Free AWS-CERTIFIED-SYSOPS-ADMINISTRATOR-ASSOCIATE Amazon AWS-CERTIFIED-SYSOPS-ADMINISTRATOR-ASSOCIATE Practice Test Question - Page 14

Question 40 (Topic 1)

A SysOps administrator needs to create an Amazon S3 bucket as a resource in an AWS CloudFormation template. The bucket name must be randomly generated, and the bucket must be encrypted. Other resources in the template will reference the bucket. Which CloudFormation resource definition should the SysOps administrator use to meet these requirements?

Select an option, then click Submit answer.

○
○
○
○

Reference / correct answer:

Most accepted answer: B.

Community votes: A=1, B=5

Selected Answer: B I would go for B upvoted 1 times

D is wrong because null values on the property is not allowed. Hence B is correct. upvoted 2 times

Selected Answer: A Resources: MyS3Bucket: Type: AWS::S3::Bucket Properties: BucketName: !Sub "my-s3-bucket-${AWS::AccountId}-${AWS::Region}-${AWS::StackName}-${AWS::StackId}" AccessControl: Private # or the desired access control policy Encryption: ServerSideEncryptionConfiguration: - ServerSideEncryptionByDefault: SSEAlgorithm: AES256 # or any other encryption algorithm upvoted 1 times null0xAF 1 year, 12 months ago lol How did you pick A and give explanation that uses Sub to insert a unique name. . . Answer A literally states a Bucket name of "DOC-EXAMPLE-BUCKET" this is a static name. . . When you want a unique randomly generated name, which you get if you don't specify the bucketname... your explanation makes 0 sense. upvoted 1 times ... r2c3po 2 years, 1 month ago Make sure to adjust the bucket name or other properties based on your specific requirements. upvoted 1 times ...

lol How did you pick A and give explanation that uses Sub to insert a unique name. . . Answer A literally states a Bucket name of "DOC-EXAMPLE-BUCKET" this is a static name. . . When you want a unique randomly generated name, which you get if you don't specify the bucketname... your explanation makes 0 sense. upvoted 1 times

Make sure to adjust the bucket name or other properties based on your specific requirements. upvoted 1 times

Question 41 (Topic 1)

A SysOps administrator configured VPC flow logs by using the default format. The SysOps administrator specified Amazon CloudWatch Logs as the destination. This solution has worked successfully for several months. However, because of additional troubleshooting requirements, the SysOps administrator needs to include the tcp-flags field on the flow logs. What should the SysOps administrator do to meet this requirement?

Select an option, then click Submit answer.

○ Create a new flow log. Include the tcp-flags field in the custom log format. Delete the original flow log.
○ In the CloudWatch Logs log group, modify the filter to include the tcp-flags field and the type field.
○ In CloudWatch Metrics, modify the metric configuration to include the tcp-flags field.
○ Modify the existing flow log. Include the tcp-flags field and the type field in the custom log format. Save the configuration.

Reference / correct answer:

Create a new flow log. Include the tcp-flags field in the custom log format. Delete the original flow log.

Most accepted answer: A. Create a new flow log. Include the tcp-flags field in the custom log format. Delete the original flow log.

Community votes: A=3

Answer is A. tcp-flags are not included into default format. If you want to have tcp-flags, you should use custom log format. You can't modify existing flow log. https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html upvoted 9 times

Selected Answer: A A: Create a new flow log. Include the tcp-flags field in the custom log format. Delete the original flow log. "After you create a flow log, you cannot change its configuration or the flow log record format. For example, you can't associate a different IAM role with the flow log, or add or remove fields in the flow log record. Instead, you can delete the flow log and create a new one with the required configuration." https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html#flow-logs-limitations upvoted 3 times

Selected Answer: A A. Create a new flow log. Include the tcp-flags field in the custom log format. Delete the original flow log. This way, you can create a new flow log with the desired log format, including the tcp-flags field, and then switch to using the new flow log configuration. upvoted 2 times

Answer is A. upvoted 2 times

Selected Answer: A https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html#flow-logs-limitations upvoted 2 times

Question 42 (Topic 1)

A custom application must be installed on all Amazon EC2 instances. The application is small, updated frequently, and can be installed automatically. How can the application be deployed on new EC2 instances?

Select an option, then click Submit answer.

○ Launch a script that downloads and installs the application using Amazon EC2 user data.
○ Create a custom API using Amazon API Gateway to call an installation executable from an AWS CloudFormation template.
○ Use AWS Systems Manager to inject the application into an AMI.
○ Configure AWS CodePipeline to deploy code changes and updates.

Reference / correct answer:

Launch a script that downloads and installs the application using Amazon EC2 user data.

Most accepted answer: A. Launch a script that downloads and installs the application using Amazon EC2 user data.

Community votes: A=4, D=3

Selected Answer: D Option D is the answer since it addresses the frequent updates issue as well whereas A does not. upvoted 1 times

Option A - key word "NEW EC2 instances" . We are interested only this app to be present in newly created EC2, question is not how to maintain app version in long-term... For me "update frequently" is to guide that this app should not be part of the AMI - (thus not option C). upvoted 3 times

Selected Answer: A This is the most appropriate solution for your use case. Amazon EC2 user data is a feature that allows you to pass a script or a set of commands to the instance at launch time. This script can be used to download and install the custom application automatically when a new EC2 instance is launched. This is a simple and effective way to deploy the application, especially since it is small, updated frequently, and can be installed automatically. Key words: new instance -> user data scripts run only during the first boot cycle when an EC2 instance is launched. upvoted 1 times

Selected Answer: D Not A => By default, user data scripts run only during the first boot cycle when an EC2 instance is launched. "A" does not solve "update frequently" upvoted 1 times

Selected Answer: A deployed on NEW ec2 instances upvoted 2 times

Free AWS-CERTIFIED-SYSOPS-ADMINISTRATOR-ASSOCIATE – Amazon AWS-CERTIFIED-SYSOPS-ADMINISTRATOR-ASSOCIATE Practice Test Question