AWS-SysOps Free Practice Test

- (Exam Topic 1)
A company hosts its website in the us-east-1 Region. The company is preparing to deploy its website into the eu-central-1 Region. Website visitors who are located in Europe should access the website that is hosted in eu-central-1. All other visitors access the website that is hosted in us-east-1. The company uses Amazon Route 53 to manage the website's DNS records.
Which routing policy should a SysOps administrator apply to the Route 53 record set to meet these requirements?

1. A. Geolocation routing policy
2. B. Geoproximity routing policy
3. C. Latency routing policy
4. D. Multivalue answer routing policy

Correct Answer: A
geolocation "Geolocation routing lets you choose the resources that serve your traffic based on the geographic location of your users, meaning the location that DNS queries originate from. For example, you might want all queries from Europe to be routed to an ELB load balancer in the Frankfurt region."
Could be confused with geoproximity - "Geoproximity routing lets Amazon Route 53 route traffic to your resources based on the geographic location of your users and your resources. You can also optionally choose to route more traffic or less to a given resource by specifying a value, known as a bias. A bias expands or shrinks the size of the geographic region from which traffic is routed to a resource" the use case is not needed as per question.
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html

- (Exam Topic 1)
A company is testing Amazon Elasticsearch Service (Amazon ES) as a solution for analyzing system logs from a fleet of Amazon EC2 instances. During the test phase, the domain operates on a single-node cluster. A SysOps administrator needs to transition the test domain into a highly available production-grade deployment.
Which Amazon ES configuration should the SysOps administrator use to meet this requirement?

1. A. Use a cluster of four data nodes across two AWS Region
2. B. Deploy four dedicated master nodes in each Region.
3. C. Use a cluster of six data nodes across three Availability Zone
4. D. Use three dedicated master nodes.
5. E. Use a cluster of six data nodes across three Availability Zone
6. F. Use six dedicated master nodes.
7. G. Use a cluster of eight data nodes across two Availability Zone
8. H. Deploy four master nodes in a failover AWS Region.

Correct Answer: B

- (Exam Topic 1)
A company uses an Amazon Elastic File System (Amazon EFS) file system to share files across many Linux Amazon EC2 instances. A SysOps administrator notices that the file system's PercentIOLimit metric is consistently at 100% for 15 minutes or longer. The SysOps administrator also notices that the application that reads and writes to that file system is performing poorly. They application requires high throughput and IOPS while accessing the file system.
What should the SysOps administrator do to remediate the consistently high PercentIOLimit metric?

1. A. Create a new EFS file system that uses Max I/O performance mod
2. B. Use AWS DataSync to migrate data to the new EFS file system.
3. C. Create an EFS lifecycle policy to transition future files to the Infrequent Access (IA) storage class to improve performanc
4. D. Use AWS DataSync to migrate existing data to IA storage.
5. E. Modify the existing EFS file system and activate Max I/O performance mode.
6. F. Modify the existing EFS file system and activate Provisioned Throughput mode.

Correct Answer: A
To support a wide variety of cloud storage workloads, Amazon EFS offers two performance modes, General Purpose mode and Max I/O mode. You choose a file system's performance mode when you create it, and it cannot be changed. If the PercentIOLimit percentage returned was at or near 100 percent for a significant amount of time during the test, your application should use the Max I/O performance mode. https://docs.aws.amazon.com/efs/latest/ug/performance.html

- (Exam Topic 1)
A company runs a web application on three Amazon EC2 instances behind an Application Load Balancer (ALB). The company notices that random periods of increased traffic cause a degradation in the application's performance. A SysOps administrator must scale the application to meet the increased traffic. Which solution meets these requirements?

1. A. Create an Amazon CloudWatch alarm to monitor application latency and increase the size of each EC2 instance if the desired threshold is reached.
2. B. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to monitor application latency and add an EC2 instance to the ALB if the desired threshold is reached.
3. C. Deploy the application to an Auto Scaling group of EC2 instances with a target tracking scaling policy.Attach the ALB to the Auto Scaling group.
4. D. Deploy the application to an Auto Scaling group of EC2 instances with a scheduled scaling policy.Attach the ALB to the Auto Scaling group.

Correct Answer: C

- (Exam Topic 1)
A company using AWS Organizations requires that no Amazon S3 buckets in its production accounts should ever be deleted.
What is the SIMPLEST approach the SysOps administrator can take to ensure S3 buckets in those accounts can never be deleted?

1. A. Set up MFA Delete on all the S3 buckets to prevent the buckets from being deleted.
2. B. Use service control policies to deny the s3:DeleteBucket action on all buckets in production accounts.
3. C. Create an IAM group that has an IAM policy to deny the s3:DeleteBucket action on all buckets in production accounts.
4. D. Use AWS Shield to deny the s3:DeleteBucket action on the AWS account instead of all S3 buckets.

Correct Answer: B
https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html
If you're using AWS Organizations, check the service control policies for any statements that explicitly deny Amazon S3 access. In particular, check the service control policies for statements denying the s3:PutBucketPolicy action.
https://aws.amazon.com/tw/premiumsupport/knowledge-center/s3-access-denied-bucket-policy/