Visit Official SkillCertPro Website :-
For a full set of 760 questions. Go to
https://skillcertpro.com/product/aws-cloudops-engineer-associate-exam-questions/
SkillCertPro offers detailed explanations to each question which helps to understand the concepts better.
It is recommended to score above 85% in SkillCertPro exams before attempting a real exam.
SkillCertPro updates exam questions every 2 weeks.
You will get life time access and life time free updates
SkillCertPro assures 100% pass guarantee in first attempt.
Question 1:
Which of the below instances is normally used as a jump server to access EC2 instances in a private subnet in a VPC. Choose an answer from the options below
A.Bastion Host
B.Primary Host
C.Backup Host
D.Secondary Host
Answer: A
Explanation:
A bastion host is a special purpose computer on a network specifically designed and configured to withstand attacks. The computer generally hosts a single application, for example a proxy server, and all other services are removed or limited to reduce the threat to the computer.
In AWS, A bastion host is kept on a public subnet. Users log on to the bastion host via SSH or RDP and then use that session to manage other hosts in the private subnets.
This is a security practice adopted by many organization to secure the assets in their private subnets.
Question 2:
How can you ensure maximum protection of preserved versions in S3? Choose one answer from the options below.
A.Versioning
B.Encryption
C.MFA Delete
D.None of the above
Answer: C
Explanation:
MFA Delete (Multi-Factor Authentication Delete) provides the highest level of protection for preserved versions in S3. This feature requires two forms of authentication (e.g., a password and a code from a physical security token) before a version can be deleted. This helps prevent accidental or unauthorized deletion of important data.
While Versioning and Encryption are also important security measures, they do not provide the same level of protection against accidental or unauthorized deletion as MFA Delete. Versioning enables you to preserve multiple versions of an object, but it does not prevent deletion. Encryption protects the data from unauthorized access, but it does not prevent deletion.
Question 3:
Which feature in AWS helps to consolidate payment for multiple Amazon Web Services (AWS) accounts or multiple Amazon International Services? Choose an answer from the options below
A.Consolidating Costing
B.Consolidated Billing
C.Consolidating Accounting
D.None of the above
Answer: B
Explanation:
You can use the Consolidated Billing feature to consolidate payment for multiple Amazon Web Services (AWS) accounts or multiple Amazon International Services Pvt. Ltd (AISPL) accounts within your organization by designating one of them to be the payer account. With Consolidated Billing, you can see a combined view of AWS charges incurred by all accounts, as well as get a cost report for each individual account associated with your payer account. Consolidated Billing is offered at no additional charge. AWS and AISPL accounts cannot be consolidated together.
For more information on consolidated billing, please go to the below link:
http://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/consolidated-billing.html
Question 4:
By default, It is possible to share an AMI between regions. State whether True or False?
A. TRUE
B. FALSE
Answer: B
Explanation:
By default we cannot share an AMI between regions. If we need to share AMI’s between regions it needs to be copied to the new region first.
We can copy an Amazon Machine Image (AMI) within or across an AWS region using the AWS Management Console, the AWS command line tools or SDKs, or the Amazon EC2 API, all of which support the CopyImage action.
AMI Copy enables you to easily copy your Amazon Machine Images between AWS Regions.
For more information on copying AMI’s, please visit the link:
https://aws.amazon.com/blogs/aws/ec2-ami-copy-between-regions/
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/CopyingAMIs.html
Question 5:
Is it possible to disable a cloudwatch alarm at any time?
A.True
B.False
Answer: A
Explanation:
You can use the below CLI command to disable a cloudwatch alarm.
AWS cloudwatch disable-alarm-actions –alarm-names myalarm
Disables the actions for the specified alarms. When an alarm’s actions are disabled, the alarm actions do not execute when the alarm state changes.
For more information on cloudwatch, please visit the link:
https://aws.amazon.com/cloudwatch/
For a full set of 760 questions. Go to
https://skillcertpro.com/product/aws-cloudops-engineer-associate-exam-questions/
SkillCertPro offers detailed explanations to each question which helps to understand the concepts better.
It is recommended to score above 85% in SkillCertPro exams before attempting a real exam.
SkillCertPro updates exam questions every 2 weeks.
You will get life time access and life time free updates
SkillCertPro assures 100% pass guarantee in first attempt.
Question 6:
What are the different logs that you can monitor via the MY SQL or MariaDB service in AWS? Choose 3 answers from the options below
A.Error Log
B.Transaction Log
C.Slow Query Log
D.General Log
Answer: A, C and D
Explanation:
You can monitor the MySQL error log, slow query log, and the general log. The MySQL error log is generated by default; you can generate the slow query and general logs by setting parameters in your DB parameter group. Amazon RDS rotates all of the MySQL log files; the intervals for each type are given following.
