AWS-SysOps Free Practice Test

- (Exam Topic 1)
A SysOps administrator has enabled AWS CloudTrail in an AWS account If CloudTrail is disabled it must be re-enabled immediately What should the SysOps administrator do to meet these requirements WITHOUT writing custom code''

1. A. Add the AWS account to AWS Organizations Enable CloudTrail in the management account
2. B. Create an AWS Config rule that is invoked when CloudTrail configuration changes Apply the AWS-ConfigureCloudTrailLogging automatic remediation action
3. C. Create an AWS Config rule that is invoked when CloudTrail configuration changes Configure the rule to invoke an AWS Lambda function to enable CloudTrail
4. D. Create an Amazon EventBridge (Amazon CloudWatch Events) hourly rule with a schedule pattern to run an AWS Systems Manager Automation document to enable CloudTrail

Correct Answer: B

- (Exam Topic 1)
A company uses AWS Organizations to manage multiple AWS accounts with consolidated billing enabled. Organization member account owners want the benefits of Reserved Instances (RIs) but do not want to share RIs with other accounts.
Which solution will meet these requirements?

1. A. Purchase RIs in individual member account
2. B. Disable Rl discount sharing in the management account.
3. C. Purchase RIs in individual member account
4. D. Disable Rl discount sharing in the member accounts.
5. E. Purchase RIs in the management accoun
6. F. Disable Rl discount sharing in the management account.
7. G. Purchase RIs in the management accoun
8. H. Disable Rl discount sharing in the member accounts.

Correct Answer: A
https://aws.amazon.com/premiumsupport/knowledge-center/ec2-ri-consolidated-billing/
RI discounts apply to accounts in an organization's consolidated billing family depending upon whether RI sharing is turned on or off for the accounts. By default, RI sharing for all accounts in an organization is turned on. The management account of an organization can change this setting by turning off RI sharing for an account. The capacity reservation for an RI applies only to the account the RI was purchased on, no matter whether RI sharing is turned on or off.

- (Exam Topic 1)
A company is using Amazon Elastic File System (Amazon EFS) to share a file system among several Amazon EC2 instances. As usage increases, users report that file retrieval from the EFS file system is slower than normal.
Which action should a SysOps administrator take to improve the performance of the file system?

1. A. Configure the file system for Provisioned Throughput.
2. B. Enable encryption in transit on the file system.
3. C. Identify any unused files in the file system, and remove the unused files.
4. D. Resize the Amazon Elastic Block Store (Amazon EBS) volume of each of the EC2 instances.

Correct Answer: A

- (Exam Topic 1)
A SysOps administrator receives an alert from Amazon GuardDuty about suspicious network activity on an Amazon FC2 instance. The GuardDuty finding lists a new external IP address as a traffic destination. The SysOps administrator does not recognize the external IP address. The SysOps administrator must block traffic to the external IP address that GuardDuty identified
Which solution will meet this requirement?

1. A. Create a new security group to block traffic to the external IP addres
2. B. Assign the new security group to the EC2 instance
3. C. Use VPC flow logs with Amazon Athena to block traffic to the external IP address
4. D. Create a network ACL Add an outbound deny rule tor traffic to the external IP address
5. E. Create a new security group to block traffic to the external IP address Assign the new security group to the entire VPC

Correct Answer: A

- (Exam Topic 1)
A company runs a stateless application that is hosted on an Amazon EC2 instance. Users are reporting performance issues. A SysOps administrator reviews the Amazon CloudWatch metrics for the application and notices that the instance's CPU utilization frequently reaches 90% during business hours.
What is the MOST operationally efficient solution that will improve the application's responsiveness?

1. A. Configure CloudWatch logging on the EC2 instanc
2. B. Configure a CloudWatch alarm for CPU utilization to alert the SysOps administrator when CPU utilization goes above 90%.
3. C. Configure an AWS Client VPN connection to allow the application users to connect directly to the EC2 instance private IP address to reduce latency.
4. D. Create an Auto Scaling group, and assign it to an Application Load Balance
5. E. Configure a target tracking scaling policy that is based on the average CPU utilization of the Auto Scaling group.
6. F. Create a CloudWatch alarm that activates when the EC2 instance's CPU utilization goes above 80%.Configure the alarm to invoke an AWS Lambda function that vertically scales the instance.

Correct Answer: C