Free AWS Certified SysOps Administrator Associate AWS-SysOps Exam Practice Test

A company's customers are reporting increased latency while accessing static web content from Amazon S3. A SysOps Administrator observed a very high rate of read operations on a particular S3 bucket.What will minimize latency by reducing load on the S3 bucket?

• Migrate the S3 bucket to a region that is closer to end users' geographic locations.
• Use cross-regions replication to replicate all of the data to another region.
• Create an Amazon CloudFront distribution with the S3 bucket as the origin.
• Use Amazon ElasticCache to cache data being served from Amazon S3.

A SysOps Administrator has been asked to configure user-defined cost allocation tags for a new AWS account. The company is using AWS Organizations for account management.What should the Administrator do to enable user-defined cost allocation tags?

• Log in to the AWS Billing and Cost Management console of the new account, and use the Cost Allocation Tags manager to create the new user-defined cost allocation tags.
• Log in to the AWS Billing and Cost Management console of the payer account, and use Cost Allocation Tags manager to create the new user-defined cost allocation tags.
• Log in to the AWS Management Console of the new account, use the Tag Editor to create the new user-defined tags, then use the Cost Allocation Tags manager in the new account to mark the tags as cost allocation tags.
• Log in to the AWS Management Console of the new account, use the Tag Editor to create the new user-defined tags, then use the Cost Allocation Tags manager in the payer account to mark the tags as cost allocation tags.

A company needs to migrate an on-premises asymmetric key management system into AWS.Which AWS service should be used to accomplish this?

• AWS Certificate Manager
• AWS CloudHSM
• AWS KMS
• AWS Secrets Manager

When the AWS Cloud infrastructure experiences an event that may impact an organization, which AWS service can be used to see which of the organization's resources are affected?

• AWS Service Health Dashboard
• AWS Trusted Advisor
• AWS Personal Health Dashboard
• AWS Systems Manager

A company has deployed a fleet of Amazon EC2 web servers for the upcoming release of a new product. The SysOps Administrator needs to test the Amazon CloudWatch notification settings for this deployment to ensure that a notification is sent using Amazon SNS if the CPU utilization of an EC2 instance exceeds 70%.How should the Administrator accomplish this?

• Use the set-alarm-state command in AWS CloudTrail to invoke the Amazon SNS notification
• Use CloudWatch custom metrics to set the alarm state in AWS CloudTrail and enable Amazon SNS notifications
• Use EC2 instance metadata to manually set the CPU utilization to 75% and invoke the alarm state
• Use the set-alarm-state command in the AWS CLI for CloudWatch

A company's Marketing department generates gigabytes of assets each day and stores them locally. They would like to protect the files by backing them up to AWS All the assets should be stored on the cloud but the most recent assets should be available locally for tow latency accessWhich AWS service meets the requirements?

• Amazon EBS
• Amazon EFS
• Amazon S3
• AWS Storage Gateway

A SysOps administrator is creating an AWS CloudFormation template that uses Amazon EC2 auto scaling to launch EC2 instances with windows 2016. The administrator wants to configure the CloudFormation template to ensure that newly launched instances include recent security updates before serving application traffic. This will minimize the time it takes for the instance to start.Which action will meet these requirements?

• Configure the template to retrieve the latest windows Amazon machine image (AMI) from AWS systems manager parameter store.
• Configure the template to use AWS system manager patch manager to update instances when they are launched.
• Create a CloudFormation nested stack that creates a new Amazon Machine Image (AMI), then use that AMI ID in the auto scaling launch configuration.
• Update the template with a user data script that runs windows update using the command line and then calls cfn-signal.

A company creates custom AMI images by launching new Amazon EC2 instances from an AWS CloudFormation template. It installs and configures necessary software through AWS OpsWorks, and takes images of each EC2 instance. The process of installing and configuring software can take between 2 to 3 hours, but at times, the process stalls due to installation errors.The SysOps Administrator must modify the CloudFormation template so if the process stalls, the entire stack will fail and roll back.Based on these requirements, what should be added to the template?

• Conditions with a timeout set to 4 hours.
• CreationPolicy with a timeout set to 4 hours.
• DependsOn with a timeout set to 4 hours.
• Metadata with a timeout set to 4 hours.

A company hosts a multi-tier ecommerce web application on AWS, and has recently been alerted to suspicious application traffic The architecture consists of Amazon EC2 instances deployed across multiple Availability Zones behind an Application Load Balancer (ALB) After examining the server logs, a sysops administrator determines that the suspicious traffic is an attempted SQL injection attack.What should the sysops administrator do to prevent similar attacks?

• Install Amazon Inspector on the EC2 instances and configure a rules package Use the findings reports to identify and block SQL injection attacks.
• Modify the security group of the ALB Use the IP addresses from the logs to block the IP addresses where SQL injection originated.
• Create an AWS WAF web ACL in front of the ALB. Add an SQL injection rule to the web ACL Associate the web ACL to the ALB
• Enable Amazon GuardDuty in the AWS Region Use Amazon CloudWatch Events to trigger an AWS Lambda function response every time an SQL injection finding is discovered

A developer is deploying a web application on Amazon EC2 instances behind an Application Load Balancer (ALB) and notices that the application is not receiving all the expected elements from HTTP requests. The developer suspects users are not sending the correct query stringHow should a sysops administrator verify this?

• Monitor the ALB default Amazon CloudWatch metrics Verify that the requests contain the expected query string
• Configure the ALB to store access logs within Amazon S3 Verify that log entries contain the expected query string
• Open the ALB logs in Amazon CloudWatch Verify that requests contain the expected query string
• Create a custom Amazon CloudWatch metric to store requests Verify that the metric contains the expected query string