AWS SysOps Administrator Practice

Q: How many questions are in this practice set?

This practice set contains 60 questions with detailed explanations.

Q: What topics does this practice cover?

It covers the key topics and question types for AWS Certified SysOps Administrator - Associate (SOA-C02), including vocabulary, grammar, reading, and practical test skills.

Q: Are there explanations for every question?

Yes, every question includes a clear explanation so you can understand the correct answer and learn from mistakes.

Q: Can I save my progress and mistakes?

Your wrong answers, favorites, scores, and study streak are saved in your browser, so you can review them on the same device.

Q: What practice modes are available?

You can practice randomly, take a timed mock exam, filter by difficulty, type, and topic, search questions, and review wrong answers.

Practice 60 original AWS SysOps Administrator questions covering monitoring, reliability, deployment, storage, networking, and security, with detailed explanations.

Level: AWS Certified SysOps Administrator - Associate (SOA-C02) Difficulty: intermediate 60 questions 60 min

Choose a practice mode, answer each AWS SysOps question, then review the explanation. Wrong answers are saved locally for review.

Practice mode Difficulty Topic Question type Search questions

Day streak: 0 days Saved only on this device

Question 1

Which AWS service collects metrics from EC2 instances and other resources?

Select an answer Amazon CloudWatchAWS CloudTrailAmazon S3AWS Config

Question 2

Which AWS service stores application and system logs?

Select an answer AWS WAFAmazon Route 53CloudWatch LogsAmazon GuardDuty

Question 3

Which service sends notifications when a CloudWatch alarm state changes?

Select an answer Amazon EBSAmazon SNSAmazon SQSAWS Lambda

Question 4

Which AWS service records API calls for auditing?

Select an answer Amazon CloudWatchAmazon S3AWS Elastic BeanstalkAWS CloudTrail

Question 5

What is a CloudWatch metric?

Select an answer A log fileA security findingA DNS recordA numeric data point representing resource performance

Question 6

Which CloudWatch feature lets you create visual dashboards?

Select an answer CloudWatch DashboardsCloudWatch LogsCloudTrailAWS Config

Question 7

What is a composite alarm?

Select an answer A DNS health checkA backup jobAn alarm that combines multiple alarms into one stateAn alarm for storage

Question 8

Which AWS service shows service health and events for your account?

Select an answer Amazon InspectorAWS Health DashboardAmazon CloudWatchAWS Config

Question 9

Which CloudWatch Logs feature lets you query logs interactively?

Select an answer Logs InsightsMetric filtersAlarmsDashboards

Question 10

Match each AWS monitoring service to its purpose.

Amazon CloudWatchAWS CloudTrailAmazon SNSAWS Health Dashboard

Question 11

What does an Auto Scaling group do?

Select an answer Manages certificatesMaintains and scales a set of EC2 instancesStores objectsRoutes DNS

Question 12

What is a launch template?

Select an answer A firewall ruleA backup policyA reusable configuration for EC2 instancesA DNS record

Question 13

Which AWS service distributes incoming traffic across targets?

Select an answer AWS CloudTrailAmazon S3Elastic Load BalancingAmazon CloudWatch

Question 14

Which load balancer operates at Layer 7 for HTTP and HTTPS?

Select an answer Application Load BalancerNetwork Load BalancerGateway Load BalancerClassic Load Balancer

Question 15

Which load balancer operates at Layer 4 for TCP and UDP?

Select an answer Application Load BalancerClassic Load BalancerCloudFrontNetwork Load Balancer

Question 16

What is an EC2 health check?

Select an answer A security groupA check that verifies an instance is running and reachableA DNS recordA storage tier

Question 17

What is a load balancer target group health check?

Select an answer A CloudWatch alarmA backup snapshotAn IAM roleA request that verifies a target can serve traffic

Question 18

What is a multi-AZ deployment?

Select an answer Running resources in multiple Availability Zones for availabilityStoring data in one S3 bucketUsing one instance typeDisabling backups

Question 19

What is RDS Multi-AZ?

Select an answer A VPC peeringA synchronous standby replica in another Availability ZoneA database backupA read replica

Question 20

Match each AWS reliability service to its purpose.

Auto Scaling groupApplication Load BalancerNetwork Load BalancerRDS Multi-AZ

Question 21

Which AWS service deploys application code to EC2 instances?

Select an answer AWS CodeDeployAWS CloudFormationAmazon S3Amazon Route 53

Question 22

Which AWS service compiles and tests code?

Select an answer AWS CodeDeployAmazon CloudWatchAWS CloudTrailAWS CodeBuild

Question 23

Which AWS service creates a pipeline from source to production?

Select an answer Amazon S3AWS CloudTrailAWS CodePipelineAWS CodeCommit

Question 24

Which AWS service provisions infrastructure as code?

Select an answer AWS ShieldAWS CloudFormationAWS CodeDeployAmazon CloudWatch

Question 25

Which AWS service provides a managed platform for running web applications?

Select an answer AWS Direct ConnectAWS Elastic BeanstalkAmazon EC2Amazon S3

Question 26

Which AWS service builds custom machine images?

