AWS Certified SysOps Administrator – Associate Set3 Welcome to AWS Certified SysOps Administrator - Associate Set3. 1. What is the difference between KMS and CloudHSM? (Choose 2) KMS allows you to have dedicated hardware CloudHSM allows you to have dedicated hardware CloudHSM is multi-tenancy KMS is multi-tenancy2. You are migrating 40TB of data into S3, but you also need to process the data before transferring it to S3. Which service should you use? Use Snowball Edge to process and transport the data Process the data locally and use Snowball to transport the data Process the data locally and use Snowball Edge to transport the data3. Which of the following can you achieve using S3 Lifecycle policies? (Choose 2) Delete files if they haven't been accessed in the past year Delete files 5 years after creating them Transition files to Infrequently Accessed storage if they haven't been accessed in the past 90 days Transition objects to Infrequently Accessed storage 90 days after you created them4. Your boss has asked you to ensure that team members use server-side encryption for any objects they upload to S3. You are planning to do this using a bucket policy. Which of the following parameters should your policy require to be present in every S3 PUT request header? x-amz-server-side-encryption amz-x-server-side-encryption amx-server-side-encryption5. Which AWS feature allows you to manage your objects to ensure that they are stored using the most cost-effective category of storage? Glacier S3 Lifecycle Rules Systems Manager6. You have enabled MFA Delete on your S3 bucket, which of the following actions will require a valid code from your registered MFA device? (Choose 2) Permanently deleting an object version Modifying S3 Lifecycle policies Enabling or disabling S3 versioning Deleting Bucket Policies7. Which of the following is true in relation to Instance Store volumes? The data will still be there after the instance is deleted By default it is ephemeral storage but you can configure it to be persistent at any time The data will always be deleted when the instance is deleted8. Which of the following is true in relation to Instance Store volumes? By default it is ephemeral storage but you can configure it to be persistent at volume creation time only The data will still be there after the instance is deleted The data will always be deleted when the instance is deleted9. Use CloudFront to transfer the data Standard, Standard-Infrequent Access, One Zone-Infrequent Access Reduced Redundancy Storage, Standard, One Zone-Infrequent Access Standard-Infrequent Access, One Zone-Infrequent Access, Reduced Redundancy Storage10. Which of the following features does S3 versioning provide? (Choose 2) The ability to revert back to previous versions of your objects It appends your object name with a numerical version number It allows you to store multiple versions of an object in the same bucket It allows you to back up your important objects11. You are trying to copy a custom AMI which has been shared by another account. The AMI has been encrypted. What steps will you need to take to successfully copy the AMI? Launch a new EC2 instance from the AMI, then use your own encryption key to create an encrypted AMI from the newly launched instance. The sharing account must share the underlying EBS snapshot as well as the original encryption key used to encrypt it. Copy the EBS snapshot and re-encrypt it using your own key, then register it as an AMI The sharing account must first re-encrypt the underlying EBS snapshot with your encryption key and share it with you. Copy the EBS snapshot, then register it as an AMI12. You are supporting a large application which runs on 200 EC2 instances located in us-east-1. You would like to share a number of files between the application servers. Which of the following is the best approach for storing these files so that all the servers can access them? Glacier EFS S313. Instance Store storage is ________. Temporary/Non Persistent Permanent Persistent14. Your application has a requirement for dedicated hardware to manage cryptographic keys, which service should you choose to generate, store and manage your keys? CloudHSM SSE-C MFA15. Which class of storage is most appropriate for archiving data that you need to keep but rarely need to access? Glacier IA One Zone IA16. You need to run a SQL query on your CloudTrail logs stored in S3, which service can you use to do this? RDS Athena DynamoDB17. Which of the following services allow you to enable encryption after creation? S3 object or bucket RDS database Elastic File System18. What is the maximum size for a file stored in S3? 5GB 500GB 5TB19. Which AWS service allows you to use S3 as your primary storage and store a copy of only the most frequently accessed files locally in your own data center? Cache Gateway Volume Gateway - Gateway Cached Volume Gateway - Gateway Stored20. Which of the following is true in relation to a custom AMI? (Choose 3) You can share a custom AMI with specific AWS accounts You cannot share an AMI with any other AWS accounts You can make a custom AMI public so that any other AWS account can use it By default a custom AMI is private and only your own AWS account can use it21. You are about to launch a new EC2 instance with an EBS root device volume. Which of the following statements is true? (Choose 2) If you stop the instance you will lose your data By default, additional EBS volumes attached to the instance will be deleted when the instance is terminated By default, if you terminate the instance, the root device will also be terminated You can disable delete-on-termination for the EBS volume when you launch the instance22. You have an EC2 instance