Your success in Amazon aws sysops exam dumps is our sole target and we develop all our aws certified sysops administrator associate level dumps braindumps in a way that facilitates the attainment of this target. Not only is our aws sysops pdf study material the best you can find, it is also the most detailed and the most updated. aws certified sysops administrator associate level dumps Practice Exams for Amazon aws sysops certification dumps are written to the highest standards of technical accuracy.

Q185. - (Topic 3) 

A user runs the command “dd if=/dev/xvdf of=/dev/null bs=1M” on an EBS volume created from a snapshot and attached to a Linux instance. Which of the below mentioned activities is the user performing with the step given above? 

A. Pre warming the EBS volume 

B. Initiating the device to mount on the EBS volume 

C. Formatting the volume 

D. Copying the data from a snapshot to the device 

Answer: A 

Explanation: 

When the user creates an EBS volume and is trying to access it for the first time it will encounter reduced IOPS due to wiping or initiating of the block storage. To avoid this as well as achieve the best performance it is required to pre warm the EBS volume. For a volume created from a snapshot and attached with a Linux OS, the “dd” command pre warms the existing data on EBS and any restored snapshots of volumes that have been previously fully pre warmed. This command maintains incremental snapshots; however, because this operation is read-only, it does not pre warm unused space that has never been written to on the original volume. In the command “dd if=/dev/xvdf of=/dev/null bs=1M” , the parameter “if=input file” should be set to the drive that the user wishes to warm. The “of=output file” parameter should be set to the Linux null virtual device, /dev/null. The “bs” parameter sets the block size of the read operation; for optimal performance, this should be set to 1 MB. 


Q186. - (Topic 3) 

How can an EBS volume that is currently attached to an EC2 instance be migrated from one Availability Zone to another? 

A. Simply create a new volume in the other AZ and specify the original volume as the source. 

B. Detach the volume, then use the ec2-migrate-volume command to move it to another AZ. 

C. Create a snapshot of the volume, and create a new volume from the snapshot in the other AZ. 

D. Detach the volume and attach it to another EC2 instance in the other AZ. 

Answer: D 

Explanation: Reference: 

http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumes.html 


Q187. - (Topic 2) 

A user has created a photo editing software and hosted it on EC2. The software accepts requests from the user about the photo format and resolution and sends a message to S3 to enhance the picture accordingly.Which of the below mentioned AWS services will help make a scalable software with the AWS infrastructure in this scenario? 

A. AWS Glacier 

B. AWS Elastic Transcoder 

C. AWS Simple Notification Service 

D. AWS Simple Queue Service 

Answer: D 

Explanation: 

Amazon Simple Queue Service (SQS. is a fast, reliable, scalable, and fully managed message queuing service. SQS provides a simple and cost-effective way to decouple the components of an application. The user can configure SQS, which will decouple the call between the EC2 application and S3. Thus, the application does not keep waiting for S3 to provide the data. 


Q188. - (Topic 3) 

A user has launched 5 instances in EC2-CLASSIC and attached 5 elastic IPs to the five different instances in the US East region. The user is creating a VPC in the same region. The user wants to assign an elastic IP to the VPC instance. How can the user achieve this? 

A. The user has to request AWS to increase the number of elastic IPs associated with the account 

B. AWS allows 10 EC2 Classic IPs per region; so it will allow to allocate new Elastic IPs to the same region 

C. The AWS will not allow to create a new elastic IP in VPC; it will throw an error 

D. The user can allocate a new IP address in VPC as it has a different limit than EC2 

Answer: D 

Explanation: Section: (none) 

A Virtual Private Cloud (VPC. is a virtual network dedicated to the user’s AWS account. A user can create a subnet with VPC and launch instances inside that subnet. A user can have 5 IP addresses per region with EC2 Classic. The user can have 5 separate IPs with VPC in the same region as it has a separate limit than EC2 Classic. 


Q189. - (Topic 2) 

A user has created a VPC with CIDR 20.0.0.0/24. The user has created a public subnet with CIDR 20.0.0.0/25. The user is trying to create the private subnet with CIDR 20.0.0.128/25. Which of the below mentioned statements is true in this scenario? 

