Associate Certified SysOps Administrator - Associate Flashcards
7 cards from real AWS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Associate Certified SysOps Administrator - Associate flashcards as text
A company wants to centrally manage and audit API calls across all AWS accounts in an AWS Organization. Which service and configuration accomplishes this?
Answer: Create an organization-level CloudTrail trail that logs all accounts to a central S3 bucket
An organization trail in AWS CloudTrail automatically captures management events from all member accounts and delivers logs to a designated central S3 bucket.
An EC2 instance is running out of disk space on the root EBS volume. The instance is running Amazon Linux 2. What is the correct sequence to expand it online?
Answer: Modify the EBS volume size in the console, then run growpart and resize2fs on the instance
EBS volumes can be modified to a larger size while in use; after the volume expansion completes, growpart and resize2fs extend the partition and filesystem without downtime.
A SysOps Administrator needs to ensure that EC2 instances are automatically replaced if they fail an ELB health check. Which Auto Scaling setting controls this?
Answer: Set the health check type to ELB in the Auto Scaling group configuration
Setting the Auto Scaling group's health check type to ELB causes it to use ELB health checks instead of EC2 status checks, triggering replacement of unhealthy instances.
Which Route 53 routing policy sends traffic to the endpoint with the lowest network latency for the user's location?
Answer: Latency-based routing
Latency-based routing directs users to the AWS region that provides the lowest latency based on real-time network conditions measured by Route 53.
A Lambda function is timing out when processing messages from an SQS queue. The processing time is consistently 35 seconds. What is the minimum change required?
Answer: Increase the Lambda function timeout to at least 35 seconds
The Lambda function timeout must be set to at least the actual processing duration (35s) to prevent premature termination; the SQS visibility timeout should also exceed the Lambda timeout.
AWS Config rules show several EC2 instances as NON_COMPLIANT for not having encrypted EBS volumes. Which action remediates this at scale?
Answer: Use AWS Config remediation actions to trigger a Systems Manager Automation document
AWS Config supports auto-remediation via Systems Manager Automation documents, allowing bulk remediation of non-compliant resources triggered directly by the Config rule finding.
A SysOps Administrator needs to share a custom AMI with another AWS account. What is the correct approach?
Answer: Modify the AMI's launch permissions to add the target account ID
You can share an AMI by modifying its launch permissions to include the target AWS account ID, allowing that account to launch instances from it.