The latest changes and updates from the administration for this exam.
Latest Update: Jun 14 2026
All questions are working fine.
A company uses Amazon Elastic File System (EFS) to share storage space across multiple instances of an application. As a SysOps Administrator, you work with an EFS mount helper to mount the file system.
Which of the following options are available with the EFS mount helper? (Select two)
Select all that apply
A serverless application having unpredictable workloads uses Amazon RDS. When the workloads are high, the database memory and compute resources are getting drained resulting in a bad user experience. Upon investigation, the development team has realized that during peak traffic hours, a burst of new database connections is being requested resulting in slow database performance.
What is the most optimal plan of action to address this issue?
A company wants to build a highly scalable web application using Amazon ElastiCache for Redis. The SysOps Administrator at the company is tasked with configuring Redis as a Multi-AZ deployment.
Which of the following represent the key characteristics of Redis Multi-AZ? (Select two)
Select all that apply
As a SysOps Administrator, you manage a large team of IAM user accounts that are part of multiple AWS accounts. With the growing team size, you have decided to divide IAM users into IAM groups to be able to manage the permissions and policies better.
Which of the following statements are valid about IAM Groups? (Select two)
Select all that apply
As part of an internal IT audit, you must provide proof that AWS has the necessary ISO certifications.
How can you gain access to these documents?
A development team needs to add an alternate domain name to the application's CloudFront distribution for using the company's domain name in the application links instead of the generic CloudFront domain name.
Which of the following are the mandatory steps required to meet this requirement? (Select two)
Select all that apply
To provide a directly manageable security layer, a company has enabled encryption of CloudTrail log files using server-side encryption with AWS KMS–managed keys (SSE-KMS). However, the digest files seem to use a different encryption scheme.
Which of the following would you identify as the underlying reason for this behavior?
An Amazon Elastic Block Store (Amazon EBS) was deleted as the volume was no longer needed by the business. But the AWS Config rule continues to show the status of the EBS volume as compliant.
What is the reason for this behavior and suggest a fix to avoid confusion in future?
A heavily used application needs to be built on an Amazon Aurora DB cluster. The connections to the DB instance will be secured using Transport Layer Security (TLS) and the database needs to be publicly accessible.
Which of the following steps are needed to connect to an Amazon Aurora DB cluster from outside a VPC? (Select three)
Select all that apply
A SysOps Administrator has been tasked with copying AMIs from one Region to another. While doing this task, the following error message popped up: Linux error message "This AMI was copied from an AMI with a kernel that is unavailable in the destination Region: {Image ID}"
Which of the following would you identify as the root cause behind the issue?
