AWS CERTIFIED SYSOPS ADMINISTRATOR –
ASSOCIATE EXAM 2025 QUESTIONS AND
ANSWERS
A SysOps administrator is creating two AWS CloudFormation templates. The first
template will create a VPC with associated resources, such as subnets, route tables, and
an internet gateway. The second template will deploy application resources within the
VPC that was created by the first template. The second template should refer to the
resources created by the first template. How can this be accomplished with the LEAST
amount of administrative effort? - ....ANSWER ...-Create a mapping in the first
template that is referenced by the second template.
A company has deployed a web application in a VPC that has subnets in three
Availability Zones. The company launches three Amazon EC2 instances from anEC2
Auto Scaling group behind an Application Load Balancer (ALB).A SysOps administrator
notices that two of the EC2 instances are in the same Availability Zone, rather than
being distributed evenly across all three Availability Zones. There are no errors in the
Auto Scaling group's activity history. What is the MOST likely reason for the unexpected
placement of EC2 instances? - ....ANSWER ...-The ALB was configured for only
two Availability Zones.
A company is running an application on premises and wants to use AWS for data
backup. All of the data must be available locally. The backup application can write only
to block-based storage that is compatible with the Portable Operating System Interface
....FOR STUDY PURPOSES...©️2025 ALL RIGHTS RESERVED... 1
, (POSIX).Which backup solution will meet these requirements? - ....ANSWER ...-
Use AWS Storage Gateway, and configure it to use gateway-stored volumes.
A company asks a SysOps administrator to ensure that AWS CloudTrail files are not
tampered with after they are created. Currently, the company uses AWS Identity and
Access Management (IAM) to restrict access to specific trails. The company's security
team needs the ability to trace the integrity of each file. What is the MOST operationally
efficient solution that meets these requirements? - ....ANSWER ...-Enable the
CloudTrail file integrity feature on an Amazon S3 bucket. Create an IAM policy that
grants the security team access to the file integrity logs that are stored in the S3 bucket.
A company has an Amazon RDS DB instance. The company wants to implement a
caching service while maintaining high availability. Which combination of actions will
meet these requirements? - ....ANSWER ...-Add Auto Discovery to the data store.
Enable Multi-AZ for the data store.
An existing, deployed solution uses Amazon EC2 instances with Amazon EBS General
Purpose SSD volumes, an Amazon RDS PostgreSQL database, an Amazon EFS file
system, and static objects stored in an Amazon S3 bucket. The Security team now
mandates that at-rest encryption be turned on immediately for all aspects of the
application, without creating new resources and without any downtime. To satisfy the
requirements, which one of these services can the SysOps administrator enable at-rest
encryption on? - ....ANSWER ...-RDS PostgreSQL database
A manufacturing company uses an Amazon RDS DB instance to store inventory of all
stock items. The company maintains several AWS Lambda functions that interact with
the database to add, update, and delete items. The Lambda functions use hardcoded
credentials to connect to the database. A SysOps administrator must ensure that the
....FOR STUDY PURPOSES...©️2025 ALL RIGHTS RESERVED... 2
ASSOCIATE EXAM 2025 QUESTIONS AND
ANSWERS
A SysOps administrator is creating two AWS CloudFormation templates. The first
template will create a VPC with associated resources, such as subnets, route tables, and
an internet gateway. The second template will deploy application resources within the
VPC that was created by the first template. The second template should refer to the
resources created by the first template. How can this be accomplished with the LEAST
amount of administrative effort? - ....ANSWER ...-Create a mapping in the first
template that is referenced by the second template.
A company has deployed a web application in a VPC that has subnets in three
Availability Zones. The company launches three Amazon EC2 instances from anEC2
Auto Scaling group behind an Application Load Balancer (ALB).A SysOps administrator
notices that two of the EC2 instances are in the same Availability Zone, rather than
being distributed evenly across all three Availability Zones. There are no errors in the
Auto Scaling group's activity history. What is the MOST likely reason for the unexpected
placement of EC2 instances? - ....ANSWER ...-The ALB was configured for only
two Availability Zones.
A company is running an application on premises and wants to use AWS for data
backup. All of the data must be available locally. The backup application can write only
to block-based storage that is compatible with the Portable Operating System Interface
....FOR STUDY PURPOSES...©️2025 ALL RIGHTS RESERVED... 1
, (POSIX).Which backup solution will meet these requirements? - ....ANSWER ...-
Use AWS Storage Gateway, and configure it to use gateway-stored volumes.
A company asks a SysOps administrator to ensure that AWS CloudTrail files are not
tampered with after they are created. Currently, the company uses AWS Identity and
Access Management (IAM) to restrict access to specific trails. The company's security
team needs the ability to trace the integrity of each file. What is the MOST operationally
efficient solution that meets these requirements? - ....ANSWER ...-Enable the
CloudTrail file integrity feature on an Amazon S3 bucket. Create an IAM policy that
grants the security team access to the file integrity logs that are stored in the S3 bucket.
A company has an Amazon RDS DB instance. The company wants to implement a
caching service while maintaining high availability. Which combination of actions will
meet these requirements? - ....ANSWER ...-Add Auto Discovery to the data store.
Enable Multi-AZ for the data store.
An existing, deployed solution uses Amazon EC2 instances with Amazon EBS General
Purpose SSD volumes, an Amazon RDS PostgreSQL database, an Amazon EFS file
system, and static objects stored in an Amazon S3 bucket. The Security team now
mandates that at-rest encryption be turned on immediately for all aspects of the
application, without creating new resources and without any downtime. To satisfy the
requirements, which one of these services can the SysOps administrator enable at-rest
encryption on? - ....ANSWER ...-RDS PostgreSQL database
A manufacturing company uses an Amazon RDS DB instance to store inventory of all
stock items. The company maintains several AWS Lambda functions that interact with
the database to add, update, and delete items. The Lambda functions use hardcoded
credentials to connect to the database. A SysOps administrator must ensure that the
....FOR STUDY PURPOSES...©️2025 ALL RIGHTS RESERVED... 2
