Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Amazon
  5. AWS-SysOps

Amazon AWS-SysOps Exam Questions
AWS Certified SysOps Administrator (SOA-C01) (Page 15 )

Updated On: 21-Feb-2026
Page 15 of 97
PDF with 932 Questions

A SysOps administrator is trying to set up an Amazon Route 53 domain name to route traffic to a website hosted on Amazon S3. The domain name of the website is www.example.com and the S3 bucket name DOC-EXAMPLE-BUCKET. After the record set is set up in Route 53, the domain name www.anycompany.com does not seem to work, and the static website is not displayed in the browser.
Which of the following is a cause of this?

  1. The S3 bucket must be configured with Amazon CloudFront first.
  2. The Route 53 record set must have an IAM role that allows access to the S3 bucket.
  3. The Route 53 record set must be in the same region as the S3 bucket.
  4. The S3 bucket name must match the record set name in Route 53.

Answer(s): D

Explanation:


Reference:

https://aws.amazon.com/premiumsupport/knowledge-center/route-53-no-targets/



A SysOps administrator has used AWS CloudFormation to deploy a serverless application into a production VPC. The application consists of an AWS Lambda function, an Amazon DynamoDB table, and an Amazon API Gateway API. The SysOps administrator must delete the AWS CloudFormation stack without deleting the DynamoDB table.
Which action should the SysOps administrator take before deleting the AWS CloudFormation stack?

  1. Add a Retain deletion policy to the DynamoDB resource in the AWS CloudFormation stack.
  2. Add a Snapshot deletion policy to the DynamoDB resource in the AWS CloudFormation stack.
  3. Enable termination protection on the AWS CloudFormation stack.
  4. Update the application's IAM policy with a Deny statement for the dynamodb:DeleteTable action.

Answer(s): A



A SysOps administrator is notified that an Amazon EC2 instance has stopped responding. The AWS Management Console indicates that the system checks are failing.
What should the administrator do first to resolve this issue?

  1. Reboot the EC2 instance so it can be launched on a new host.
  2. Stop and then start the EC2 instance so that it can be launched on a new host.
  3. Terminate the EC2 instance and relaunch it.
  4. View the AWS CloudTrail log to investigate what changed on the EC2 instance.

Answer(s): B



A software development company has multiple developers who work on the same product. Each developer must have their own development environments, and these development environments must be identical. Each development environment consists of Amazon EC2 instances and an Amazon RDS DB instance. The development environments should be created only when necessary, and they must be terminated each night to minimize costs.
What is the MOST operationally efficient solution that meets these requirements?

  1. Provide developers with access to the same AWS CloudFormation template so that they can provision their development environment when necessary. Schedule a nightly cron job on each development instance to stop all running processes to reduce CPU utilization to nearly zero.
  2. Provide developers with access to the same AWS CloudFormation template so that they can provision their development environment when necessary. Schedule a nightly Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function to delete the AWS CloudFormation stacks.
  3. Provide developers with CLI commands so that they can provision their own development environment when necessary. Schedule a nightly Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function to terminate all EC2 instances and the DB instance.
  4. Provide developers with CLI commands so that they can provision their own development environment when necessary. Schedule a nightly Amazon EventBridge (Amazon CloudWatch Events) rule to cause AWS CloudFormation to delete all of the development environment resources.

Answer(s): B



A company is partnering with an external vendor to provide data processing services. For this integration, the vendor must host the company's data in an Amazon
S3 bucket in the vendor's AWS account. The vendor is allowing the company to provide an AWS Key Management Service (AWS KMS) key to encrypt the company's data. The vendor has provided an IAM role Amazon Resources Name (ARN) to the company for this integration.
What should a SysOps administrator do to configure this integration?

  1. Create a new KMS key. Add the vendor's IAM role ARN to the KMS key policy. Provide the new KMS key ARN to the vendor.
  2. Create a new KMS key. Create a new IAM key. Add the vendor's IAM role ARN to an inline policy that is attached to the IAM user. Provide the new IAM user ARN to the vendor.
  3. Configure encryption using the KMS managed S3 key. Add the vendor's IAM role ARN to the KMS key policy. Provide the KMS managed S3 key ARN to the vendor.
  4. Configure encryption using the KMS managed S3 key. Create an S3 bucket. Add the vendor's IAM role ARN to the S3 bucket policy. Provide the S3 bucket ARN to the vendor.

Answer(s): A

Explanation:


Reference:

https://bookdown.org/bingweiliu11/aws-tutorial-book/use-case.html






Post your Comments and Discuss Amazon AWS-SysOps exam dumps with other Community members:

Join the AWS-SysOps Discussion