← Back to exam page

Free AWS-CERTIFIED-SYSOPS-ADMINISTRATOR-ASSOCIATE – Amazon AWS-CERTIFIED-SYSOPS-ADMINISTRATOR-ASSOCIATE Practice Test Question

Loading demo links...

Showing 1–3 of 48 questions

Question 1 (Topic 1)

A SysOps administrator is troubleshooting an AWS CloudFormation template whereby multiple Amazon EC2 instances are being created. The template is working in us-east-1, but it is failing in us-west-2 with the error code: AMI [ami-12345678] does not exist How should the Administrator ensure that the AWS CloudFormation template is working in every region?

Select an option, then click Submit answer.

  • ○ Copy the source region's Amazon Machine Image (AMI) to the destination region and assign it the same ID.
  • ○ Edit the AWS CloudFormation template to specify the region code as part of the fully qualified AMI ID.
  • ○ Edit the AWS CloudFormation template to offer a drop-down list of all AMIs to the user by using the AWS::EC2::AMI::ImageID control.
  • ○ Modify the AWS CloudFormation template by including the AMI IDs in the ג€Mappingsג€ section. Refer to the proper mapping within the template for the proper AMI ID.
Question 2 (Topic 1)

A team is managing an AWS account that is a member of an organization in AWS Organizations. The organization has consolidated billing features enabled. The account hosts several applications. A SysOps administrator has applied tags to resources within the account to reflect the environment. The team needs a report of the breakdown of charges by environment. What should the SysOps administrator do to meet this requirement?

Select an option, then click Submit answer.

  • ○ Filter, map, and categorize resource groups in Tag Editor.
  • ○ Ensure that the organization's service control policies (SCPs) allow access to cost allocation tags.
  • ○ Ensure that the IAM credentials that are used to access Cost Explorer have permissions to group cost by tags.
  • ○ Activate the tag keys for cost allocation on the organization's management account.
Question 3 (Topic 1)

A company's public website is hosted in an Amazon S3 bucket in the us-east-1 Region behind an Amazon CloudFront distribution. The company wants to ensure that the website is protected from DDoS attacks. A SysOps administrator needs to deploy a solution that gives the company the ability to maintain control over the rate limit at which DDoS protections are applied. Which solution will meet these requirements?

Select an option, then click Submit answer.

  • ○ Deploy a global-scoped AWS WAF web ACL with an allow default action. Configure an AWS WAF rate-based rule to block matching traffic. Associate the web ACL with the CloudFront distribution.
  • ○ Deploy an AWS WAF web ACL with an allow default action in us-east-1. Configure an AWS WAF rate-based rule to block matching traffic. Associate the web ACL with the S3 bucket.
  • ○ Deploy a global-scoped AWS WAF web ACL with a block default action. Configure an AWS WAF rate-based rule to allow matching traffic. Associate the web ACL with the CloudFront distribution.
  • ○ Deploy an AWS WAF web ACL with a block default action in us-east-1. Configure an AWS WAF rate-based rule to allow matching traffic. Associate the web ACL with the S3 bucket.