AWS-SysOps Free Practice Test

- (Exam Topic 1)
A SysOps administrator is maintaining a web application using an Amazon CloudFront web distribution, an Application Load Balancer (ALB), Amazon RDS, and
Amazon EC2 in a VPC. All services have logging enabled. The administrator needs to investigate HTTP
Layer 7 status codes from the web application.
Which log sources contain the status codes? (Choose two.)

1. A. VPC Flow Logs
2. B. AWS CloudTrail logs
3. C. ALB access logs
4. D. CloudFront access logs
5. E. RDS logs

Correct Answer: CD
"C" because Elastic Load Balancing provides access logs that capture detailed information about requests sent to your load balancer
https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-access-logs.html
"D" because "you can configure CloudFront to create log files that contain detailed information about every user request that CloudFront receives"
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/AccessLogs.html

- (Exam Topic 1)
A SysOps administrator is using Amazon EC2 instances to host an application. The SysOps administrator needs to grant permissions for the application to access an Amazon DynamoDB table.
Which solution will meet this requirement?

1. A. Create access keys to access the DynamoDB tabl
2. B. Assign the access keys to the EC2 instance profile.
3. C. Create an EC2 key pair to access the DynamoDB tabl
4. D. Assign the key pair to the EC2 instance profile.
5. E. Create an IAM user to access the DynamoDB tabl
6. F. Assign the IAM user to the EC2 instance profile.
7. G. Create an IAM role to access the DynamoDB tabl
8. H. Assign the IAM role to the EC2 instance profile.

Correct Answer: D

- (Exam Topic 1)
A company has a new requirement stating that all resources In AWS must be tagged according to a set policy. Which AWS service should be used to enforce and continually Identify all resources that are not in compliance with the policy?

1. A. AWS CloudTrail
2. B. Amazon Inspector
3. C. AWS Config
4. D. AWS Systems Manager

Correct Answer: C

- (Exam Topic 1)
A company has a public website that recently experienced problems. Some links led to missing webpages, and other links rendered incorrect webpages. The application infrastructure was running properly, and all the provisioned resources were healthy. Application logs and dashboards did not show any errors, and no monitoring alarms were raised. Systems administrators were not aware of any problems until end users reported the issues.
The company needs to proactively monitor the website for such issues in the future and must implement a solution as soon as possible.
Which solution will meet these requirements with the LEAST operational overhead?

1. A. Rewrite the application to surface a custom error to the application log when issues occur.Automatically parse logs for error
2. B. Create an Amazon CloudWatch alarm to provide alerts when issues are detected.
3. C. Create an AWS Lambda function to test the websit
4. D. Configure the Lambda function to emit an Amazon CloudWatch custom metric when errors are detecte
5. E. Configure a CloudWatch alarm to provide alerts when issues are detected.
6. F. Create an Amazon CloudWatch Synthetics canar
7. G. Use the CloudWatch Synthetics Recorder plugin to generate the script for the canary ru
8. H. Configure the canary in line with requirement
9. I. Create an alarm to provide alerts when issues are detected.

Correct Answer: A

- (Exam Topic 1)
A SysOps administrator is designing a solution for an Amazon RDS for PostgreSQL DB instance. Database credentials must be stored and rotated monthly. The applications that connect to the DB instance send
write-intensive traffic with variable client connections that sometimes increase significantly in a short period of time.
Which solution should a SysOps administrator choose to meet these requirements?

1. A. Configure AWS Key Management Service (AWS KMS) to automatically rotate the keys for the DB instanc
2. B. Use RDS Proxy to handle the increases in database connections.
3. C. Configure AWS Key Management Service (AWS KMS) to automatically rotate the keys for the DB instanc
4. D. Use RDS read replicas to handle the increases in database connections.
5. E. Configure AWS Secrets Manager to automatically rotate the credentials for the DB instanc
6. F. Use RDS Proxy to handle the increases in database connections.
7. G. Configure AWS Secrets Manager to automatically rotate the credentials for the DB instanc
8. H. Use RDS read replicas to handle the increases in database connections.

Correct Answer: A