Free AWS-SysOps Exam Braindumps (page: 30)

Page 30 of 106

A company wants to be alerted through email when IAM CreateUser API calls are made within its AWS account.

Which combination of actions should a SysOps administrator take to meet this requirement? (Choose two.)

  1. Create an Amazon EventBridge (Amazon CloudWatch Events) rule with AWS CloudTrail as the event source and IAM CreateUser as the specific API call for the event pattern.
  2. Create an Amazon EventBridge (Amazon CloudWatch Events) rule with Amazon CloudSearch as the event source and IAM CreateUser as the specific API call for the event pattern.
  3. Create an Amazon EventBridge (Amazon CloudWatch Events) rule with AWS IAM Access Analyzer as the event source and IAM CreateUser as the specific API call for the event pattern.
  4. Use an Amazon Simple Notification Service (Amazon SNS) topic as an event target with an email subscription.
  5. Use an Amazon Simple Email Service (Amazon SES) notification as an event target with an email subscription.

Answer(s): A,D



A database is running on an Amazon RDS Multi-AZ DB instance. A recent security audit found the database to be out of compliance because it was not encrypted.

Which approach will resolve the encryption requirement?

  1. Log in to the RDS console and select the encryption box to encrypt the database.
  2. Create a new encrypted Amazon EBS volume and attach it to the instance.
  3. Encrypt the standby replica in the secondary Availability Zone and promote it to the primary instance.
  4. Take a snapshot of the RDS instance, copy and encrypt the snapshot, and then restore to the new RDS instance.

Answer(s): D



A company using AWS Organizations requires that no Amazon S3 buckets in its production accounts should ever be deleted.

What is the SIMPLEST approach the SysOps administrator can take to ensure S3 buckets in those accounts can never be deleted?

  1. Set up MFA Delete on all the S3 buckets to prevent the buckets from being deleted.
  2. Use service control policies to deny the s3:DeleteBucket action on all buckets in production accounts.
  3. Create an IAM group that has an IAM policy to deny the s3:DeleteBucket action on all buckets in production accounts.
  4. Use AWS Shield to deny the s3:DeleteBucket action on the AWS account instead of all S3 buckets.

Answer(s): B



A company has an application that is running on Amazon EC2 instances in a VPC. The application needs access to download software updates from the internet. The VPC has public subnets and private subnets. The company’s security policy requires all EC2 instances to be deployed in private subnets.

What should a SysOps administrator do to meet these requirements?

  1. Add an internet gateway to the VPC. In the route table for the private subnets, add a route to the internet gateway.
  2. Add aNAT gateway to a private subnet. In the route table for the private subnets, add a route to the NAT gateway.
  3. Add a NAT gateway to public subnet. In the route table for the private subnets, add a route to the NAT gateway.
  4. Add two internet gateways to the VPC. In the route tables for the private subnets and public subnets, add a route to each internet gateway.

Answer(s): C



Page 30 of 106



Post your Comments and Discuss Amazon AWS-SysOps exam with other Community members:

Lori commented on August 03, 2019
I managed to pass the exam with good score sing this dump. I failed this exam before. It is too hard to know all the topics. This braindump questions and answers is a life-saver!
UNITED STATES
upvote

Norman commented on May 21, 2019
I love this site and their braindumps material. They have helped me pass 3 of my exams so far. This is the 4th one I am going for. Wish me luck. I hope I can clear it as easy as I did the other 3.
UNITED STATES
upvote

Arian commented on May 17, 2019
I normally don't go for braindumps and cheat sheets but for this exam I had to since I did not have time and there was a deadline set by company. So I used these dumps and it worked. I passed in first try.
UNITED STATES
upvote

streetbites commented on April 26, 2019
Great price will study and post results...
UNITED STATES
upvote

zxczx commented on September 10, 2018
where are my downloads?
UNITED STATES
upvote

db commented on September 10, 2018
website had to navigate and download exams.
UNITED STATES
upvote

sam commented on July 19, 2018
later
INDIA
upvote

Karthik commented on March 20, 2018
Hi Team, Shared dumps answers are wrong, I have cross check most of the answer are wrong. Please refund / share the valid one?. Regards, Karthik M
GERMANY
upvote

Yogi commented on January 23, 2018
Excellant product. Cleared exam with 95%.
UNITED STATES
upvote

Ronnie commented on September 05, 2017
I have heard great things from a colleague ! He has passed every exam by 80+% Thanks to BrainDumps... I'll let you know in 2 weeks how i go!
UNITED STATES
upvote

Rai commented on June 09, 2017
Very helpful content, definitely will help me to pass the certification
UNITED STATES
upvote

musma21 commented on March 05, 2017
I've been using AWS and Azure for a time however I've never tried to take this exam. I'm really thrilled to get the AWS cert with help of this dump!
UNITED STATES
upvote