempt

AWS Certified SysOps Administrator - Associate Questions and Answers

Question 13

A company has adopted a security policy that requires all customer data to be encrypted at rest. Currently, customer data is stored on a central Amazon EFS file system and accessed by a number of different applications from Amazon EC2 instances.

How can the SysOps Administrator ensure that all customer data stored on the EFS file system meets the new requirement?

Options:

Update the EFS file system settings to enable server-side encryption using AES-256.

Create a new encrypted EFS file system and copy the data from the unencrypted EFS file system to the new encrypted EFS file system.

Use AWS CloudHSM to encrypt the files directly before storing them in the EFS file system.

Modify the EFS file system mount options to enable Transport Layer Security (TLS) on each of the EC2 instances.

Question 14

An organization has developed a new memory-intensive application that is deployed to a large Amazon EC2 Linux fleet. There is concern about potential memory exhaustion, so the Development team wants to monitor memory usage by using Amazon CloudWatch.

What is the MOST efficient way to accomplish this goal?

Options:

Deploy the solution to memory-optimized EC2 instances, and use the CloudWatch MemoryUtilization metric

Enable the Memory Monitoring option by using AWS Config

Install the AWS Systems Manager agent on the applicable EC2 instances to monitor memory

Monitor memory by using a script within the instance, and send it to CloudWatch as a custom metric

Question 15

A company has received a notification in its AWS Personal Health Dashboard that one of its Amazon EBS-backed Amazon EC2 instances is on hardware that is scheduled maintenance The instance runs a critical production workload that must be available during normal business hours

Which steps will ensure that the instance maintenance does not produce an outage?

Options:

Configure an Amazon Lambda function to automatically start the instance if it is stopped

Create an Amazon Machine Image (AMI) of the instance and use the AMI to launch a new instance once the existing instance is retired

Enable termination protection on the EC2 instance

Stop and start the EC2 instance during a maintenance window outside of normal business hours

Question 16

A SysOps Administrator is troubleshooting an AWS CloudFormation template whereby multiple Amazon EC2 instances are being created. The template is working in us-east-1, but it is failing in us-west-2 with the error code:

AMI [ami-12345678] does not exist.

How should the Administrator ensure that the AWS CloudFormation template is working in every region?

Options:

Copy the source region’s Amazon Machine Image (AMI) to the destination region and assign it the same ID.

Edit the AWS CloudFormation template to specify the region code as part of the fully qualified AMI ID.

Edit the AWS CloudFormation template to offer a drop-down list of all AMIs to the user by using the AWS: :EC2: :AMI: :ImageID control.

Modify the AWS CloudFormation template by including the AMI IDs in the “Mappings” section. Refer to the proper mapping within the template for the proper AMI ID.

Weekend Sale Special - Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: top65certs

AWS Certified SysOps Administrator - Associate Questions and Answers

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer: