AWS Certified SysOps Administrator – Associate475 questions across 48 pages are complete and free, with no account or card.
475 questions in this bank
Free access · progress saved on this device
A company needs to track spending in its AWS account. The company must receive a notification when current costs and forecasted costs exceed specific thresholds. Which solution will meet these requirements with the LEAST operational overhead?
Answer: D
A company uses a multi-account structure in the AWS Cloud. The company's environment includes a shared account for common resources. The environment also includes a development account for new application development. The company uses Amazon Route 53 for DNS management. The company manages all its Route 53 hosted zones from the shared account. A SysOps administrator needs to obtain a new SSL/TLS certificate for an application that is deployed in the development account. What must the SysOps administrator do to meet this requirement?
Answer: C
Answer is C Requesting an ACM certificate is usually a two-step activity: 1. Request a certificate for a domain. 2. Verify your ownership of that domain. Step 2 is done by adding specific DNS records in your DNS. However, AWS makes step 2 easier for users that are requesting an ACM for a domain that is managed using Route 53 in the same account by adding the records almost automatically (at a click-of-a-button). Nonetheless, in case someone is not using Route 53 as DNS, or is using Route 53 in another account, then back to the original way of verification. Not to mention that the ACM Certificate is must be at the same account & region that you want to use it in.
Source: Adapted from community discussion — Albanki
A company's SysOps administrator is troubleshooting communication between the components of an application. The company configured VPC flow logs to be published to Amazon CloudWatch Logs. However, there are no logs in CloudWatch Logs. What could be blocking the VPC flow logs from being published to CloudWatch Logs?
Answer: A
A company deploys a new application on three Amazon EC2 instances across three Availability Zones. The company uses a Network Load Balancer (NLB) to route traffic to the EC2 instances. A SysOps administrator must implement a solution so that the EC2 instances allow traffic from only the NLB. What should the SysOps administrator do to meet these requirements with the LEAST operational overhead?
Answer: A
A company that uses ServiceNow has an AWS account where a sensitive workload runs. The necessary security groups are in place. The company needs to implement a solution to create an incident in ServiceNow every time the rules change in any security group. Which solution will meet this requirement with the LEAST operational effort?
Answer: C
A company needs to enforce tagging requirements for Amazon DynamoDB tables in its AWS accounts. A SysOps administrator must implement a solution to identify and remediate all DynamoDB tables that do not have the appropriate tags. Which solution will meet these requirements with the LEAST operational overhead?
Answer: C
Checks if your resources have the tags that you specify. For example, you can check whether your Amazon EC2 instances have the CostCenter tag, while also checking if all your RDS instance have one set of Keys tag. Separate multiple values with commas. You can check up to 6 tags at a time. The AWS-managed AWS Systems Manager automation document AWS-SetRequiredTags does not work as a remediation with this rule. You will need to create your own custom Systems Manager automation documentation for remediation.
Source: Adapted from community discussion — AMEJack
A company is preparing for a marketing campaign that will increase traffic to a new web application. The application uses Amazon API Gateway and AWS Lambda for the application logic. The application stores relevant user data in an Amazon Aurora MySQL DB cluster that has one Aurora Replica. Database queries for the application are 5% write and 95% read. What should a SysOps administrator do to scale the database when traffic increases?
Answer: A
Answer B is incorrect because Aurora replicas always have the same DB instance size/class as the one used by the primary instance. Answer C is incorrect because in the Aurora Auto Scaling policy, you cannot select as metric the average CPU utilization of the primary instance (you must choose a predefined or custom metric that consider the status of ALL THE READ REPLICAS). Answer D is incorrect because in the Aurora Auto Scaling policy, you cannot select the average CPU utilization OF THE EXISTING Aurora Replica (you CANNOT CHOOSE a predefined or custom metric that consider only A SUBSET OF READ REPLICAS). Answer A is correct: you just need to define and apply an Aurora Auto Scaling policy, choosing Average CPU utilization of Aurora Replicas as the target metric.
Source: Adapted from community discussion — vaa2020
A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The company uses Amazon Route 53 to route traffic. The company also has a static website that is configured in an Amazon S3 bucket. A SysOps administrator must use the static website as a backup to the web application. The failover to the static website must be fully automated. Which combination of actions will meet these requirements? (Choose two.)
Answer: CE
Create the failover endpoint Open the Amazon Route 53 console, and then choose Hosted zones. Choose the hosted zone that you want to create the record for. Choose Create record, and input the following: For Record name, use the same value that you entered for the primary record. For Record type, choose A – Routes traffic to an IPV4 address and some AWS resources. For Alias, choose Yes. Note: Aliases automatically use a time to live (TTL) that matches the alias target. For Alias Target, choose the S3 bucket that you created previously. For Routing Policy, choose Failover. For Failover Record Type, choose Secondary. For Set ID, enter a name. Note: The name for the Set ID on your failover endpoint must be different from the name of the Set ID on your primary endpoint. For Associate with Health Check, choose No. Choose Create records.
Source: Adapted from community discussion — princajen
A company is using Amazon S3 to set up a temporary static website that is public. A SysOps administrator creates an S3 bucket by using the default settings. The SysOps administrator updates the S3 bucket properties to configure static website hosting. The SysOps administrator then uploads objects that contain content for index html and error html. When the SysOps administrator navigates to the website URL the SysOps administrator receives an HTTP Status Code 403: Forbidden (Access Denied) error. What should the SysOps administrator do to resolve this error?
Answer: B
A company has internal hybrid applications that have resources in the AWS Cloud and on premises. Users report that the applications sometimes are not available. The company has configured an Amazon CloudWatch alarm to monitor the tunnel status of its AWS Site-to-Site VPN connection. A SysOps administrator must implement a solution that creates a high-priority ticket in an internal ticketing tool when the VPN tunnel is down. Which solution will meet this requirement?
Answer: A
I vote for A, it is the simplest solution and is the one indicated in https://docs.aws.amazon.com/vpn/latest/s2svpn/monitoring-cloudwatch-vpn.html . But you have to assume that the internal ticketing tool is able to understand the message sent by the SNS service.
Source: Adapted from community discussion — vaa2020
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SOA-C02 practice, question 391. 475 questions available.
Version 1.0.0. How we source questions