Infosys Certified AWS SysOps Administrator Associate
Practice with real exam-pattern questions for Infosys Certified AWS SysOps Administrator Associate. Each question includes a detailed explanation to help you understand the concept, not just memorise the answer. Try 10 questions free — no login required.
Full question bank for this exam + 1,357+ others. Cancel anytime.
Join Premium10 Infosys Certified AWS SysOps Administrator Associate practice questions with answers
Real Lex exam-pattern multiple-choice questions for the Infosys Certified AWS SysOps Administrator Associate certification. Each question includes the correct answer. The full question bank is available to Premium members.
- Question 1
A web company is looking to implement an intrusion detection and prevention system into their deployed VPC. This platform should have the ability to scale to thousands of instances running inside of the VPC. How should they architect their solution to achieve these goals?
- ✓
Configure an instance with monitoring software and the elastic network interface (ENI) set to promiscuous mode packet sniffing to see an traffic across the VPC.
Correct - B
Create a second VPC and route all traffic from the primary application VPC through the second VPC where the scalable virtualized IDS/IPS platform resides.
- C
Configure servers running in the VPC using the host-based 'route' commands to send all traffic through the platform to a scalable virtualized IDS/IPS.
- D
Configure each host with an agent that collects all network traffic and sends that traffic to the IDS/IPS.
- ✓
- Question 2
Joe is an AWS SysOps professional has received a ticket from the support team Stating that an issue occurred 1 week back between 3 AM to 4 AM and the EC2 instance was not reachable. Now Joe is checking the CloudWatch metrics of that instance. How can he find the data easily using the CloudWatch console?
- ✓
The user can find the data by giving the exact values in the Time tab under CloudWatch metrics.
Correct - B
The user can find the data by filtering values of the last 1 week for a 1 hour period in the Relative tab under CloudWatch metrics.
- C
It is not possible to find the exact time from the console. The user has to use CLI to provide the specific time.
- D
The user can find the data by giving the exact values in the Absolute tab under CloudWatch metrics.
- ✓
- Question 3
Amit has launched an EBS backed Ec2 instance. He has started the instance at 9 AM in the morning. Between 9 AM to 10 AM, he has tested the application testing script. Thus, he stopped the instance twice and restarted it. In the same hour the he rebooted the instance once. For how many instance hours will AWS charge the user?
- ✓
3 hours
Correct - B
4 hours
- C
2 hours
- D
1 hour
- ✓
- Question 4
Sam a system admin is managing buckets, objects and folders with AWS S3. Which of the below mentioned statements is true and should be taken in consideration by the sysadmin?
- ✓
The folders support only ACL
Correct - B
Both the object and bucket can have an Access Policy but folder cannot have policy
- C
Folders can have a policy
- D
Both the object and bucket can have ACL but folders cannot have ACL
- ✓
- Question 5
An application running on Amazon EC2 instances needs to access data stored in an Amazon DynamoDB table. Which solution will grant the application access to the table in the MOST secure manner?
- ✓
Create an IAM group for the application and attach a permissions policy with the necessary privileges. Add the EC2 instances to the IAM group.
Correct - B
Create an IAM resource policy for the DynamoDB table that grants the necessary permissions to Amazon EC2.
- C
Create an IAM role with the necessary privileges to access the DynamoDB table. Associate the role with the EC2 instances.
- D
Create an IAM user for the application and attach a permissions policy with the necessary privileges. Generate an access key and embed the key in the application code.
- ✓
- Question 6
A startup company is migrating a legacy web application from a single server to multiple Amazon EC2 instances behind an Application Load Balancer (ALB). After the migration, users report that they are frequently losing their sessions and are being prompted to log in again. Which action should be taken to resolve the issue reported by users?
- ✓
Confirm that the ALB is not in a Multi-AZ configuration
Correct - B
Configure an Amazon CloudFront distribution with the ALB as the origin
- C
Deploy a Network Load Balancer in front of the ALB
- D
Enable sticky sessions for the target group of EC2 instances
- ✓
- Question 7
Prakash as a Devops professional uses S3 to store critical data for his organization Several users within the group currently have full permissions to the S3 bucket access. He should come up with a solution that does not impact the users of the org and also protect against the accidental deletion of objects. Which two options will address this issue? Choose two options.
- ✓
Enable versioning on your S3 Buckets
Correct - B
Configure your S3 Buckets with MFA delete
- C
Create a Bucket policy and only allow read only permissions to all users at the bucket level
- D
Enable object life cycle policies and configure the data older than 3 months to be archived in Glacier
- ✓
- Question 8
You are designing a system that has a Bastion host. This component needs to be highly available without human intervention. Which of the following approaches would you select?
- ✓
Run the bastion on two instances one in each AZ
Correct - B
Run the bastion on an active Instance in one AZ and have an AMI ready to boot up in the event of failure
- C
Configure the bastion instance in an Auto Scaling group. Specify the Auto Scaling group to include multiple AZs but have a min-size of 1 and max-size of 1
- D
Configure an ELB in front of the bastion instance
- ✓
- Question 9
A sysops administrator observes a large number of HTTP requests on an Application Load Balancer. The requests originate from various IP addresses. These requests cause increased server load and costs. What should the administrator do to block this traffic?
- ✓
Install Amazon Inspector on Amazon EC2 instances to block the traffic.
Correct - B
Use Amazon GuardDuty to protect the web servers from bots and scrapers.
- C
Use AWS Lambda to analyze the web server logs, detect bot traffic, and block the IP addresses in the security groups.
- D
Use an AWS WAF rate-based rule to block the traffic when it exceeds a threshold.
- ✓
- Question 10
Bob has launched a large EBS backed EC2 instance in the US-East-1a region. Now he plans to achieve Disaster Recovery (DR) for the instance by creating another small instance in Europe region. Which of the below strategy would assist Bob to achieve DR setup in EU region?
- ✓
Copy the running instance using the "Instance Copy" command to the EU region
Correct - B
Create an AMI of the instance and copy the AMI to the EU region. Then launch the instance from the EU AMI
- C
Copy the instance from the US East region to the EU region
- D
Use the "Launch more like this" option to copy the instance from one region to another
- ✓
More in Cloud
Infosys Certified Google Professional Cloud Security Engineer
Infosys Certified AWS Cloud Beginner
Infosys Certified Google Cloud Digital Leader
Pay once. Clear every cert this year.
One subscription, full Telegram channel access, every PDF posted during your membership.
- Full access to all 1,357+ certifications
- Monthly updated question banks
- Telegram private channel access
- Cancel anytime
- Everything in Monthly
- Save ₹2,100 vs monthly billing
- Priority answer key requests
- Best for increasing DQ score fast
- Everything in Quarterly
- Lifetime channel access — no renewals
- All future certifications included
- Priority response from admin team
Common questions, straight answers.
A monthly-updated Telegram channel where we post real exam-pattern question banks and detailed answer keys for 1,357+ Infosys Lex certifications. You join once, you get every PDF posted during your membership.
Right after payment on our Graphy page, you'll receive a private invite link to the Telegram channel. Access is instant — usually under 30 seconds.
We compile question banks from the actual Lex test pattern, sourced and verified by 180K+ community members who've recently cleared these exams. Match rate is consistently 85–95%.
Every single month. When Infosys rolls out new versions of certifications, we post updated dumps within 7–10 days. You'll see channel activity weekly.
Clearing certifications is one of the highest-weighted DQ factors. Members typically clear 3–5 certifications in their first 3 months, which moves DQ scores up by a full band.