AWS-SysOps Free Practice Test

- (Exam Topic 1)
A company wants to track its AWS costs in all member accounts that are part of an organization in AWS Organizations. Managers of the member accounts want to receive a notification when the estimated costs exceed a predetermined amount each month. The managers are unable to configure a billing alarm. The IAM permissions for all users are correct. What could be the cause of this issue?

1. A. The management/payer account does not have billing alerts turned on.
2. B. The company has not configured AWS Resource Access Manager (AWS RAM) to share billing information between the member accounts and the management/payer account.
3. C. Amazon GuardDuty is turned on for all the accounts.
4. D. The company has not configured an AWS Config rule to monitor billing.

Correct Answer: B

- (Exam Topic 1)
A SysOps administrator is trying to set up an Amazon Route 53 domain name to route traffic to a website hosted on Amazon S3. The domain name of the website is www.anycompany.com and the S3 bucket name is anycompany-static. After the record set is set up in Route 53, the domain name www.anycompany.com does not seem to work, and the static website is not displayed in the browser.
Which of the following is a cause of this?

1. A. The S3 bucket must be configured with Amazon CloudFront first.
2. B. The Route 53 record set must have an IAM role that allows access to the S3 bucket.
3. C. The Route 53 record set must be in the same region as the S3 bucket.
4. D. The S3 bucket name must match the record set name in Route 53.

Correct Answer: D

- (Exam Topic 1)
A company plans to run a public web application on Amazon EC2 instances behind an Elastic Load Balancer (ELB). The company's security team wants to protect the website by using AWS Certificate Manager (ACM) certificates The ELB must automatically redirect any HTTP requests to HTTPS
Which solution will meet these requirements?

1. A. Create an Application Load Balancer that has one HTTPS listener on port 80 Attach an SSLTLS certificate to listener port 80 Create a rule to redirect requests from HTTP to HTTPS
2. B. Create an Application Load Balancer that has one HTTP listener on port 80 and one HTTPS protocol listener on port 443 Attach an SSL TLS certificate to listener port 443 Create a rule to redirect requests from port 80 to port 443
3. C. Create an Application Load Balancer that has two TCP listeners on port 80 and port 443 Attach an SSLTLS certificate to listener port 443 Create a rule to redirect requests from port 80 to port 443
4. D. Create a Network Load Balancer that has two TCP listeners on port 80 and port 443 Attach an SSLTLS certificate to listener port 443 Create a rule to redirect requests from port 80 to port 443

Correct Answer: B

- (Exam Topic 1)
A SysOps administrator Is troubleshooting an AWS Cloud Formation template whereby multiple Amazon EC2 instances are being created The template is working In us-east-1. but it is failing In us-west-2 with the error code:

How should the administrator ensure that the AWS Cloud Formation template is working in every region?

1. A. Copy the source region's Amazon Machine Image (AMI) to the destination region and assign it the same ID.
2. B. Edit the AWS CloudFormatton template to specify the region code as part of the fully qualified AMI ID.
3. C. Edit the AWS CloudFormatton template to offer a drop-down list of all AMIs to the user by using the aws :: EC2:: ami :: imageiD control.
4. D. Modify the AWS CloudFormation template by including the AMI IDs in the "Mappings" sectio
5. E. Refer to the proper mapping within the template for the proper AMI ID.

Correct Answer: A

- (Exam Topic 1)
A company stores sensitive data in an Amazon S3 bucket. The company must log all access attempts to the S3 bucket. The company's risk team must receive immediate notification about any delete events.
Which solution will meet these requirements?

1. A. Enable S3 server access logging for audit log
2. B. Set up an Amazon Simple Notification Service (Amazon SNSJ notification for the S3 bucke
3. C. Select DeleteObject tor the event type for the alert system.
4. D. Enable S3 server access logging for audit log
5. E. Launch an Amazon EC2 instance for the alert system.Run a cron job on the EC2 instance to download the access logs each day and to scan for a DeleteObject event.
6. F. Use Amazon CloudWatch Logs for audit log
7. G. Use Amazon CloudWatch alarms with an Amazon Simple Notification Service (Amazon SNS) notification for the alert system.
8. H. Use Amazon CloudWatch Logs for audit log
9. I. Launch an Amazon EC2 instance for The alert system.Run a cron job on the EC2 Instance each day to compare the list of the items with the list from the previous da
10. J. Configure the cron job to send a notification if an item is missing.

Correct Answer: A
To meet the requirements of logging all access attempts to the S3 bucket and receiving immediate notification about any delete events, the company can enable S3 server access logging and set up an Amazon Simple Notification Service (Amazon SNS) notification for the S3 bucket. The S3 server access logs will record all access attempts to the bucket, including delete events, and the SNS notification can be configured to send an alert when a DeleteObject event occurs.