AWS-SysOps Free Practice Test

- (Exam Topic 1)
A company needs to implement a managed file system to host Windows file shares for users on premises. Resources in the AWS Cloud also need access to the data on these file shares. A SysOps administrator needs to present the user file shares on premises and make the user file shares available on AWS with minimum latency.
What should the SysOps administrator do to meet these requirements?

1. A. Set up an Amazon S3 File Gateway.
2. B. Set up an AWS Direct Connect connection.
3. C. Use AWS DataSync to automate data transfers between the existing file servers and AWS.
4. D. Set up an Amazon FSx File Gateway.

Correct Answer: D
Amazon FSx provides a fully managed file system that is optimized for Windows-based workloads and can be used to create file shares that can be accessed both on premises and in the AWS Cloud. The file shares that are created in Amazon FSx are highly available and can be accessed with low latency. Additionally, Amazon FSx supports Windows-based authentication, making it easy to integrate with existing Windows user accounts.
References:
[1] https://aws.amazon.com/fsx/
[2] https://aws.amazon.com/storage/file-storage/
[3] https://docs.aws.a

- (Exam Topic 1)
A development team recently deployed a new version of a web application to production After the release, penetration testing revealed a cross-site scripting vulnerability that could expose user data
Which AWS service will mitigate this issue?

1. A. AWS Shield Standard
2. B. AWS WAF
3. C. Elastic Load Balancing
4. D. Amazon Cognito

Correct Answer: B
https://www.imperva.com/learn/application-security/cross-site-scripting-xss-attacks/

- (Exam Topic 1)
A company has an Amazon RDS DB instance. The company wants to implement a caching service while maintaining high availability.
Which combination of actions will meet these requirements? (Choose two.)

1. A. Add Auto Discovery to the data store.
2. B. Create an Amazon ElastiCache for Memcached data store.
3. C. Create an Amazon ElastiCache for Redis data store.
4. D. Enable Multi-AZ for the data store.
5. E. Enable Multi-threading for the data store.

Correct Answer: CD
https://aws.amazon.com/elasticache/memcached/ https://aws.amazon.com/elasticache/redis/

- (Exam Topic 1)
A company's backend infrastructure contains an Amazon EC2 instance in a private subnet. The private subnet has a route to the internet through a NAT gateway in a public subnet. The instance must allow connectivity to a secure web server on the internet to retrieve data at regular intervals.
The client software times out with an error message that indicates that the client software could not establish the TCP connection.
What should a SysOps administrator do to resolve this error?

1. A. Add an inbound rule to the security group for the EC2 instance with the following parameters: Type - HTTP, Source - 0.0.0.0/0.
2. B. Add an inbound rule to the security group for the EC2 instance with the following parameters: Type - HTTPS, Source - 0.0.0.0/0.
3. C. Add an outbound rule to the security group for the EC2 instance with the following parameters: Type - HTTP, Destination - 0.0.0.0/0.
4. D. Add an outbound rule to the security group for the EC2 instance with the following parameters: Type - HTTP
5. E. Destination - 0.0.0.0/0.

Correct Answer: D

- (Exam Topic 1)
A company is using an Amazon Aurora MySQL DB cluster that has point-in-time recovery, backtracking, and automatic backup enabled. A SysOps administrator needs to be able to roll back the DB cluster to a specific recovery point within the previous 72 hours. Restores must be completed in the same production DB cluster.
Which solution will meet these requirements?

1. A. Create an Aurora Replic
2. B. Promote the replica to replace the primary DB instance.
3. C. Create an AWS Lambda function to restore an automatic backup to the existing DB cluster.
4. D. Use backtracking to rewind the existing DB cluster to the desired recovery point.
5. E. Use point-in-time recovery to restore the existing DB cluster to the desired recovery point.

Correct Answer: C
"The limit for a backtrack window is 72 hours.....Backtracking is only available for DB clusters that were created with the Backtrack feature enabled....Backtracking "rewinds" the DB cluster to the time you specify. Backtracking is not a replacement for backing up your DB cluster so that you can restore it to a point in time....You can backtrack a DB cluster quickly. Restoring a DB cluster to a point in time launches a new DB cluster and restores it from backup data or a DB cluster snapshot, which can take hours."
https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Managing.Backtrack.html