aws sysops administrator Intermediate Practice Exam: Medium Difficulty 2025

A SysOps Administrator notices that an EC2 instance's CPU utilization has been consistently at 95% for the past 2 hours. The application team reports intermittent timeouts. CloudWatch alarms are configured but no notifications were received. Upon investigation, the administrator finds the alarm state shows 'INSUFFICIENT_DATA'. What is the MOST likely cause of this issue?

A company runs a multi-tier web application across three Availability Zones using an Application Load Balancer (ALB) and Auto Scaling groups. During a recent AZ failure, customers experienced service disruption despite the multi-AZ architecture. Investigation reveals that the ALB health checks were passing, but application-level health checks were failing. What should the SysOps Administrator implement to prevent this issue?

A SysOps Administrator is deploying a CloudFormation stack that creates an RDS database and several EC2 instances. The EC2 instances need to connect to the RDS endpoint immediately after creation. However, the stack frequently fails because the EC2 instances try to connect before the RDS instance is fully available. What is the BEST way to ensure proper resource creation order?

A company's security audit revealed that several S3 buckets containing sensitive data are not encrypted. The SysOps Administrator needs to ensure all existing and future objects in these buckets are encrypted using AWS KMS keys, and that unencrypted uploads are blocked. Which combination of actions will meet these requirements? (Choose the BEST answer)

A SysOps Administrator manages a VPC with public and private subnets. EC2 instances in the private subnet need to download software updates from the internet but should not be directly accessible from the internet. The solution must be highly available across multiple Availability Zones. What is the MOST cost-effective solution?

A company's application generates detailed logs stored in CloudWatch Logs. The SysOps Administrator needs to identify specific error patterns across multiple log groups and automatically trigger remediation when certain error thresholds are exceeded. The solution should minimize operational overhead. What is the MOST efficient approach?

A company uses AWS Organizations with multiple accounts. The SysOps Administrator needs to implement a backup strategy that automatically backs up all EBS volumes and RDS databases across all accounts in the organization daily, with backups retained for 30 days. What is the MOST efficient solution?

A SysOps Administrator is troubleshooting connectivity issues for an application running on EC2 instances behind a Network Load Balancer (NLB). The application intermittently fails to connect to an RDS database in a private subnet. Security groups are properly configured. VPC Flow Logs show that traffic is being rejected. What is the MOST likely cause?

A company needs to patch its fleet of 200 EC2 instances across development, staging, and production environments monthly. The SysOps Administrator must ensure that production instances are patched only after successful patching in development and staging, with the ability to roll back if issues occur. Which solution provides the BEST automation and control?

A company's monthly AWS bill has increased significantly. The SysOps Administrator discovers that several development teams are running large EC2 instances and RDS databases 24/7, even though they're only used during business hours (8 AM - 6 PM on weekdays). What is the MOST cost-effective automated solution to reduce costs while maintaining required availability?