Section-Based – Storage and Data Management (SysOps)

A government organization has implemented a file gateway to keep copies of the home drives of their employees in a separate S3 bucket. As the CloudOps Engineer, you noticed that most files are rarely accessed after 60 days but it is required that the files should still be available immediately in the event of a surprise audit.

In this scenario, what can you do to reduce the storage costs while continuing to provide access to the files for the employees?

An online stock trading application is extensively using an Amazon S3 bucket with Cross-Region Replication to store client data. To comply with financial regulatory requirements, it is necessary to generate a report on the replication and encryption status of all objects stored in the bucket. The report should show which type of server-side encryption is being used by each object.

How can the CloudOps Engineer of the company meet the above requirement with the LEAST amount of effort?

A Systems Administrator needs to set up a file system that is accessible to individuals across the organization, and establish permissions for each user and group at the file or directory level. The file system should provide storage to access and share common data sets across multiple Amazon EC2 instances in different Availability Zones. The administrator also plans to use IAM user groups to manage access policies for the file system at the organizational level.

Which of the following options should the administrator use to meet this requirement?

As part of the yearly AWS data cleanup, you need to delete all unused S3 buckets and their contents. The tutorialsdojo bucket, which contains several educational video files, has both the Versioning and MFA Delete features enabled. One of your Systems Engineers who have an Administrator account tried to delete an S3 bucket using the aws s3 rb s3://tutorialsdojo command. However, the operation fails even after repeated attempts.

Which of the following are valid options that you can implement to properly delete the bucket? (Select TWO.)

A research agency is performing a migration operation with its production file server to AWS. The CloudOps Engineer is required to ensure that the data stored on the file server in AWS will remain accessible even if an Availability Zone (AZ) is unavailable, system maintenance is ongoing, or unplanned service disruption occurs. In addition, users should be able to interact with the file server via SMB protocol and manage file permissions using Windows Access Control Lists (ACLs).

Which cloud solution can help the CloudOps Engineer accomplish the requirements?

A popular online graphic design tool startup uses a standard S3 bucket that has versioning enabled to store the user-generated images on its platform. They have millions of users around the globe that store their logos, graphics, infographics, and other designs on their platform. Lately, there are a lot of users complaining that they receive a lot of HTTP 503 responses on the platform.

Which of the following options could be the reason why this issue exists?

A document management system that is hosted in AWS uses an S3 bucket to store its data. Due to a recent cyberattack, the IT Security department mandated that all objects must be encrypted at rest.

Which of the following is a valid option to use to fulfill this requirement? (Select TWO.)

A technology consulting company launched an RDS-MySQL Instance that will host a heavily used relational database. Manual snapshots of the database are done on schedule when the company conducts its disaster recovery activities. To meet the strict compliance requirement, the CloudOps Engineer needs to ensure that there are no outages when a snapshot is being created for the database.

Which of the following options is the best way to accomplish this?

A Cloud Ops Engineer plans to set up a disaster and recovery plan in AWS. The requirement is to establish a durable, highly available backup and archiving strategy for the company-owned financial documents, which should be accessible immediately for 6 months. It is expected that there would be a compliance audit every 3 years. The Engineer needs to ensure that the files are still available during that period.

Which service should the Engineer use to fulfill these requirements in the most cost-effective manner?

A company is using several S3 buckets to store important inventory records of the online supply chain portal. They have an internal management application hosted on a private subnet of the VPC that needs to modify the contents of the S3 bucket and send a report to a partner company via the public Internet. The CloudOps Engineer has created a gateway VPC endpoint for S3 as preparation for this requirement.

Which of the following actions should the Engineer do next?

A company would like to hire a new Administrators who will manage the backups of their AWS resources. However, doing so will increase the company’s operating expenses, and thus, they are looking for ways to automate their processes to cut costs. The company is using point-in-time snapshots of its resources provisioned on AWS.

Which of the following services provides you with a user-configurable automatic backup service and storage scaling without the need for regular user intervention? (Select TWO)

A company plans to migrate a legacy web application to AWS Cloud. All the networking and security components are already in place, and now it is necessary to design the web application to be scalable. It would be too costly to redesign the database schema to a NoSQL database; hence, it maintains a relational database structure. Employees also frequently use the web application to access customer information. The monitoring plan includes tracking ALBRequestCountPerTarget to ensure even distribution of traffic across the web servers.

What resources should be provisioned to set up a scalable web application?

An application is deployed on us-east1 that runs on Amazon EC2 instances in an Auto Scaling Group called asg-prod. An Application Load Balancer is configured to target the asg-prod when forwarding traffic from Route 53. The CloudOps Engineer needs to configure an Amazon CloudWatch alarm if all instances behind the ALB become unhealthy.

