AWS-SysOps Free Practice Test

- (Exam Topic 1)
A SysOps administrator is reviewing AWS Trusted Advisor warnings and encounters a warning for an S3 bucket policy that has open access permissions. While discussing the issue with the bucket owner, the administrator realizes the S3 bucket is an origin for an Amazon CloudFront web distribution.
Which action should the administrator take to ensure that users access objects in Amazon S3 by using only CloudFront URLs?

1. A. Encrypt the S3 bucket content with Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3).
2. B. Create an origin access identity and grant it permissions to read objects in the S3 bucket.
3. C. Assign an 1AM user to the CloudFront distribution and grant the user permissions in the S3 bucket policy.
4. D. Assign an 1AM role to the CloudFront distribution and grant the role permissions in the S3 bucket policy.

Correct Answer: B
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3

- (Exam Topic 1)
A SysOos administrator s tasked with analyzing database performance. The database runs on a single Amazon RDS D6 instance. The SysOps administrator finds that, during times of peak traffic, resources on the database are over utilized due to the amount of read traffic.
Which actions should the SysOps administrator take to improve RDS performance? (Select TWO.)

1. A. Add a read replica.
2. B. Modify the application to use Amazon ElastiCache for Memcached.
3. C. Migrate the database from RDS to Amazon DynamoDB.
4. D. Migrate the database to Amazon EC2 with enhanced networking enabled
5. E. Upgrade the database to a Multi-AZ deployment.

Correct Answer: AB

- (Exam Topic 1)
A SysOps administrator is required to monitor free space on Amazon EBS volumes attached to Microsoft Windows-based Amazon EC2 instances within a company’s account. The administrator must be alerted to potential issues.
What should the administrator do to receive email alerts before low storage space affects EC2 instance performance?

1. A. Use built-in Amazon CloudWatch metrics, and configure CloudWatch alarms and an Amazon SNS topic for email notifications
2. B. Use AWS CloudTrail logs and configure the trail to send notifications to an Amazon SNS topic.
3. C. Use the Amazon CloudWatch agent to send disk space metrics, then set up CloudWatch alarms using an Amazon SNS topic.
4. D. Use AWS Trusted Advisor and enable email notification alerts for EC2 disk space

Correct Answer: C

- (Exam Topic 1)
A SysOps administrator is responsible for a legacy. CPU-heavy application The application can only be scaled vertically Currently, the application is deployed on a single t2 large Amazon EC2 instance The system is showing 90% CPU usage and significant performance latency after a few minutes
What change should be made to alleviate the performance problem?

1. A. Change the Amazon EBS volume to Provisioned lOPs
2. B. Upgrade to a compute-optimized instance
3. C. Add additional 12 large instances to the application
4. D. Purchase Reserved Instances

Correct Answer: B

- (Exam Topic 1)
A company has an internal web application that runs on Amazon EC2 instances behind an Application Load
Balancer. The instances run in an Amazon EC2 Auto Scaling group in a single Availability Zone. A SysOps administrator must make the application highly available.
Which action should the SysOps administrator take to meet this requirement?

1. A. Increase the maximum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.
2. B. Increase the minimum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.
3. C. Update the Auto Scaling group to launch new instances in a second Availability Zone in the same AWS Region.
4. D. Update the Auto Scaling group to launch new instances in an Availability Zone in a second AWS Region.

Correct Answer: C