PassSpark

AWS Certification CloudOps Engineer Associate (SysOps) 2023 past questions and answers

This 2023 AWS Certification CloudOps Engineer Associate (SysOps) set has 20 practice questions. Try these 5 free sample questions, tap a question to reveal the answer and explanation. Then practise the whole 2023 set with instant marking.

Practise the full 2023 setTimed exam mode

Sample AWS Certification CloudOps Engineer Associate (SysOps) 2023 questions

1. A fleet of Amazon EC2 instances runs a Java service. The operations team needs CloudWatch alarms for host memory utilization, which is not available in the default EC2 metrics. Which approach meets the requirement with the least operational overhead?
  1. Install and configure the unified CloudWatch agent to publish memory metrics to CloudWatch.
  2. Enable detailed monitoring on each instance; it adds memory metrics automatically.
  3. Create an AWS Config custom rule that calculates memory utilization from instance metadata.
  4. Use CloudTrail management events to derive memory utilization for each instance.

Answer: A. Install and configure the unified CloudWatch agent to publish memory metrics to CloudWatch.

The CloudWatch agent can collect guest operating system metrics such as memory and publish them for alarms. EC2 detailed monitoring increases the frequency of supported EC2 metrics but does not add guest memory metrics.

2. An application behind an Application Load Balancer has a rising number of failed requests. The team wants an alarm specifically for HTTP 5xx responses returned by the targets, rather than errors generated by the load balancer. Which metric should the alarm monitor?
  1. HealthyHostCount
  2. HTTPCode_Target_5XX_Count
  3. HTTPCode_ELB_5XX_Count
  4. TargetResponseTime

Answer: B. HTTPCode_Target_5XX_Count

HTTPCode_Target_5XX_Count measures 5xx responses returned by registered targets. HTTPCode_ELB_5XX_Count instead measures 5xx responses generated by the load balancer itself, so it does not isolate target-side failures.

3. A security team wants an automated response when an EC2 instance enters the stopped state unexpectedly. The response should invoke a Lambda function with the event details. Which solution is most appropriate?
  1. Configure an Amazon CloudWatch dashboard to invoke Lambda when an instance stops.
  2. Use an AWS Config conformance pack as a real-time event router to Lambda.
  3. Create an EventBridge rule matching EC2 state-change notifications and set Lambda as the target.
  4. Create an S3 lifecycle rule for the EC2 instance state event and configure Lambda as its destination.

Answer: C. Create an EventBridge rule matching EC2 state-change notifications and set Lambda as the target.

EC2 state-change notifications are available as EventBridge events, and a matching rule can invoke Lambda. CloudWatch dashboards are for visualization, while S3 lifecycle rules act on objects rather than EC2 events.

4. A production Amazon RDS for MySQL database must recover automatically from an Availability Zone failure. The application does not need additional read capacity. Which option best meets the requirement?
  1. Create a read replica in the same Availability Zone and route writes to it.
  2. Export automated backups to S3 and restore the database after an outage.
  3. Enable a Multi-AZ DB instance deployment and use the database endpoint for connections.
  4. Place the database in a public subnet and enable enhanced monitoring.

Answer: C. Enable a Multi-AZ DB instance deployment and use the database endpoint for connections.

A Multi-AZ deployment maintains a standby in another Availability Zone and supports automatic failover while the application continues to use the DB endpoint. A read replica primarily serves read scaling and is not the same automatic-failover configuration.

5. A workload uses AWS Backup to protect Amazon EBS volumes. The recovery plan requires a copy of backups in a second AWS Region so that recovery is possible if the primary Region is unavailable. Which configuration should the operations team use?
  1. Configure an AWS Backup plan with a cross-Region copy action to a backup vault in the recovery Region.
  2. Enable EBS detailed monitoring in the recovery Region.
  3. Create an Auto Scaling group in the recovery Region; it automatically copies EBS backups.
  4. Use an S3 same-Region replication rule for the EBS snapshots.

Answer: A. Configure an AWS Backup plan with a cross-Region copy action to a backup vault in the recovery Region.

AWS Backup plans support copying recovery points to a vault in another Region, providing a regional backup copy for disaster recovery. Monitoring and Auto Scaling do not copy backups, and S3 replication does not replicate EBS snapshots.

More AWS Certification CloudOps Engineer Associate (SysOps) years

2026202520242022

All AWS Certification CloudOps Engineer Associate (SysOps) years · AWS Certification subjects

PassSpark questions are original practice questions written to each exam's syllabus and format, in the style of past questions. They are not official past papers and are not affiliated with JAMB, WAEC, NECO, any university or any exam body.