AWS-SysOps Free Practice Test

- (Exam Topic 1)
A company runs a website from Sydney, Australia. Users in the United States (US) and Europe are reporting that images and videos are taking a long time to load. However, local testing in Australia indicates no performance issues. The website has a large amount of static content in the form of images and videos that are stored m Amazon S3.
Which solution will result In the MOST Improvement In the user experience for users In the US and Europe?

1. A. Configure AWS PrivateLink for Amazon S3.
2. B. Configure S3 Transfer Acceleration.
3. C. Create an Amazon CloudFront distributio
4. D. Distribute the static content to the CloudFront edge locations
5. E. Create an Amazon API Gateway API in each AWS Regio
6. F. Cache the content locally.

Correct Answer: D

- (Exam Topic 1)
A company needs to implement a managed file system to host Windows file shares for users on premises. Resources in the AWS Cloud also need access to the data on these file shares. A SysOps administrator needs to present the user file shares on premises and make the user file shares available on AWS with minimum latency.
What should the SysOps administrator do to meet these requirements?

1. A. Set up an Amazon S3 File Gateway.
2. B. Set up an AWS Direct Connect connection.
3. C. Use AWS DataSync to automate data transfers between the existing file servers and AWS.
4. D. Set up an Amazon FSx File Gateway.

Correct Answer: D
Amazon FSx provides a fully managed file system that is optimized for Windows-based workloads and can be used to create file shares that can be accessed both on premises and in the AWS Cloud. The file shares that are created in Amazon FSx are highly available and can be accessed with low latency. Additionally, Amazon FSx supports Windows-based authentication, making it easy to integrate with existing Windows user accounts.
References:
[1] https://aws.amazon.com/fsx/
[2] https://aws.amazon.com/storage/file-storage/
[3] https://docs.aws.a

- (Exam Topic 1)
An application runs on multiple Amazon EC2 instances in an Auto Scaling group The Auto Scaling group is
configured to use the latest version of a launch template A SysOps administrator must devise a solution that centrally manages the application logs and retains the logs for no more than 90 days
Which solution will meet these requirements?

1. A. Launch an Amazon Machine Image (AMI) that is preconfigured with the Amazon CloudWatch Logs agent to send logs to an Amazon S3 bucket Apply a 90-day S3 Lifecycle policy on the S3 bucket to expire the application logs
2. B. Launch an Amazon Machine Image (AMI) that is preconfigured with the Amazon CloudWatch Logs agent to send logs to a log group Create an Amazon EventBridge (Amazon CloudWatch Events) scheduled rule to perform an instance refresh every 90 days
3. C. Update the launch template user data to install and configure the Amazon CloudWatch Logs agent to send logs to a log group Configure the retention period on the log group to be 90 days
4. D. Update the launch template user data to install and configure the Amazon CloudWatch Logs agent to send logs to a log group Set the log rotation configuration of the EC2 instances to 90 days

Correct Answer: C

- (Exam Topic 1)
A SysOps administrator has Nocked public access to all company Amazon S3 buckets. The SysOps administrator wants to be notified when an S3 bucket becomes publicly readable in the future.
What is the MOST operationally efficient way to meet this requirement?

1. A. Create an AWS Lambda function that periodically checks the public access settings for each S3 bucket.Set up Amazon Simple Notification Service (Amazon SNS) to send notifications.
2. B. Create a cron script that uses the S3 API to check the public access settings for each S3 bucke
3. C. Set up Amazon Simple Notification Service (Amazon SNS) to send notifications
4. D. Enable S3 Event notified tons for each S3 bucke
5. E. Subscribe S3 Event Notifications to an Amazon Simple Notification Service (Amazon SNS) topic.
6. F. Enable the s3-bucket-public-read-prohibited managed rule in AWS Confi
7. G. Subscribe the AWS Config rule to an Amazon Simple Notification Service (Amazon SNS) topic.

Correct Answer: D

- (Exam Topic 1)
A company wants to archive sensitive data on Amazon S3 Glacier. The company's regulatory and compliance requirements do not allow any modifications to the data by any account.
Which solution meets these requirements?

1. A. Attach a vault lock policy to an S3 Glacier vault that contains the archived dat
2. B. Use the lock ID to validate the vault lock policy after 24 hours.
3. C. Attach a vault lock policy to an S3 Glacier vault that contains the archived dat
4. D. Use the lock ID to validate the vault lock policy within 24 hours.
5. E. Configure S3 Object Lock in governance mod
6. F. Upload all files after 24 hours.
7. G. Configure S3 Object Lock in governance mod
8. H. Upload all files within 24 hours.

Correct Answer: B