A. It will not allow the user to create the private subnet due to a CIDR overlap 

B. It will allow the user to create a private subnet with CIDR as 20.0.0.128/25 

C. This statement is wrong as AWS does not allow CIDR 20.0.0.0/25 

D. It will not allow the user to create a private subnet due to a wrong CIDR range 

Answer: B 

Explanation: 

When the user creates a subnet in VPC, he specifies the CIDR block for the subnet. The CIDR block of a subnet can be the same as the CIDR block for the VPC (for a single subnet in the VPC., or a subset (to enable multiple subnets.. If the user creates more than one subnet in a VPC, the CIDR blocks of the subnets must not overlap. Thus, in this case the user has created a VPC with the CIDR block 20.0.0.0/24, which supports 256 IP addresses (20.0.0.0 to 20.0.0.255.. The user can break this CIDR block into two subnets, each supporting 128 IP addresses. One subnet uses the CIDR block 20.0.0.0/25 (for addresses 20.0.0.0 - 20.0.0.127. and the other uses the CIDR block 20.0.0.128/25 (for addresses 20.0.0.128 - 20.0.0.255.. 


Q190. - (Topic 3) 

An organization has setup multiple IAM users. The organization wants that each IAM user accesses the IAM console only within the organization and not from outside. How can it achieve this? 

A. Create an IAM policy with the security group and use that security group for AWS console login 

B. Create an IAM policy with a condition which denies access when the IP address range is not from the organization 

C. Configure the EC2 instance security group which allows traffic only from the organization’s IP range 

D. Create an IAM policy with VPC and allow a secure gateway between the organization and AWS Console 

Answer: B 

Explanation: 

AWS Identity and Access Management is a web service which allows organizations to manage users and user permissions for various AWS services. The user can add conditions as a part of the IAM policies. The condition can be set on AWS Tags, Time, and Client IP as well as on many other parameters. If the organization wants the user to access only from a specific IP range, they should set an IAM policy condition which denies access when the IP is not in a certain range. E.g. The sample policy given below denies all traffic when the IP is not in a certain range. 

"Statement": [{ 

"Effect": "Deny", 

"Action": "*", 

"Resource": "*", 

"Condition": { 

"NotIpAddress": { 

"aws:SourceIp": ["10.10.10.0/24", "20.20.30.0/24"] 

} 

} 

}] 


Q191. - (Topic 3) 

A user has created a VPC with CIDR 20.0.0.0/16. The user has created one subnet with CIDR 20.0.0.0/16 by mistake. The user is trying to create another subnet of CIDR 20.0.0.1/24. How can the user create the second subnet? 

A. There is no need to update the subnet as VPC automatically adjusts the CIDR of the first subnet based on the second subnet’s CIDR 

B. The user can modify the first subnet CIDR from the console 

C. It is not possible to create a second subnet as one subnet with the same CIDR as the VPC has been created 

D. The user can modify the first subnet CIDR with AWS CLI 

Answer: D 

Explanation: 

A Virtual Private Cloud (VPC. is a virtual network dedicated to the user’s AWS account. A user can create a subnet with VPC and launch instances inside the subnet. The user can create a subnet with the same size of VPC. However, he cannot create any other subnet since the CIDR of the second subnet will conflict with the first subnet. The user cannot modify the CIDR of a subnet once it is created. Thus, in this case if required, the user has to delete the subnet and create new subnets. 


Q192. - (Topic 1) 

You are attempting to connect to an instance in Amazon VPC without success You have already verified that the VPC has an Internet Gateway (IGW) the instance has an associated Elastic IP (EIP) and correct security group rules are in place. 

Which VPC component should you evaluate next? 

A. The configuration of a NAT instance 

B. The configuration of the Routing Table 

C. The configuration of the internet Gateway (IGW) 

D. The configuration of SRC/DST checking 

Answer: B 

Explanation: Reference: 

http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/UserScenariosF orVPC.html