You can monitor the MySQL logs directly through the Amazon RDS console, Amazon RDS API, Amazon RDS CLI, or AWS SDKs. You can also access MySQL logs by directing the logs to a database table in the main database and querying that table. You can use the mysqlbinlog utility to download a binary log.
Since AWS rotates the logs, it’s better to store the logs in a DB to ensure you archive all the logs and you can then have the ability to find the errors in the log based on the date.
For more information on the MySQL logs, please visit the link:
https://aws.amazon.com/premiumsupport/knowledge-center/rds-mysql-logs/
http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_LogAccess.Concepts.MySQL.html
Note:
Using all RDS databases we can’t access slow query logs.
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_LogAccess.html
Based on above link, Slow query not present on PostgreSQL, Oracle, Microsoft SQL Server.
Question 7:
How are EBS snapshots saved on Amazon S3?
A.Exponentially
B.Entirely
C.They are not stored in S3
D.Incrementally
Answer: D
Explanation:
You can back up the data on your EBS volumes to Amazon S3 by taking point-in-time snapshots. Snapshots are incremental backups, which means that only the blocks on the device that have changed after your most recent snapshot are saved. This minimizes the time required to create the snapshot and saves on storage costs. When you delete a snapshot, only the data unique to that snapshot is removed. Active snapshots contain all of the information needed to restore your data (from the time the snapshot was taken) to a new EBS volume.
For more information on EBS snapshots, please visit URL:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSSnapshots.html
Question 8:
An application in AWS is currently running in the Singapore region. You have been asked to implement disaster recovery. So if the application goes down in the Singapore region, it has to be started in the Tokyo region. You application relies on pre-built AMIs. As part of your disaster recovery strategy, which of the below points should you consider.
A.Nothing, because all AMI's de default are available in any region as long as it is created within the same account
B.Copy the AMI from the Singapore region to the Tokyo region
C.Modify the image permissions and share the AMI to the Tokyo region
D.Modify the image permissions to share the AMI with another account, then set the default region to the backup region
Answer: B
Explanation:
If you need an AMI across multiple regions , then you have to copy the AMI across regions. Note that by default AMI’s that you have created will not be available across all regions. So option A is automatically invalid.
Next you can share AMI’s with other users, but they will not be available across regions. So option C and D is invalid. You have to copy the AMI across regions.
To copy AMI’s , follow the below steps
Step 1) The first step is to create an AMI from your running instance by choosing on Image->Create Image.
Step 2) Once the Image has been created, go to the AMI section in the EC2 dashboard and click on the Copy AMI option.
Step 3 ) In the next screen , you can specify where to copy the AMI to.
For the entire details to copy AMI’s , please visit the link:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/CopyingAMIs.html
Question 9:
To protect S3 data from both accidental deletion and accidental overwriting, you should
A.Enable Multi-Factor Authentication (MFA) protected access
B.Disable S3 delete using an IAM bucket policy
C.Access S3 data using only signed URLs
D.Enable S3 versioning on the bucket
Answer: D
Explanation:
To protect objects in S3 from both accidental deletion and accidental overwriting, the methodology adopted by AWS is to Enable versioning on the bucket. Versioning allows to store every version of an object , so that if by mistake there is a version deleted , you can recover other versions, because the entire object is not deleted.
Enable Multi-Factor Authentication (MFA) protected access on S3 is only used to add an additional security layer to S3. So that users who are authenticated properly before having access to the bucket. But this is not what the question is asking.
To enable versioning on S3 , you need to go to the bucket , and in the properties , you can enable versioning.
For more information on S3, please visit the link:
https://aws.amazon.com/s3/faqs/
Question 10:
In order to optimize performance for a compute cluster that requires low inter-node latency, which feature in the following list should you use?
A.AWS Direct Connect
B.Placement Groups
C.VPC private subnets
D.EC2 Dedicated Instances
E.Multiple Availability Zones
Answer: B
Explanation:
A placement group is a logical grouping of instances within a single Availability Zone. Placement groups are recommended for applications that benefit from low network latency, high network throughput, or both. To provide the lowest latency, and the highest packet-per-second network performance for your placement group, choose an instance type that supports enhanced networking
For more information on placement groups please visit the URL:
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/placement-groups.html
For a full set of 760 questions. Go to
https://skillcertpro.com/product/aws-cloudops-engineer-associate-exam-questions/
SkillCertPro offers detailed explanations to each question which helps to understand the concepts better.
It is recommended to score above 85% in SkillCertPro exams before attempting a real exam.
SkillCertPro updates exam questions every 2 weeks.
You will get life time access and life time free updates
SkillCertPro assures 100% pass guarantee in first attempt.