AWS-SysOps Free Practice Test

- (Exam Topic 1)
A company wants to archive sensitive data on Amazon S3 Glacier. The company's regulatory and compliance requirements do not allow any modifications to the data by any account.
Which solution meets these requirements?

1. A. Attach a vault lock policy to an S3 Glacier vault that contains the archived dat
2. B. Use the lock ID to validate the vault lock policy after 24 hours.
3. C. Attach a vault lock policy to an S3 Glacier vault that contains the archived dat
4. D. Use the lock ID to validate the vault lock policy within 24 hours.
5. E. Configure S3 Object Lock in governance mod
6. F. Upload all files after 24 hours.
7. G. Configure S3 Object Lock in governance mod
8. H. Upload all files within 24 hours.

Correct Answer: B

- (Exam Topic 1)
A SysOps administrator needs to develop a solution that provides email notification and inserts a record into a database every time a file is put into an Amazon S3 bucket.
What is the MOST operationally efficient solution that meets these requirements?

1. A. Set up an S3 event notification that targets an Amazon Simple Notification Service (Amazon SNS) topic Create two subscriptions for the SNS topic Use one subscription to send the email notification Use the other subscription to invoke an AWS Lambda function that inserts the record into the database
2. B. Set up an Amazon CloudWatch alarm that enters ALARM state whenever an object is created in the S3 bucket Configure the alarm to invoke an AWS Lambda (unction that sends the email notification and inserts the record into the database
3. C. Create an AWS Lambda function to send the email notification and insert the record into the database whenever a new object is detected in the S3 bucket invoke the function every minute with an Amazon EventBridge (Amazon CloudWatch Events) scheduled rule.
4. D. Set up two S3 event notifications Target a separate AWS Lambda function with each notification Configure one function to send the email notification Configure the other function to insert the record into the database

Correct Answer: C

- (Exam Topic 1)
A SysOps administrator must create an IAM policy for a developer who needs access to specific AWS services. Based on the requirements, the SysOps administrator creates the following policy:

Which actions does this policy allow? (Select TWO.)

1. A. Create an AWS Storage Gateway.
2. B. Create an IAM role for an AWS Lambda function.
3. C. Delete an Amazon Simple Queue Service (Amazon SQS) queue.
4. D. Describe AWS load balancers.
5. E. Invoke an AWS Lambda function.

Correct Answer: DE

- (Exam Topic 1)
A company uploaded its website files to an Amazon S3 bucket that has S3 Versioning enabled. The company uses an Amazon CloudFront distribution with the S3 bucket as the origin. The company recently modified the tiles, but the object names remained the same. Users report that old content is still appearing on the website.
How should a SysOps administrator remediate this issue?

1. A. Create a CloudFront invalidation, and add the path of the updated files.
2. B. Create a CloudFront signed URL to update each object immediately.
3. C. Configure an S3 origin access identity (OAI) to display only the updated files to users.
4. D. Disable S3 Versioning on the S3 bucket so that the updated files can replace the old files.

Correct Answer: A

- (Exam Topic 1)
A company is releasing a new static website hosted on Amazon S3. The static website hosting feature was enabled on the bucket and content was uploaded: however, upon navigating to the site, the following error message is received:
403 Forbidden - Access Denied
What change should be made to fix this error?

1. A. Add a bucket policy that grants everyone read access to the bucket.
2. B. Add a bucket policy that grants everyone read access to the bucket objects.
3. C. Remove the default bucket policy that denies read access to the bucket.
4. D. Configure cross-origin resource sharing (CORS) on the bucket.

Correct Answer: B