- (Exam Topic 1)
A company runs hundreds of Amazon EC2 instances in a single AWS Region. Each EC2 instance has two attached 1 GiB General Purpose SSD (gp2) Amazon Elastic Block Store (Amazon EBS) volumes. A critical workload is using all the available IOPS capacity on the EBS volumes.
According to company policy, the company cannot change instance types or EBS volume types without completing lengthy acceptance tests to validate that the company’s applications will function properly. A SysOps administrator needs to increase the I/O performance of the EBS volumes as quickly as possible.
Which action should the SysOps administrator take to meet these requirements?

1. A. Increase the size of the 1 GiB EBS volumes.
2. B. Add two additional elastic network interfaces on each EC2 instance.
3. C. Turn on Transfer Acceleration on the EBS volumes in the Region.
4. D. Add all the EC2 instances to a cluster placement group.

Correct Answer: A
Increasing the size of the 1 GiB EBS volumes will increase the IOPS capacity of the volumes, which will improve the I/O performance of the EBS volumes. This option does not require any changes to the instance types or EBS volume types, so it can be done quickly without the need for lengthy acceptance tests to validate that the company's applications will function properly.
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/requesting-ebs-volume-modifications.html

- (Exam Topic 1)
A SysOps administrator is using AWS Systems Manager Patch Manager to patch a fleet of Amazon EC2 instances. The SysOps administrator has configured a patch baseline and a maintenance window. The SysOps administrator also has used an instance tag to identify which instances to patch.
The SysOps administrator must give Systems Manager the ability to access the EC2 instances. Which additional action must the SysOps administrator perform to meet this requirement?

1. A. Add an inbound rule to the instances' security group.
2. B. Attach an 1AM instance profile with access to Systems Manager to the instances.
3. C. Create a Systems Manager activation Then activate the fleet of instances.
4. D. Manually specify the instances to patch Instead of using tag-based selection.

Correct Answer: A

- (Exam Topic 1)
A company wants to use only IPv6 for all its Amazon EC2 instances. The EC2 instances must not be accessible from the internet, but the EC2 instances must be able to access the internet. The company creates a dual-stack VPC and IPv6-only subnets.
How should a SysOps administrator configure the VPC to meet these requirements?

1. A. Create and attach a NAT gatewa
2. B. Create a custom route table that includes an entry to point all IPv6 traffic to the NAT gatewa
3. C. Attach the custom route table to the IPv6-only subnets.
4. D. Create and attach an internet gatewa
5. E. Create a custom route table that includes an entry to point all IPv6 traffic to the internet gatewa
6. F. Attach the custom route table to the IPv6-only subnets.
7. G. Create and attach an egress-only internet gatewa
8. H. Create a custom route table that includes an entry to point all IPv6 traffic to the egress-only internet gatewa
9. I. Attach the custom route table to the IPv6-only subnets.
10. J. Create and attach an internet gateway and a NAT gatewa
11. K. Create a custom route table that includes an entry to point all IPv6 traffic to the internet gateway and all IPv4 traffic to the NAT gatewa
12. L. Attach thecustom route table to the IPv6-only subnets.

Correct Answer: C

- (Exam Topic 1)
A SysOps administrator needs to secure the credentials for an Amazon RDS database that is created by an AWS CloudFormation template. The solution must encrypt the credentials and must support automatic rotation.
Which solution will meet these requirements?

1. A. Create an AWS::SecretsManager::Secret resource in the CloudFormation templat
2. B. Reference thecredentials in the AWS::RDS::DBInstance resource by using the resolve:secretsmanager dynamic reference.
3. C. Create an AWS::SecretsManager::Secret resource in the CloudFormation templat
4. D. Reference the credentials in the AWS::RDS::DBInstance resource by using the resolve:ssm-secure dynamic reference.
5. E. Create an AWS::SSM::Parameter resource in the CloudFormation templat
6. F. Reference the credentials in the AWS::RDS::DBInstance resource by using the resolve:ssm dynamic reference.
7. G. Create parameters for the database credentials in the CloudFormation templat
8. H. Use the Ref intrinsic function to provide the credentials to the AWS::RDS::DBInstance resource.

Correct Answer: A

- (Exam Topic 1)
An Amazon EC2 instance needs to be reachable from the internet. The EC2 instance is in a subnet with the following route table:

Which entry must a SysOps administrator add to the route table to meet this requirement?

1. A. A route for 0.0.0.0/0 that points to a NAT gateway
2. B. A route for 0.0.0.0/0 that points to an egress-only internet gateway
3. C. A route for 0.0.0.0/0 that points to an internet gateway
4. D. A route for 0.0.0.0/0 that points to an elastic network interface

Correct Answer: C