AWS-SysOps Free Practice Test

- (Exam Topic 1)
A company plans to migrate several of its high performance computing (MPC) virtual machines (VMs) to Amazon EC2 instances on AWS. A SysOps administrator must identify a placement group for this deployment. The strategy must minimize network latency and must maximize network throughput between the HPC VMs.
Which strategy should the SysOps administrator choose to meet these requirements?

1. A. Deploy the instances in a cluster placement group in one Availability Zone.
2. B. Deploy the instances in a partition placement group in two Availability Zones
3. C. Deploy the instances in a partition placement group in one Availability Zone
4. D. Deploy the instances in a spread placement group in two Availably Zones

Correct Answer: A

- (Exam Topic 1)
A company is storing media content in an Amazon S3 bucket and uses Amazon CloudFront to distribute the content to its users. Due to licensing terms, the company is not authorized to distribute the content in some countries. A SysOps administrator must restrict access to certain countries.
What is the MOST operationally efficient solution that meets these requirements?

1. A. Configure the S3 bucket policy to deny the GetObject operation based on the S3:LocationConstraint condition.
2. B. Create a secondary origin access identity (OAI). Configure the S3 bucket policy to prevent access from unauthorized countries.
3. C. Enable the geo restriction feature in the CloudFront distribution to prevent access from unauthorized countries.
4. D. Update the application to generate signed CloudFront URLs only for IP addresses in authorized countries.

Correct Answer: C

- (Exam Topic 1)
A company hosts a website on multiple Amazon EC2 instances that run in an Auto Scaling group. Users are reporting slow responses during peak times between 6 PM and 11 PM every weekend. A SysOps administrator must implement a solution to improve performance during these peak times.
What is the MOST operationally efficient solution that meets these requirements?

1. A. Create a scheduled Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function to increase the desired capacity before peak times.
2. B. Configure a scheduled scaling action with a recurrence option to change the desired capacity before and after peak times.
3. C. Create a target tracking scaling policy to add more instances when memory utilization is above 70%.
4. D. Configure the cooldown period for the Auto Scaling group to modify desired capacity before and after peak times.

Correct Answer: B
"Scheduled scaling helps you to set up your own scaling schedule according to predictable load changes. For example, let's say that every week the traffic to your web application starts to increase on Wednesday, remains high on Thursday, and starts to decrease on Friday. You can configure a schedule for Amazon EC2 Auto Scaling to increase capacity on Wednesday and decrease capacity on Friday." https://docs.aws.amazon.com/autoscaling/ec2/userguide/schedule_time.html

- (Exam Topic 1)
A company’s reporting job that used to run in 15 minutes is now taking an hour to run. An application generates the reports. The application runs on Amazon EC2 instances and extracts data from an Amazon RDS for MySQL database.
A SysOps administrator checks the Amazon CloudWatch dashboard for the RDS instance and notices that the Read IOPS metrics are high, even when the reports are not running. The SysOps administrator needs to improve the performance and the availability of the RDS instance.
Which solution will meet these requirements?

1. A. Configure an Amazon ElastiCache cluster in front of the RDS instanc
2. B. Update the reporting job to query the ElastiCache cluster.
3. C. Deploy an RDS read replic
4. D. Update the reporting job to query the reader endpoint.
5. E. Create an Amazon CloudFront distributio
6. F. Set the RDS instance as the origi
7. G. Update the reporting job to query the CloudFront distribution.
8. H. Increase the size of the RDS instance.

Correct Answer: B
Using an RDS read replica will improve the performance and availability of the RDS instance by offloading read queries to the replica. This will also ensure that the reporting job completes in a timely manner and does not affect the performance of other queries that might be running on the RDS instance. Additionally, updating the reporting job to query the reader endpoint will ensure that all read queries are directed to the read replica.
Reference: [1] https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_ReadRepl.html

- (Exam Topic 1)
A SysOps administrator receives an alert from Amazon GuardDuty about suspicious network activity on an Amazon EC2 instance. The GuardDuty finding lists a new external IP address as a traffic destination. The SysOps administrator does not recognize the external IP address. The SysOps administrator must block traffic to the external IP address that GuardDuty identified.
Which solution will meet this requirement?

1. A. Create a new security group to block traffic to the external IP addres
2. B. Assign the new security group to the EC2 instance.
3. C. Use VPC flow logs with Amazon Athena to block traffic to the external IP address.
4. D. Create a network AC
5. E. Add an outbound deny rule for traffic to the external IP address.
6. F. Create a new security group to block traffic to the external IP addres
7. G. Assign the new security group to the entire VPC.

Correct Answer: C
https://docs.aws.amazon.com/vpc/latest/userguide/vpc-network-acls.html