AWS Certified SysOps Administrator - Associate Exam Questions 2021

AWS Certified SysOps Administrator – Associate Sample Exam

/15

AWS SysOps Administrator - Associate Exam Question (15 Questions)

This is free Sample Practice Test. You will have 25 mins to complete this test. Please purchase to get life time access to all 627 Real exam questions.

Please fill your Name and Email address and click on next to Start the Exam

1 / 15

A user has launched 10 instances from the same AMI ID using Auto Scaling. The user is trying to see the average CPU utilization across all instances of the last 2 weeks under the CloudWatch console. How can the user achieve this?

A. View the Auto Scaling CPU metrics

B. Aggregate the data over the instance AMI ID

C. The user has to use the CloudWatch analyser to find the average data across instances

D. It is not possible to see the average CPU utilization of the same AMI ID since the instance ID is different

2 / 15

You are managing the AWS account of a big organization. The organization has more than 1000+ employees and they want to provide access to the various services to most of the employees. Which of the below mentioned options is the best possible solution in this case?

A. The user should create a separate IAM user for each employee and provide access to them as per the policy

B. The user should create an IAM role and attach STS with the role. The user should attach that role to the EC2 instance and setup AWS authentication on that server

C. The user should create IAM groups as per the organization’s departments and add each user to the group for better access control

D. Attach an IAM role with the organization’s authentication service to authorize each user for various AWS services

3 / 15

Given the following IAM policy:

{
"Version": "2014-19-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"s3:Get*", "s3:List*"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": "s3:PutObject",
"Resource": "arn:AWS:s3:::bucket_new/*"
}
]
}

What does the IAM policy allow?

Choose the 2 correct answers:

A. The user is allowed to read objects in the bucket named ‘bucket_new’ but not allowed to list the objects in the bucket

B. The user is allowed to write objects into the bucket named ‘bucket_new’

C. The user is allowed to change access rights for the bucket named ‘bucket_new’

D. The user is allowed to read objects from the bucket named ‘bucket_new’

4 / 15

A user has configured ELB with SSL using a security policy for secure negotiation between the client and load balancer. Which of the below mentioned SSL protocols is not supported by the security policy?

A. TLS 1.3

B. TLS 1.2

C. TLS 1.1

D. SSL 3.0

5 / 15

Your company has just hit a bottleneck for their on-premise storage and now want to extend their storage to AWS. They want to store the files in S3 and make them available as NFS file shares to their On-premise servers. Which of the following can help achieve this requirement?

A. Usage of S3 lifecycle policies

B. Usage of the EFS file system

C. Usage of the File gateway

D. Usage of AWS EBS volumes

6 / 15

A company currently has started using the Storage gateway service to extend its storage capacity to the AWS Cloud. There is a mandate that all data is encrypted when it is being managed by the AWS Storage gateway. Which of the following would you implement to comply with this request?

A. Create an X.509 certificate that can be used to encrypt the data

B. Use the AWS KMS service to encrypt the data

C. Use an SSL certificate to encrypt the data

D. Use your own master keys to encrypt the data

7 / 15

You are designing a Cloudformation template to create a set of EC2 Instance and install an application package. You need to ensure that the stack is only successful if the software package gets installed successfully. Which of the following would assign in achieving this requirement?

A. Use the cfn-signal helper script

B. Use the Change sets feature

C. Use Cloudwatch logs to signal the completion

D. Use Cloudtrail to signal the completion

8 / 15

You are a Systems Administrator for a company. You have been instructed to manage the users in AWS for the company. Which of the following are some of the best practises which you must follow with regards to managing security credentials in AWS. Choose 3 answers from the options below

A. Use the AWS Root access keys for critical applications to access AWS resources

B. Enable MFA for Privileged users

C. Use IAM Roles for EC2 Instances

D. Grant access on a least privilege basis

9 / 15

A user is using a small MySQL RDS DB. The user is experiencing high latency due to the Multi AZ feature. Which of the below mentioned options may not help the user in this situation?

A. Schedule the automated back up in non-working hours

B. Use a large or higher size instance

C. Use PIOPS

D. Take a snapshot from standby Replica

10 / 15

A company is experiencing high latency due to the Multi AZ feature for their MySQL database. Which of the below mentioned options can help alleviate the situation? Select three options.

A. Schedule the automated back up in non-working hours

B. Use a large or higher size instance

C. Use PIOPS

D. Take a snapshot from standby Replica

11 / 15

Your company has set a Network Load Balancer in AWS. They need to get the detailed traffic requests that flow into the load balancer. Which of the following can help accomplish this requirement?

A. Use Cloudwatch Logs

B. Use Cloudwatch metrics

C. Use Cloudtrail logs

D. Use VPC Flow Logs

12 / 15

One of your Systems Administrators has defined the following NACL’s rules for a subnet
A security Rule has also been defined for an EC2 Instance in the subnet to allow all incoming traffic on port 80 from anywhere. Which of the following is TRUE based on the above settings?

A. A request from a workstation on the Internet with IP address 52.10.1.2 will be allowed onto the EC2 Instance on port 80

B. All traffic on all ports will not be allowed to flow into the subnet

C. There will be an error in setting the rules for the Security Group rules due to the clash in rules

D. All traffic out of the subnet will be denied

13 / 15

A user is observing the EC2 CPU utilization metric on CloudWatch. The user has observed some interesting patterns while filtering over the 1 week period for a particular hour. The user wants to zoom that data point to a more granular period. How can the user do that easily with CloudWatch?

