AWS-SysOps Exam Training Practice Tests (Amazon AWS Certified SysOps Administrator

Question 1

A company wants to increase the availability and durability of a critical business application. The application currently uses a MySQL database running on an Amazon EC2 instance. The company wants to minimize application changes.
How should the company meet these requirements?

A. Migrate the database to an Amazon RDS Aurora DB instance and create a Read Replica in another Availability Zone. B. Launch a secondary EC2 instance running MySQL. Configure a cron job that backs up the database on the primary EC2 instance and copies it to the secondary instance every 30 minutes. C. Shut down the EC2 instance. Enable multi-AZ replication within the EC2 instance, then restart the instance. D. Create an Amazon RDS Microsoft SQL DB instance and enable multi-AZ replication. Back up the existing data and import it into the new database.

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

A user is running a batch process on EBS backed EC2 instances.
The batch process starts a few instances to process hadoop Map reduce jobs which can run between 50600 minutes or sometimes for more time.
The user wants to configure that the instance gets terminated only when the process is completed.
How can the user configure this with CloudWatch?

A. Setup a job which terminates all instances after 600 minutes B. It is not possible to terminate instances automatically C. Setup the CloudWatch with Auto Scaling to terminate all the instances D. Setup the CloudWatch action to terminate the instance when the CPU utilization is less than
5%

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

A company hosts an application on Amazon EC2 instance and needs to store files in Amazon S3.
The files should never traverse the public internet, and only the application EC2 instances are granted access to a specific Amazon S3 bucket. A solutions architect has created a VPC endpoint for Amazon S3 and connected the endpoint to the application VPC.
Which additional steps should the solutions architect take to meet these requirements?

A. Assign an endpoint policy to the VPC endpoint that restricts access to a specific S3 bucket.
Attach a bucket policy to the S3 bucket that grants access to the VPC endpoint.
Assign an IAM role to the application EC2 instances and only allow access to this role in the S3 bucket's policy. B. Assign an endpoint policy to the endpoint that restricts access to a specific S3 bucket.
Attach a bucket policy to the S3 bucket that grants access to the VPC endpoint.
Add the gateway prefix list to a NACL of the instances to limit access to the application EC2 instances only. C. Assign an endpoint policy to the VPC endpoint that restricts access to S3 in the current Region.
Attach a bucket policy to the S3 bucket that grants access to the VPC private subnets only.
Add the gateway prefix list to a NACL to limit access to the application EC2 instances only. D. Attach a bucket policy to the S3 bucket that grants access to application EC2 instances only using the aws:SourceIp condition.
Update the VPC route table so only the application EC2 instances can access the VPC endpoint.

Correct Answer: A

Question 4

A SysOps Administrator must ensure that AWS CloudFormation deployment changes are properly tracked for governance.
Which AWS service should be used to accomplish this?

A. Amazon Inspector B. AWS Artifact C. AWS Trusted Advisor D. AWS Config

Correct Answer: D

Question 5

A user has created a subnet in VPC and launched an EC2 instance within it.
The user has not selected the option to assign the IP address while launching the instance.
Which of the below mentioned statements is true with respect to this scenario?

A. The user would need to create an internet gateway and then attach an elastic IP to the instance to connect from internet B. The instance will never launch if the public IP is not assigned C. The instance will always have a public DNS attached to the instance by default D. The user can directly attach an elastic IP to the instance

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

A company recently migrated from a third-party security application to Amazon Inspector. A sysops administrator discovered that a list of security findings is missing for some Amazon EC2 instances.
Which action will resolve this problem?

A. Verify that the Amazon Inspector agent is installed and running on the affected instances. Restart the Amazon Inspector agent. B. Generate the missing security findings list manually by logging in to the affected EC2 instances and running CLI commands. C. Use a network reachability package to analyze network configurations to find security vulnerabilities on the affected EC2 instances. D. Log in to the affected EC2 instances. Download and install the Amazon Inspector agent from AWS Marketplace on each instance.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

You run a web application with the following components Elastic Load Balancer (EL8), 3 Web/Application servers, 1 MySQL RDS database with read replicas, and Amazon Simple Storage Service (Amazon S3) for static content. Average response time for users is increasing slowly.
What three CloudWatch RDS metrics will allow you to identify if the database is the bottleneck?
(Choose three.)

