Free AWS-SysOps Exam Braindumps (page: 14)

Page 13 of 121

A company hosts a web portal on Amazon EC2 instances. The web portal uses an Elastic Load Balancer (ELB) and Amazon Route 53 for its public DNS service.
The ELB and the EC2 instances are deployed by way of a single AWS CloudFormation stack in the us-east-1 Region. The web portal must be highly available across multiple Regions.
Which configuration will meet these requirements?

  1. Deploy a copy of the stack in the us-west-2 Region. Create a single start of authority (SOA) record in Route 53 that includes the IP address from each ELB. Configure the SOA record with health checks. Use the ELB in us-east-1 as the primary record and the ELB in us-west-2 as the secondary record.
  2. Deploy a copy of the stack in the us-west-2 Region. Create an additional A record in Route 53 that includes the ELB in us-west-2 as an alias target. Configure the A records with a failover routing policy and health checks. Use the ELB in us-east-1 as the primary record and the ELB in us-west-2 as the secondary record.
  3. Deploy a new group of EC2 instances in the us-west-2 Region. Associate the new EC2 instances with the existing ELB, and configure load balancer health checks on all EC2 instances. Configure the ELB to update Route 53 when EC2 instances in us-west-2 fail health checks.
  4. Deploy a new group of EC2 instances in the us-west-2 Region. Configure EC2 health checks on all EC2 instances in each Region. Configure a peering connection between the VPCs. Use the VPC in us-east-1 as the primary record and the VPC in us-west-2 as the secondary record.

Answer(s): B



A SysOps administrator is investigating why a user has been unable to use RDP to connect over the internet from their home computer to a bastion server running on an Amazon EC2 Windows instance.
Which of the following are possible causes of this issue? (Choose two.)

  1. A network ACL associated with the bastion's subnet is blocking the network traffic.
  2. The instance does not have a private IP address.
  3. The route table associated with the bastion's subnet does not have a route to the internet gateway.
  4. The security group for the instance does not have an inbound rule on port 22.
  5. The security group for the instance does not have an outbound rule on port 3389.

Answer(s): A,C



A SysOps administrator is examining the following AWS CloudFormation template:
Why will the stack creation fail?

  1. The Outputs section of the CloudFormation template was omitted.
  2. The Parameters section of the CloudFormation template was omitted.
  3. The PrivateDnsName cannot be set from a CloudFormation template.
  4. The VPC was not specified in the CloudFormation template.

Answer(s): C



A new application runs on Amazon EC2 instances and accesses data in an Amazon RDS database instance. When fully deployed in production, the application fails. The database can be queried from a console on a bastion host. When looking at the web server logs, the following error is repeated multiple times:
*** Error Establishing a Database Connection
Which of the following may be causes of the connectivity problems? (Choose two.)

  1. The security group for the database does not have the appropriate egress rule from the database to the web server.
  2. The certificate used by the web server is not trusted by the RDS instance.
  3. The security group for the database does not have the appropriate ingress rule from the web server to the database.
  4. The port used by the application developer does not match the port specified in the RDS configuration.
  5. The database is still being created and is not available for connectivity.

Answer(s): C,D






Post your Comments and Discuss Amazon AWS-SysOps exam with other Community members:

AWS-SysOps Discussions & Posts