which is backed by an Instance Store volume. Which of the following statements is true? (Choose 3) If you shut down the OS in the instance you will lose your data If you terminate the instance you will lose your data If the underlying physical disk drive fails you will lose your data If you reboot the instance you will lose your data23. You are planning to deploy a production database to EC2 and need to choose the best storage type. You anticipate that at your busiest times, you will need a maximum of 20,000 IOPS, and an average of 8,000 - 10,000 IOPS. What storage medium should you choose? Provisioned IOPS Magnetic Storage General Purpose SSD24. You are migrating 500TB of image data into S3 and you estimate that it is going to take over a week for the transfer if you use the spare capacity on your internet link. What should you do? Upgrade your network to enable faster upload speeds Use Snowball to transport the data Use CloudFront to transfer the data25. You are migrating 500TB of scientific data into S3. The data also needs to be converted from EBCDIC to a stream compressed ASCII format (protobuf) format. You estimate that it is going to take over a week for the transfer if you use the spare capacity on your internet link. What should you do? Transform the data in-house and use CloudFront to transfer the data Use Snowball Edge to transform and transport the data Transform the data in-house and use Snowball to transport the data26. You have been asked to enable encryption at rest on your EFS file system. What should you do? Explain that it is not possible to encrypt an existing EFS file system. Select KMS default encryption in the configuration settings of the file system. Enable encryption in transit for all systems connecting to the file system.27. Which AWS feature allows you to manage your objects to ensure that they are stored using the most cost-effective category of storage? S3 Lifecycle Rules Systems Manager Trusted Advisor28. In addition to choosing the correct EBS volume type for your specific task, what else can be done to increase the performance of your volume? (Choose 3) Schedule snapshots of HDD based volumes for periods of low use Never use HDD volumes, always ensure that SSDs are used Ensure that your EC2 instances are types that can be optimized for use with EBS Stripe volumes together in a RAID 0 configuration.29. Which class of storage is most appropriate to use for storing mission critical production data? One Zone IA Standard S3 Glacier30. You have an EC2 instance which is backed by an Instance Store volume. Which of the following statements is true? (Choose 3) If the underlying physical disk drive fails you will lose your data If you reboot the instance you will lose your data If you terminate the instance you will lose your data If you shut down the OS in the instance you will lose your data31. What is the difference between KMS and CloudHSM? (Choose 2) CloudHSM is multi-tenancy KMS is multi-tenancy CloudHSM allows you to have dedicated hardware KMS allows you to have dedicated hardware32. Which of the following statements is incorrect? Athena is a SQL database33. You are about to launch a new EC2 instance with an EBS root device volume. Which of the following statements is true? (Choose 2) By default, if you terminate the instance, the root device will also be terminated By default, additional EBS volumes attached to the instance will be deleted when the instance is terminated You can disable delete-on-termination for the EBS volume when you launch the instance If you stop the instance you will lose your data34. What is Athena? A query service which allows you to run Map Reduce queries on data stored in S3 A query service which allows you to run SQL queries on data stored in S3 A SQL database backed by S335. Which of the following pairs of actions can best be used to restrict access to data in S3? Using S3 Virtual Hosting; setting an S3 ACL on the bucket or the object. Creating a CloudFront distribution for the bucket; setting an S3 bucket policy. Setting an S3 bucket policy; setting an S3 ACL on the bucket or the object.36. Which of the following can you achieve using S3 Lifecycle policies? (Choose 2) Transition files to Infrequently Accessed storage if they haven't been accessed in the past 90 days Transition objects to Infrequently Accessed storage 90 days after you created them Delete files 5 years after creating them Delete files if they haven't been accessed in the past year37. You are planning to upload a set of objects to S3, which parameter can you add to the PUT request header to ensure that encryption using AWS KMS is used to encrypt your files? x-ams-server-side-encryption: AES256 x-amz-server-side-encryption: aws:kms amz-x-server-side-encryption: aws:kms38. You are supporting a large application which runs on 200 EC2 instances located in us-east-1. You would like to share a number of files between the application servers. Which of the following is the best approach for storing these files so that all the servers can access them? DynamoDB Glacier EFS39. You are planning to upload a set of objects to S3, which parameter can you add to the PUT request header to ensure that encryption using AWS KMS is used to encrypt your files? x-kms-server-side-encryption: AES256 amz-x-server-side-encryption: aws:kms x-amz-server-side-encryption: aws:kms40. Which of the following strategies can be used to restrict access to data in S3? Enable IAM Identity Federation Set an S3 bucket policy Configure MFA delete41. Which class of storage is most appropriate to use for storing mission critical production data? Reduce Redundancy Storage Standard S3 One Zone IA42 out of 5Please fill in the comment box below. Email
