AWS-SysOps Free Practice Test

- (Exam Topic 1)
A SysOps administrator is deploying an application on 10 Amazon EC2 instances. The application must be highly available. The instances must be placed on distinct underlying hardware.
What should the SysOps administrator do to meet these requirements?

1. A. Launch the instances into a cluster placement group in a single AWS Region.
2. B. Launch the instances into a partition placement group in multiple AWS Regions.
3. C. Launch the instances into a spread placement group in multiple AWS Regions.
4. D. Launch the instances into a spread placement group in single AWS Region

Correct Answer: D
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/placement-groups.html

- (Exam Topic 1)
An existing, deployed solution uses Amazon EC2 instances with Amazon EBS General Purpose SSD volumes, an Amazon RDS PostgreSQL database, an Amazon EFS file system, and static objects stored in an Amazon S3 bucket. The Security team now mandates that at-rest encryption be turned on immediately for all aspects of the application, without creating new resources and without any downtime.
To satisfy the requirements, which one of these services can the SysOps administrator enable at-rest encryption on?

1. A. EBS General Purpose SSD volumes
2. B. RDS PostgreSQL database
3. C. Amazon EFS file systems
4. D. S3 objects within a bucket

Correct Answer: D
https://docs.aws.amazon.com/AmazonS3/latest/userguide/UsingEncryption.html

- (Exam Topic 1)
A Sysops administrator needs to configure automatic rotation for Amazon RDS database credentials. The credentials must rotate every 30 days. The solution must integrate with Amazon RDS.
Which solution will meet these requirements with the LEAST operational overhead?

1. A. Store the credentials in AWS Systems Manager Parameter Store as a secure strin
2. B. Configure automatic rotation with a rotation interval of 30 days.
3. C. Store the credentials in AWS Secrets Manage
4. D. Configure automatic rotation with a rotation interval of 30 days.
5. E. Store the credentials in a file in an Amazon S3 bucke
6. F. Deploy an AWS Lambda function to automatically rotate the credentials every 30 days.
7. G. Store the credentials in AWS Secrets Manage
8. H. Deploy an AWS Lambda function to automatically rotate the credentials every 30 days.

Correct Answer: B
Storing the credentials in AWS Secrets Manager and configuring automatic rotation with a rotation interval of 30 days is the most efficient way to meet the requirements with the least operational overhead. AWS Secrets Manager automatically rotates the credentials at the specified interval, so there is no need for an additional AWS Lambda function or manual rotation. Additionally, Secrets Manager is integrated with Amazon RDS, so the credentials can be easily used with the RDS database.

- (Exam Topic 1)
A SysOps administrator created an AWS Cloud Formation template that provisions Amazon EC2 instances, an Elastic Load Balancer (ELB), and an Amazon RDS DB instance. During stack creation, the creation of the EC2 instances and the creation of the ELB are successful. However, the creation of the DB instance fails.
What is the default behavior of CloudFormation in this scenario?

1. A. CloudFormation will roll back the stack and delete the stack.
2. B. CloudFormation will roll back the stack but will not delete the stack.
3. C. CloudFormation will prompt the user to roll back the stack or continue.
4. D. CloudFormation will successfully complete the stack but will report a failed status for the DB instance.

Correct Answer: C

- (Exam Topic 1)
A SysOps administrator must create a solution that automatically shuts down any Amazon EC2 instances that have less than 10% average CPU utilization for 60 minutes or more.
Which solution will meet this requirement In the MOST operationally efficient manner?

1. A. Implement a cron job on each EC2 instance to run once every 60 minutes and calculate the current CPU utilizatio
2. B. Initiate an instance shutdown If CPU utilization is less than 10%.
3. C. Implement an Amazon CloudWatch alarm for each EC2 instance to monitor average CPU utilization.Set the period at 1 hour, and set the threshold at 10%. Configure an EC2 action on the alarm to stop the instance.
4. D. Install the unified Amazon CloudWatch agent on each EC2 instance, and enable the Basic level predefined metric se
5. E. Log CPU utilization every 60 minutes, and initiate an instance shutdown if CPU utilization is less than 10%.
6. F. Use AWS Systems Manager Run Command to get CPU utilization from each EC2 instance every 60 minute
7. G. Initiate an instance shutdown if CPU utilization is less than 10%.

Correct Answer: B
https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/UsingAlarmActions.html