Which condition should be used in CloudWatch?

A photo-sharing company is hosting an application on an Amazon EC2 instance that allows users to upload images. The application saves the images on an Amazon S3 bucket in us-east-2. The company has also enabled AWS-ConfigureS3BucketLogging to track upload activity and monitor access patterns. Recently, users have been experiencing load-time issues when uploading images to the application. The website is popular in countries away from us-east-2.

Which of the following should the CloudOps Engineer do to address the issue?

A startup is finally taking off with its new blockchain application. The increasing number of users demands additional storage capacities. Backups of the application’s transactions will also need to be stored somewhere with strong security and durability. To save costs, the CloudOps Engineer decided to take advantage of AWS’s virtually unlimited storage capacity. However, the organization also wants to keep frequently accessed application data on-premises.

What would be a viable strategy to complement AWS storage services with the application?

A company is currently using S3 to store their confidential financial data. Due to the recent growth of cyber attack cases, your superiors are getting worried about the security of their data hosted in AWS. As an added security, you are instructed that whenever you upload an object in a bucket, Amazon S3 should use the encryption key that you provide to apply AES-256 encryption to your data. Once the process is done, it should then remove the encryption key from memory.

Which of the following options can help protect the files in the S3 bucket?

A Junior DevOps Engineer accidentally deleted an important financial transaction file from an S3 bucket. The lost file is not reproducible anymore hence, the manager instructed you to secure the objects hosted in the bucket and prevent the recurrence of the issue.

Which of the following can help you meet this requirement?

An accounting firm needs to transfer thousands of sensitive and confidential report files from a site to an Amazon S3 bucket. In order to acquire an ISO/IEC 27001 security certification, it is essential to ensure that all files are secured and encrypted.

Which of the following options can satisfy this requirement?

A FinTech startup has an application hosted in a Spot Fleet of Amazon EC2 instances and uses Amazon RDS for its database. Based on the system monitoring, the SysOps Administrator noticed that the database performs poorly on heavily used SQL data queries and decided to optimize the reporting queries of the application. However, the issue still persists after making the change.

Which combination of the following options can the Administrator implement to resolve this performance issue? (Select TWO.)

A CloudOps Engineer for a software development company is using a series of EBS snapshots for their EC2 instances. To save costs, the Engineer is instructed by the manager to automatically delete old EBS snapshots when the maximum number of snapshots has been reached.

How can the Engineer do this in the easiest way possible?

An investment bank is storing the account transactions of their clients in S3. As the CloudOps Engineer of the company, you enabled Versioning and MFA Delete to secure the objects stored in the S3 bucket from accidental deletion. In this scenario, which of the following operations in S3 will now require additional authentication? (Select TWO.)

A company plans to deploy a critical business application in AWS which uses MongoDB and an Amazon ECS cluster. For the database-tier, you have to launch MongoDB on a large EC2 instance with attached EBS volumes to handle large workloads.

Which of the following EBS volume type would you use for the EBS volumes of the underlying EC2 instance?

A research team recently used Amazon OpenSearch Service with four data nodes and is experiencing downtime issues. The SysOps administrator needs to resolve the issue and ensure high availability in the infrastructure.

What actions should a SysOps administrator perform to meet the infrastructure requirements?

A digital marketing company has a proprietary enterprise application that is hosted on an Auto Scaling group of On-Demand EC2 instances. It needs to have a durable, high throughput data storage for their content management system and should provide parallel shared access to their servers.

Which of the following would be the suitable data store for the fleet of EC2 instances?

A leading commercial bank is currently implementing a hybrid cloud architecture. There is a requirement to use Amazon S3 as your primary data storage while retaining frequently accessed data locally in your storage gateway. The objective is to minimize the need to scale your on-premises storage infrastructure while still providing your applications with low-latency access to their frequently accessed data.

Which type of AWS Storage Gateway is best to use for this scenario?

A company has been using a legacy Virtual Tape Library system in their on-premises data center which still uses a manual tape management process. The retrieval time of the tape is slow and you were instructed to overhaul the system and use AWS to streamline the backup processes, reduce the manual effort, and gain predictable retrieval times.

Which of the following is the most suitable service to use in this scenario?

A data analytics company has a suite of custom web applications that are provisioned by the EC2 Image Builder and integrated with the AWS Systems Manager Automation service. The company needs to orchestrate complex workflows and modify system configurations across its apps with less management overhead.

Which of the following should you use to meet the requirement?