A. The user can zoom a particular period by selecting that period with the mouse and then releasing the mouse

B. The user can zoom a particular period by double clicking on that period with the mouse

C. The user can zoom a particular period by specifying the aggregation data for that period

D. The user can zoom a particular period by specifying the period in the Time Range

14 / 15

George has shared an EC2 AMI created in the US East region from his AWS account with Stefano. George copies the same AMI to the US West region. Can Stefano access the copied AMI of George’s account from the US West region?

A. No, copy AMI does not copy the permission

B. It is not possible to share the AMI with a specific account

C. Yes, since copy AMI copies all private account sharing permissions

D. Yes, since copy AMI copies all the permissions attached with the AMI

15 / 15

A colleague noticed that CloudWatch was reporting that there has not been any connections to one of your MySQL databases for several months. You decided to terminate the database. Two months after the database was terminated, you get a phone call from a very upset user who needs information from that database to run end-of-year reports. What can you do? Choose the correct answer from the options given below.

A. Nothing, since the 35-day maximum retention period for automated backups has expired.

B. If you took a manual snapshot of the database, you can restore the database from that snapshot.

C. You can restore the database from the most recent automated backup of the database.

D. Nothing, since the 35-day maximum retention period for snapshots has expired.

Your score is

This learning path is designed for sysops administrators, systems administrators, and those in a DevOps role who want to learn how to create automatable and repeatable deployments of applications, networks, and systems on the AWS platform. Build technical skills as you progress along the path toward AWS Certification.

We gave a considerable amount of effort to create and publish these AWS Certified SysOps Administrator Associate practice tests, including the laborious task of checking each item for any errors. We are confident that this will significantly help you pass your exam. All the best!

IMPORTANT NOTE

These AWS Certified SysOps Administrator Associate practice exams have a passing score of 72% but we highly encourage you to repeat taking these exams again and again until you consistently reach a score of 90% or higher on each exam.

11 reviews for AWS Certified SysOps Administrator – Associate Exam Questions 2021

Rated 5 out of 5

Adam Marine – September 14, 2020

I passed the Sysops due to this course. Amazing explanations for the correct as well as incorrect answers. Must for preparation. Passed!
Rated 5 out of 5

Marc J. Dziezynski – October 1, 2020

Excellent practice tests. An eye opener for me. I learnt a lot of topics going through these tests. The explanations for each option, why is it correct and why is it wrong are excellent. Never saw such detailed explanations with proper links. A must for anyone who wants to clear sysops admin
Rated 5 out of 5

Jeetendra Shinde – October 10, 2020

This was an awesome training program! I kept on studying and passing the practice exam until I could start scoring 80% as suggested. In my view, I have thought that it might take couple times before I pass the exam, but I have passed in my first try.
Rated 5 out of 5

Amit Kumar Sethi – November 7, 2020

I passed my exam recently by following an online course AND taking all 8 of these practice exams. These practice exams are harder than the actual but an amazing way to prepare. I kept scoring around low to mid 70% on the first 2 or 3 exams, then ramped it up to high 70%. I wanted to hit 80% or better but never could (on my first try). I read all the explanations for each question, studied those and my notes, then took the real exam. I scored above 90% on the real exam so these practice exams are extremely valuable and I cannot recommend it enough! These were critical to me passing!
Rated 4 out of 5

Fábio Freitas – November 14, 2020

As a training/preparation method, these exams are good and get the job done. Regarding the questions being from exams, I honeslty don’t know how true this is, because my exam only got 2 or 5 questions that came from the exams. Anyway, it’s better to know the information isntead of memorizing answers. If you practice this exams and understand the information, you will succeed in the exam. Not an easy thing, but it pays off in the end.
Rated 5 out of 5

Cannon Mascarenhas – February 26, 2021

Have tried these exams questions and tried until achieve score 90%

and then i tried sysops certification and successfully passed it,

thnx to skillcertpro for making this easy!
Rated 5 out of 5

Shashikant Swain – March 10, 2021

Managed to get my cert today despite some poor time management which put me on a tight study schedule and I’m convinced it’s primarily based on how good these PTs/explanations are.

The questions are very similar to those on the real exam and they are tricky in the same way (they definitely taught me to read every word of every question and answer carefully). The explanations are also very well reasoned and clear.

Can’t recommend this enough.
Rated 5 out of 5

Weily Britt – April 6, 2021

This is a great concise preparation for the exam. Of all the practice tests that I took, these most closely resembled the exam questions.
Rated 5 out of 5

Jalendra Yadav – April 10, 2021

Passed the sysops certification with 93% yesterday and this really helped me a lot. It is harder than the actual exam. It tests your knowledge on each component and it covers all topics. A good gauge to see if you are ready to take the test. I like how well explained the answers were. I just wish that some questions are less wordy and be direct to the point. But overall, this is the best practice test on the market.
Rated 5 out of 5

Sailender reddy – April 12, 2021

This is very good pratice exam available for this certfication. This exams are really tough than the actual exam. But it helps me to clear the certfication with 913 marks.
Rated 5 out of 5

Usain Mohammad – April 15, 2021

The author has put great effort and time to create this awesome practice exam. The layout, content, explanation, and number of questions are great. Will highly recommend for anyone preparing for the exam.