Amazon AWS Certified SysOps Administrator - Associate Exam
AWS Certified SysOps Administrator (Page 8 )

Updated On: 12-Jan-2026

A company has migrated its legacy on-premises web application to an Amazon EC2 instance. The web application requires a single static public IP address to accept traffic and process requests. End users must be able to reach the web application through the example.com domain. A SysOps administrator must implement a solution that maintains the web application with the least amount of effort.
Which combination of actions will meet these requirements? (Choose two.)

  1. Configure an Application Load Balancer (ALB). Add the EC2 instance to a target group that is associated with the ALB.
  2. Create an Amazon Route 53 A record for the associated EC2 IP address.
  3. Create an Amazon Route 53 CNAME record for the associated EC2 IP address.
  4. Create an Elastic IP address, and associate it with the EC2 instance.
  5. Create an Auto Scaling group with a minimum capacity of 1 and a maximum capacity of 2.

Answer(s): B,D



A company runs its applications on a large number of Amazon EC2 instances. A SysOps administrator must implement a solution to notify the operations team whenever an EC2 instance state changes.
What is the MOST operationally efficient solution that meets these requirements?

  1. Create a script that captures instance state changes and publishes a notification to an Amazon Simple Notification Service (Amazon SNS) topic. Use AWS Systems Manager Run Command to run the script on all EC2 instances.
  2. Create an Amazon EventBridge event rule that captures EC2 instance state changes. Set an Amazon Simple Notification Service (Amazon SNS) topic as the target
  3. Create an Amazon EventBridge event rule that captures EC2 instance state changes. Set as the target an AWS Lambda function that publishes a notification to an Amazon Simple Notification Service (Amazon SNS) topic.
  4. Create an AWS Config custom rule that evaluates instance state changes with automatic remediation. Use the rule to invoke an AWS Lambda function that publishes a notification to an Amazon Simple Notification Service (Amazon SNS) topic.

Answer(s): B



A company asks a SysOps administrator to provision an additional environment for an application in four additional AWS Regions. The application is running on more than 100 Amazon C2 instances in the us-east-1 Region, using fully configured Amazon Machine Images (AMIs). The company has an AWS CloudFormation template to deploy resources in us-east-1.
What should the SysOps administrator do to provision the application in the MOST operationally efficient manner?

  1. Copy the AMI to each Region by using the aws ec2 copy-image command. Update the CloudFormation template to include mappings for the copied AMIs.
  2. Create a snapshot of the running instance. Copy the snapshot to the other Regions. Create an AMI from the snapshots. Update the CloudFormation template for each Region to use the new AMI.
  3. Run the existing CloudFormation template in each additional Region based on the success of the template that is used currently in us-east-1.
  4. Update the CloudF ormation template to include the additional Regions in the Auto Scaling group. Update the existing stack in us-east-1.

Answer(s): A



A company runs an application on Amazon EC2 instances that are in an Amazon EC2 Auto Scaling group. Scale-out actions take a long time to become complete because of long-running boot scripts. A SysOps administrator must implement a solution to reduce the required time for scale-out actions without overprovisioning the Auto Scaling group.
Which solution will meet these requirements?

  1. Change the launch configuration to use a larger instance size.
  2. Increase the minimum number of instances in the Auto Scaling group.
  3. Add a predictive scaling policy to the Auto Scaling group.
  4. Add a warm pool to the Auto Scaling group.

Answer(s): D



A company wants to monitor the security groups of its Amazon EC2 instances to ensure that SSH is not open to the public. If the port is opened, the company needs to close the port as soon as possible.
Which combination of actions should a SysOps administrator take to meet these requirements? (Choose two.)

  1. Add an Amazon CloudWatch alarm to detect the security groups that allow SSH.
  2. Add an AWS Config rule to detect the security groups that allow SSH.
  3. Add an assessment template to Amazon Inspector to detect the security groups that allow SSH.
  4. Call an AWS Systems Manager Automation runbook to close the port.
  5. Call AWS Systems Manager Run Command to close the port.

Answer(s): B,D



Viewing page 8 of 97
Viewing questions 36 - 40 out of 477 questions



Post your Comments and Discuss Amazon AWS Certified SysOps Administrator - Associate exam prep with other Community members:

Join the AWS Certified SysOps Administrator - Associate Discussion