A company is deploying an application on Amazon EC2 instances in multiple Availability Zones. The instances will access and share data using file system interfaces. The volume of data is small but expected to increase significantly over time.

What is the MOST scalable storage solution for these requirements?

A SysOps Administrator is monitoring an Amazon Aurora database and received a “inaccessible-encryption-credentials” DB instance status message and has become inaccessible. What is the explanation for this error?

A VPC peering connection has been established between two VPCs in different AWS Regions in the same account. A SysOps administrator is attempting to update the security group configuration to allow inbound connections over HTTP from a security group in the second Region and is unable to complete the configuration. What could be the cause of the issue?

A manager has requested that Developers using a dedicated testing account should only be able to use the t2.micro instance type. A SysOps Administrator has created an AWS Organizations SCP and applied it to the correct OU. However, Developers are still able to launch other instance types. What needs to be corrected in the SCP policy statement?

A SysOps Administrator has been tasked with deploying a web application on two Amazon EC2 instances behind an Application Load Balancer (ALB). The database layer will also run on two EC2 instances. The deployment must include high availability across Availability Zones (AZs) and public access must be limited as much as possible.

How should this be achieved within an Amazon VPC?

An Amazon EBS gp2 volume is running low on space. How can this be resolved with MINIMAL effort?

A company needs to track the allocation of Reserved instance discounts in the company’s consolidated bill.

Which AWS tool can be used to find this information?

The performance of an Amazon RDS MySQL database has been suffering during a recent busy period. A SysOps Administrator noticed that database queries were running more slowly than is acceptable. Amazon CloudWatch metrics show that the CPU utilization was reaching close to 100%.

Which action should the Administrator take to resolve this issue?

Change control procedures at a company mandate that all production changes in the infrastructure must be carefully reviewed before deploying updates to their AWS CloudFormation stacks.

Which action will allow an Administrator to understand the impact of these changes before implementation?

A SysOps Administrator manages a fleet of Amazon EC2 instances running a distribution of Linux. The operating systems are patched on a schedule using AWS Systems Manager Patch Manager. Users of the application have complained about poor response times when the systems are being patched.

What can be done to ensure patches are deployed automatically with MINIMAL customer impact?

A SysOps Administrator has created an Amazon VPC with an IPv6 CIDR block. Amazon EC2 instances in the VPC should be able to connect to IPv6 domains on the internet but connectivity from the internet should be restricted.

What must be configured to enable the required connectivity?

A SysOps Administrator manages some critical applications that run on several Amazon EC2 instances. The Administrator needs to ensure that the EC2 instances are automatically recovered if they become impaired due to an underlying hardware failure.

Which service can the Administrator use to monitor and recover the EC2 instances?

A manager has requested that all Amazon S3 buckets must have logging enabled due to compliance requirements. A SysOps Administrator needs to ensure that the compliance requirements are met whilst allowing teams to continue to create S3 buckets.

How can this be achieved for both existing and new S3 buckets?

A Company is planning to deploy a workload that requires Payment Card Industry (PCI) compliance. The security team has requested information on the PCI compliance status of the AWS infrastructure.

Which AWS tool will provide the necessary information?

A company manage an application that is deployed on Amazon EC2 instances within a private subnet. The EC2 instances must be restricted from the internet for security and compliance reasons. The SysOps team must be able to manage the instances from the corporate office using the SSH protocol.

Which combination of actions should be taken to permit SSH access to the EC2 instances while meeting the security and compliance requirements? (Select TWO.)

Users of a web application that is served using Amazon CloudFront have complained about receiving 4XX and 5XX errors. A SysOps Administrator wants to monitor for elevated error rates in Amazon CloudFront. Which metric should be monitored?

A company runs a critical production application that uses an Amazon RDS MySQL database. The SysOps Administrator needs to ensure that downtime is kept to a minimum in the event o fa database failure. Any changes that are required must not impact the customer experience during business hours.

Which action will make the database MORE highly available?

A company uses AWS Organizations with consolidated billing for several AWS accounts. The CEO is concerned about rising costs and has asked a SysOps Administrator to determine what is causing the increase.

What is the MOST comprehensive tool that will accomplish this task?

An application is deployed on three separate environments using AWS CloudFormation. The environments, development, test, and production, each require unique credentials to access external services.

Which option provides a secure means for providing the required credentials with a MINIMUM of operational overhead?

An application is being deployed that hosts highly sensitive data that must not be leaked outside of the company. A security team has asked a SysOps Administrator to configure the environment to address this concern.

How can the Administrator ensure that the servers in the VPC cannot send traffic to the internet?