AWS Certified SysOps Administrator – Associate — All Questions
3 questions
An administrator needs an auditable record of how each resource's configuration has changed over time and whether it complies with rules. Which service provides this?
- a.AWS Config✓
- b.Amazon CloudFront
- c.AWS Lambda
- d.Amazon SQS
AWS Config records configuration history for resources and evaluates them against rules to flag noncompliance, giving an auditable posture over time. CloudFront delivers content, Lambda runs code, and SQS queues messages.
Which tool helps identify S3 buckets or IAM roles that are shared with external accounts so an administrator can tighten access?
- a.Amazon Inspector
- b.AWS Shield
- c.IAM Access Analyzer✓
- d.Amazon Athena
IAM Access Analyzer evaluates resource policies and reports where resources grant access to external principals, helping enforce least privilege. Inspector scans for software vulnerabilities, Shield protects against DDoS, and Athena queries data in S3.
To automatically provision and renew the TLS certificate used by an Application Load Balancer, which service should be used?
- a.AWS KMS
- b.AWS Certificate Manager (ACM)✓
- c.AWS Secrets Manager
- d.Amazon Route 53
ACM provisions, manages, and automatically renews TLS certificates for integrated services such as load balancers and CloudFront. KMS manages encryption keys, Secrets Manager stores secrets, and Route 53 handles DNS.