AWS Certified Sysops Administrator - Associate ( Systems Operations on AWS - AWSSYS ) Quiz Questions and Answers

An application running on Amazon EC2 must store objects in an S3 bucket. Which option follows best practices for granting the application access to the S3 bucket?

Answer :
  • Use an IAM role with the permission to write to S3 bucket.

Company salespeople upload their sales figures daily. A Solutions Architect needs a durable storage solution for these documents that also protects against users accidentally deleting important documents. Which action will protect against unintended user actions?

Answer :
  • Store data in an S3 bucket and enable versioning.

Which of the following components of the Cloudfront service can be used to distribute content to users across the globe?

Answer :
  • Amazon Edge locations

You are designing a system that has a Bastion host. This component needs to be highly available without human intervention. Which of the following approaches would you select?

Answer :
  • Configure the bastion instance in an Auto Scaling group Specify the Auto Scaling group to include multiple AZs but have a min-size of 1 and max-size of 1

A consulting firm repeatedly builds large architectures for its customers using AWS resources from several AWS services, including IAM, Amazon EC2, Amazon RDS, DynamoDB, and Amazon VPC. The consultants have architecture diagrams for each of their architectures and are frustrated that they cannot use them to automatically create their resources. Which service should provide immediate benefits to the organization?

Answer :
  • AWS Cloudformation

The security policy of an organization requires an application to encrypt data before writing to the disk. Which solution should the organization use to meet this requirement?

Answer :
  • AWS KMS API

A company is to run a service on AWS to provide offsite backups for images on laptops and phones. The solution must support millions of customers with thousands of images per customer. Though the images will be retrieved infrequently, they must be available for retrieval immediately. Which is the most cost-efficient storage option that meets these requirements?

Answer :
  • Amazon S3 Standard Infrequent Access

Your company has an account in AWS which is being actively used. There is an audit being conducted by an external auditor. They have requested for a list of users, their status, to see if MFA is being used etc. How would you achieve in getting this list for them?

Answer :
  • Go to IAM and download the Credentials report

An S3 bucket exists in an AWS Account. Users have been asked to access files in this bucket. But when they try to access the files they get a ‘403 Forbidden’ error message. As an IT administrator, what do you need to check to ensure that the users can access the files?

Answer :
  • Ensure that the bucket policy allows access

Your company is planning on setting up an AWS account. They would be hosting a large number of resources in AWS. As the operations manager, you need to be aware of ways to improve the performance, cost, and security of the resources wherever applicable. Which of the following service would you use for this requirement?

Answer :
  • AWS Trusted Advisor