Free AWS-CERTIFIED-SYSOPS-ADMINISTRATOR-ASSOCIATE – Amazon AWS-CERTIFIED-SYSOPS-ADMINISTRATOR-ASSOCIATE Practice Test Question

Reference / correct answer:

Most accepted answer: D. Object metadata

Community votes: D=5

Selected Answer: D By default, Amazon S3 replicates the following: Objects created after you add a replication configuration. Unencrypted objects. Objects encrypted using customer provided keys (SSE-C), objects encrypted at rest under an Amazon S3 managed key (SSE-S3) or a KMS key stored in AWS Key Management Service (SSE-KMS). For more information, see Replicating objects created with server-side encryption (SSE-C, SSE-S3, SSE-KMS, DSSE-KMS). Object metadata from the source objects to the replicas. For information about replicating metadata from the replicas to the source objects, see Replicating metadata changes with Amazon S3 replica modification sync. Only objects in the source bucket for which the bucket owner has permissions to read objects and access control lists (ACLs). upvoted 7 times

Selected Answer: D Object ACL updates, unless you direct Amazon S3 to change the replica ownership when source and destination buckets aren't owned by the same accounts. For more information, see Changing the replica owner. It can take a while until Amazon S3 can bring the two ACLs in sync. This change in ownership applies only to objects created after you add a replication configuration to the bucket. Object tags, if there are any. S3 Object Lock retention information, if there is any. upvoted 2 times

Selected Answer: D What is replicated by default? "Object metadata from the source objects to the replicas." "Only objects in the source bucket for which the bucket owner has permissions to read objects and access control lists (ACLs)." upvoted 2 times

Selected Answer: D https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication-what-is-isnot-replicated.html#replication-what-is-replicated upvoted 3 times

Selected Answer: D ddddddd upvoted 1 times

Reference / correct answer:

Most accepted answer: D. Elastic Load Balancer access logs

Community votes: C=1, D=2

Ans: D! upvoted 5 times

Answer D "Elastic Load Balancing provides access logs that capture detailed information about requests sent to your load balancer. Each log contains information such as the time the request was received, the client's IP address, latencies, request paths, and server responses. You can use these access logs to analyze traffic patterns and troubleshoot issues." https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-access-logs.html upvoted 5 times

Selected Answer: C The ELB Log needs to be enabled explicitly. The question does not mention that the ELB access logs are enabled at this moment. upvoted 1 times

Answer: D upvoted 1 times

Selected Answer: D Each log contains information such as the time the request was received, the client's IP address, latencies, request paths, and server responses. You can use these access logs to analyze traffic patterns and troubleshoot issues. upvoted 4 times

Reference / correct answer:

Most accepted answer: D. Route ::/0 traffic to an egress-only internet gateway

Community votes: B=2, D=4

Selected Answer: D Vote for D IPV4 = NAT Instance/Gateway | 0.0.0.0 IPV6 = Egress-Only Internet Gateway | ::/0 upvoted 9 times

Ans: D Ref: https://docs.aws.amazon.com/vpc/latest/userguide/egress-only-internet-gateway.html upvoted 6 times

Selected Answer: B B. Route ::/0 traffic to an internet gateway To enable IPv6 traffic from an Amazon VPC to the internet, you need to add a default route (::/0) pointing to an internet gateway in the VPC's route table. This allows outbound traffic to reach the internet. This route configuration allows all IPv6 traffic (::/0) to be directed to the internet gateway, enabling communication with the internet. # Option A is incorrect because using a NAT gateway is typically for IPv4 traffic and is not applicable for IPv6. # Options C and D are not relevant for enabling outbound internet access in an IPv6-enabled VPC. Egress-only internet gateways are used for allowing outbound traffic initiated by resources in the VPC to reach the internet, but they are not used for incoming traffic from the internet. upvoted 1 times Aamee 1 year, 10 months ago It's def. not 'B'. Read the question one more time. The VPC traffic only needs to communicate with the IGW and not vice versa. Therefore , D is correct considering the scenario discussed in this question IMO. upvoted 1 times ...

It's def. not 'B'. Read the question one more time. The VPC traffic only needs to communicate with the IGW and not vice versa. Therefore , D is correct considering the scenario discussed in this question IMO. upvoted 1 times

Selected Answer: D IPv6 addresses are globally unique, and are therefore public by default. If you want your instance to be able to access the internet, but you want to prevent resources on the internet from initiating communication with your instance, you can use an egress-only internet gateway. To do this, create an egress-only internet gateway in your VPC, and then add a route to your route table that points all IPv6 traffic (::/0) or a specific range of IPv6 address to the egress-only internet gateway. IPv6 traffic in the subnet that's associated with the route table is routed to the egress-only internet gateway. upvoted 4 times