Associate Certified SysOps Administrator - Associate Flashcards
7 cards from real AWS practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Associate Certified SysOps Administrator - Associate flashcards as text
A SysOps Administrator needs to ensure that EC2 instances in a private subnet can access S3 without traversing the public internet. Which solution achieves this?
Answer: Create a VPC Gateway Endpoint for S3 and update the route table
A VPC Gateway Endpoint for S3 allows private subnet instances to reach S3 without traversing the internet, using the AWS internal network.
An Auto Scaling group is not launching instances because the launch template references an AMI that no longer exists. What is the fastest remediation?
Answer: Update the launch template with a valid AMI ID and set it as the default version
Creating a new launch template version with a valid AMI and setting it as default allows the Auto Scaling group to resume launching instances immediately.
Which CloudWatch metric should a SysOps Administrator monitor to detect when an EBS gp2 volume is exhausting its I/O credit balance?
Answer: BurstBalance
BurstBalance tracks the percentage of I/O credits remaining for gp2 volumes; when it reaches 0, throughput is throttled to the baseline.
A company wants RDS Multi-AZ failover to complete as fast as possible. Which action reduces failover time the most?
Answer: Enable RDS Proxy in front of the database endpoint
RDS Proxy maintains a pool of connections and redirects them to the new primary during failover, reducing application-visible downtime from ~60s to seconds.
A SysOps Administrator receives a notification that an EC2 instance's system status check has failed. Which action should be taken first?
Answer: Stop and start the instance to migrate it to new hardware
A failed system status check indicates an AWS infrastructure problem; stopping and starting the instance migrates it to healthy hardware in the same AZ.
An S3 bucket has versioning enabled. A user accidentally deleted an object. How can the SysOps Administrator restore it without enabling MFA Delete?
Answer: Delete the delete marker for that object version
When versioning is enabled, a delete operation creates a delete marker; removing the delete marker restores the previous version as the current object.
A company needs to enforce that all new S3 buckets block public access at the account level. Which service and feature accomplishes this with a single configuration?
Answer: S3 Block Public Access settings at the account level
The S3 Block Public Access settings applied at the AWS account level prevent any bucket in that account from being made public, overriding bucket-level settings.