A. The average number of disk I/O operations per second. B. The amount of disk space occupied by binary logs on the master. C. The amount of time a Read Replica DB Instance lags behind the source DB Instance D. The number of outstanding IOs waiting to access the disk. E. The amount of write latency.

Correct Answer: A,D,E

Question 8

An application hosted on AWS is going through an external compliance assessment.
An Administrator has been tasked with providing proof of physical security at the facilities that are hosting the application.
What should the Administrator do?

A. Work with AWS support to schedule a tour for the auditors. B. Send a copy of the AWS Security whitepaper to the auditors. C. Obtain a relevant report from AWS Artifact and share it with the auditors. D. Find the address for the AWS Direct Connect facility on the AWS Website.

Correct Answer: C

Question 9

An application is currently deployed on several Amazon EC2 instances that reside within a VPC.
Due to compliance requirements, the EC2 instances cannot have access to the public internet.
SysOps Administrators require SSH access to EC2 instances from their corporate office to perform maintenance and other administrative tasks.
Which combination of actions should be taken to permit SSH access to the EC2 instances while meeting the compliance requirements? (Choose two.)

A. Attach a virtual private gateway to the VPC and configure routing B. Attach a NAT gateway to the VPC and configure routing C. Configure a VPN connection back to the corporate office D. Configure an Application Load Balancer in front of the EC2 instances E. Attach an internet gateway to the VPC and configure routing

Correct Answer: B,C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 10

An application is running on Amazon EC2 instances and storing all application data in Amazon S3. The company wants to archive all files older than 30 days to reduce costs. Archived files are used for auditing purposes only; however, the audit team may need to retrieve files in under a minute.
How should the SysOps administrator implement these requirements?

A. Configure an S3 bucket policy to move all objects older than 30 days to S3 Standard-Infrequent Access (S3 Standard-IA). B. Create a lifecycle rule to move all objects older than 30 days to S3 Standard-Infrequent Access (S3 Standard-IA). C. Create a lifecycle rule to move all objects older than 30 days to S3 Glacier. D. Use S3 Intelligent-Tiering to move files older than 30 days to S3 Glacier Deep Archive.

Correct Answer: A

Question 11

Network ACLs in a VPC operate at the ______.

A. gateway level B. instance level C. TCP level D. subnet level

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 12

A user has configured an HTTPS listener on an ELB.
The user has not configured any security policy which can help to negotiate SSL between the client and ELB.
What will ELB do in this scenario?

A. ELB creation will fail without a security policy B. It is not required to have a security policy since SSL is already installed C. By default ELB will select the first version of the security policy D. By default ELB will select the latest version of the policy

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 13

Your business is building a new application that will store its entire customer database on a RDS MySQL database, and will have various applications and users that will query that data for different purposes. Large analytics jobs on the database are likely to cause other applications to not be able to get the query results they need to, before time out.
Also, as your data grows, these analytics jobs will start to take more time, increasing the negative effect on the other applications.
How do you solve the contention issues between these different workloads on the same data?

A. Enable Multi-AZ mode on the RDS instance B. Run the RDS instance on the largest size possible C. Create RDS Read-Replicas for the analytics work D. Use ElastiCache to offload the analytics job data

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 14

A company has multiple web applications running on Amazon EC2 instances in private subnets.
The EC2 instances require connectivity to the internet for patching purposes, but cannot be publicly accessible.
Which step will meet these requirements?

A. Add a virtual gateway to the VPC and update the route tables. B. Add a NAT gateway to the VPC and update the route tables. C. Add an internet gateway and update the route tables. D. Add an interface endpoint and update the route tables.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 15

A SysOps administrator is testing a new batch job. The batch job will upload 20 GB of data from Amazon EC2 instances in a private subnet to an Amazon S3 bucket each day. After the first test is complete, a small cost is reported. The cost has the heading "NAT Gateway - Data Processed." Which change can the SysOps administrator make to eliminate this cost for future tests?

A. Configure and use a VPC endpoint. B. Write an S3 bucket policy to enforce encryption in transit for the uploads. C. Configure the S3 bucket to use the S3 Intelligent-Tiering storage class. D. Disable cross-origin resource sharing (CORS) for the S3 bucket.

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Amazon AWS Certified SysOps Administrator - Associate - AWS-SysOps Exam Practice Test