AWS-SysOps Free Practice Test

- (Exam Topic 1)
A SysOps administrator is provisioning an Amazon Elastic File System (Amazon EFS) file system to provide shared storage across multiple Amazon EC2 instances The instances all exist in the same VPC across multiple Availability Zones. There are two instances In each Availability Zone. The SysOps administrator must make the file system accessible to each instance with the lowest possible latency.
Which solution will meet these requirements?

1. A. Create a mount target for the EFS file system in the VP
2. B. Use the mount target to mount the file system on each of the instances
3. C. Create a mount target for the EFS file system in one Availability Zone of the VP
4. D. Use the mount target to mount the file system on the instances in that Availability Zon
5. E. Share the directory with the other instances.
6. F. Create a mount target for each instanc
7. G. Use each mount target to mount the EFS file system on each respective instance.
8. H. Create a mount target in each Availability Zone of the VPC Use the mount target to mount the EFS file system on the Instances in the respective Availability Zone.

Correct Answer: D
A mount target provides an IP address for an NFSv4 endpoint at which you can mount an Amazon EFS file system. You mount your file system using its Domain Name Service (DNS) name, which resolves to the IP address of the EFS mount target in the same Availability Zone as your EC2 instance. You can create one mount target in each Availability Zone in an AWS Region. If there are multiple subnets in an Availability Zone in your VPC, you create a mount target in one of the subnets. Then all EC2 instances in that Availability Zone share that mount target. https://docs.aws.amazon.com/efs/latest/ug/how-it-works.html

- (Exam Topic 1)
A company needs to view a list of security groups that are open to the internet on port 3389. What should a SysOps administrator do to meet this requirement?

1. A. Configure Amazon GuardDuty to scan security groups and report unrestricted access on port 3389.
2. B. Configure a service control policy (SCP) to identify security groups that allow unrestricted access on port 3389.
3. C. Use AWS Identity and Access Management Access Analyzer to find any instances that have unrestricted access on port 3389.
4. D. Use AWS Trusted Advisor to find security groups that allow unrestricted access on port 3389

Correct Answer: D

- (Exam Topic 1)
A company's SysOps administrator needs to change the AWS Support plan for one of the company's AWS accounts. The account has multi-factor authentication (MFA) activated, and the MFA device is lost.
What should the SysOps administrator do to sign in?

1. A. Sign in as a root user by using email and phone verificatio
2. B. Set up a new MFA devic
3. C. Change the root user password.
4. D. Sign in as an 1AM user with administrator permission
5. E. Resynchronize the MFA token by using the 1AM console.
6. F. Sign in as an 1AM user with administrator permission
7. G. Reset the MFA device for the root user by adding a new device.
8. H. Use the forgot-password process to verify the email addres
9. I. Set up a new password and MFA device.

Correct Answer: A

- (Exam Topic 1)
A company requires that all IAM user accounts that have not been used for 90 days or more must have their access keys and passwords immediately disabled A SysOps administrator must automate the process of disabling unused keys using the MOST operationally efficient method.
How should the SysOps administrator implement this solution?

1. A. Create an AWS Step Functions workflow to identify IAM users that have not been active for 90 days Run an AWS Lambda function when a scheduled Amazon EventBridge (Amazon CloudWatch Events) rule is invoked to automatically remove the AWS access keys and passwords for these IAM users
2. B. Configure an AWS Config rule to identify IAM users that have not been active for 90 days Set up an automatic weekly batch process on an Amazon EC2 instance to disable the AWS access keys and passwords for these IAM users
3. C. Develop and run a Python script on an Amazon EC2 instance to programmatically identify IAM users that have not been active for 90 days Automatically delete these 1AM users
4. D. Set up an AWS Config managed rule to identify IAM users that have not been active for 90 days Set up an AWS Systems Manager automation runbook to disable the AWS access keys for these IAM users

Correct Answer: D

- (Exam Topic 1)
A company hosts several write-intensive applications. These applications use a MySQL database that runs on a single Amazon EC2 instance. The company asks a SysOps administrator to implement a highly available database solution that is ideal for multi-tenant workloads.
Which solution should the SysOps administrator implement to meet these requirements?

1. A. Create a second EC2 instance for MySQ
2. B. Configure the second instance to be a read replica.
3. C. Migrate the database to an Amazon Aurora DB cluste
4. D. Add an Aurora Replica.
5. E. Migrate the database to an Amazon Aurora multi-master DB cluster.
6. F. Migrate the database to an Amazon RDS for MySQL DB instance.

Correct Answer: C