AWS-SysOps Free Practice Test

- (Exam Topic 1)
A SysOps administrator has used AWS Cloud Formation to deploy a sereness application into a production VPC. The application consists of an AWS Lambda function, an Amazon DynamoOB table, and an Amazon API Gateway API. The SysOps administrator must delete the AWS Cloud Formation stack without deleting the DynamoOB table.
Which action should the SysOps administrator take before deleting the AWS Cloud Formation stack?

1. A. Add a Retain deletion policy to the DynamoOB resource in the AWS CloudFormation stack.
2. B. Add a Snapshot deletion policy to the DynamoOB resource In the AWS CloudFormation stack.
3. C. Enable termination protection on the AWS Cloud Formation stack.
4. D. Update the application's IAM policy with a Deny statement for the dynamodb:DeleteTabie action.

Correct Answer: A

- (Exam Topic 1)
A new application runs on Amazon EC2 instances and accesses data in an Amazon RDS database instance. When fully deployed in production, the application fails. The database can be queried from a console on a bastion host. When looking at the web server logs, the following error is repeated multiple times:
"** Error Establishing a Database Connection
Which of the following may be causes of the connectivity problems? {Select TWO.)

1. A. The security group for the database does not have the appropriate egress rule from the database to the web server.
2. B. The certificate used by the web server is not trusted by the RDS instance.
3. C. The security group for the database does not have the appropriate ingress rule from the web server to the database.
4. D. The port used by the application developer does not match the port specified in the RDS configuration.
5. E. The database is still being created and is not available for connectivity.

Correct Answer: CD

- (Exam Topic 1)
A company is using Amazon Elastic File System (Amazon EFS) to share a file system among several Amazon EC2 instances. As usage increases, users report that file retrieval from the EFS file system is slower than normal.
Which action should a SysOps administrator take to improve the performance of the file system?

1. A. Configure the file system for Provisioned Throughput.
2. B. Enable encryption in transit on the file system.
3. C. Identify any unused files in the file system, and remove the unused files.
4. D. Resize the Amazon Elastic Block Store (Amazon EBS) volume of each of the EC2 instances.

Correct Answer: A

- (Exam Topic 1)
A company uses AWS CloudFormation to deploy its application infrastructure Recently, a user accidentally changed a property of a database in a CloudFormation template and performed a stack update that caused an interruption to the application A SysOps administrator must determine how to modify the deployment process to allow the DevOps team to continue to deploy the infrastructure, but prevent against accidental modifications to specific resources.
Which solution will meet these requirements?

1. A. Set up an AWS Config rule to alert based on changes to any CloudFormation stack An AWS Lambda function can then describe the stack to determine if any protected resources were modified and cancel the operation
2. B. Set up an Amazon CloudWatch Events event with a rule to trigger based on any CloudFormation API call An AWS Lambda function can then describe the stack to determine if any protected resources were modified and cancel the operation
3. C. Launch the CloudFormation templates using a stack policy with an explicit allow for all resources and an explicit deny of the protected resources with an action of Update
4. D. Attach an IAM policy to the DevOps team role that prevents a CloudFormation stack from updating, with a condition based on the specific Amazon Resource Names (ARNs) of the protected resources

Correct Answer: B

- (Exam Topic 1)
A SysOps administrator has used AWS Cloud Formal ion to deploy a serverless application Into a production VPC. The application consists of an AWS Lambda function an Amazon DynamoDB table, and an Amazon API Gateway API. The SysOps administrator must delete the AWS Cloud Formation stack without deleting the DynamoDB table.
Which action should the SysOps administrator take before deleting the AWS Cloud Formation stack?

1. A. Add a Retain deletion policy to the DynamoDB resource in the AWS CloudFormation stack
2. B. Add a Snapshot deletion policy to the DynamoDB resource in the AWS CloudFormation stack.
3. C. Enable termination protection on the AWS Cloud Formation stack.
4. D. Update the application's IAM policy with a Deny statement for the dynamodb:DeleteTabie action.

Correct Answer: A