Select an answer EC2 Image BuilderAmazon InspectorAWS WAFAmazon GuardDuty

Question 27

What is a golden AMI?

Select an answer A DNS recordA firewall ruleA backup snapshotA preconfigured, tested machine image for repeatable deployments

Question 28

Which AWS service provides managed Git repositories?

Select an answer Amazon S3AWS ConfigAWS CodeCommitAWS CodeBuild

Question 29

What is a blue/green deployment?

Select an answer Creating a new VPCDisabling monitoringSwitching traffic between two environments to release a new versionDeleting the old environment

Question 30

Match each AWS deployment service to its purpose.

AWS CloudFormationAWS CodePipelineAWS CodeDeployAWS CodeBuild

Question 31

Which AWS service stores unstructured objects?

Select an answer Amazon S3Amazon EBSAmazon EFSAmazon FSx

Question 32

Which S3 storage class is designed for frequently accessed data?

Select an answer S3 Glacier Deep ArchiveS3 One Zone-IAS3 Intelligent-TieringS3 Standard

Question 33

Which S3 storage class has the lowest storage cost?

Select an answer S3 Intelligent-TieringS3 Glacier Deep ArchiveS3 StandardS3 Standard-IA

Question 34

Which AWS service provides block storage for EC2 instances?

Select an answer Amazon EBSAmazon S3Amazon EFSAmazon Route 53

Question 35

Which AWS service provides scalable file storage for Linux instances?

Select an answer Amazon EBSAmazon S3Amazon GlacierAmazon EFS

Question 36

What is an EBS snapshot?

Select an answer A load balancerA security groupA point-in-time backup of an EBS volumeA DNS record

Question 37

What does S3 versioning do?

Select an answer Deletes old objectsRoutes trafficPreserves multiple versions of an objectEncrypts all objects

Question 38

What does an S3 lifecycle policy do?

Select an answer Configures DNSTransitions or expires objects based on ageCreates IAM usersScales EC2 instances

Question 39

Which AWS service provides managed Windows file storage?

Select an answer Amazon FSxAmazon EFSAmazon EBSAmazon S3

Question 40

Match each AWS storage service to its purpose.

Amazon S3Amazon EBSAmazon EFSAmazon S3 Glacier

Question 41

Which AWS component filters traffic at the instance level?

Select an answer Internet gatewaySecurity groupNetwork ACLRoute table

Question 42

What is a route table used for?

Select an answer Storing objectsRunning codeMonitoring metricsDirecting traffic between subnets and gateways

Question 43

Which AWS service provides DNS and domain routing?

Select an answer Amazon Route 53Amazon CloudFrontAWS ShieldAWS WAF

Question 44

Which AWS service is a content delivery network?

Select an answer AWS Direct ConnectAWS VPNAmazon CloudFrontAmazon Route 53

Question 45

Which AWS feature connects two VPCs privately?

Select an answer VPC peeringInternet gatewayNAT gatewaySecurity group

Question 46

What does a NAT gateway do?

Select an answer Resolves DNSProvides outbound internet access for private instancesRoutes traffic between regionsCaches content

Question 47

Which AWS service creates encrypted site-to-site tunnels?

Select an answer AWS Direct ConnectAmazon CloudFrontAmazon S3AWS Site-to-Site VPN

Question 48

Which AWS service provides a private physical connection to AWS?

Select an answer Amazon Route 53AWS WAFAWS Direct ConnectAWS Site-to-Site VPN

Question 49

What are VPC Flow Logs?

Select an answer Application logsDNS recordsBackup filesMetadata about network traffic in a VPC

Question 50

Match each AWS networking service to its purpose.

Amazon Route 53Amazon CloudFrontNAT gatewayVPC Flow Logs

Question 51

Which AWS service securely stores and rotates secrets?

Select an answer Amazon S3AWS CloudTrailAWS Secrets ManagerAWS KMS

Question 52

Which AWS service manages encryption keys?

Select an answer Amazon InspectorAWS KMSAWS IAMAmazon GuardDuty

Question 53

Which AWS service continuously monitors for threats?

Select an answer Amazon Route 53Amazon GuardDutyAWS ConfigAWS CloudTrail

Question 54

Which AWS service scans EC2 instances for vulnerabilities?

Select an answer AWS ShieldAWS WAFAmazon CloudWatchAmazon Inspector

Question 55

Which AWS service controls permissions with roles and policies?

Select an answer AWS IAMAWS KMSAWS ConfigAmazon S3

Question 56

What is a service control policy?

Select an answer A VPC routeA CloudWatch dashboardA policy that limits permissions in organization accountsAn S3 bucket policy

Question 57

Which AWS service centralizes security findings?

Select an answer AWS CloudTrailAmazon Route 53AWS Security HubAmazon CloudWatch

Question 58

Which AWS service provides compliance reports and certifications?

Select an answer AWS WAFAWS ArtifactAWS ConfigAmazon GuardDuty

Question 59

What is AWS CloudTrail used for?

Select an answer Monitoring CPU metricsStoring objectsRouting DNSRecording API activity for auditing

Question 60

Match each AWS security service to its purpose.

AWS IAMAWS KMSAWS Secrets ManagerAmazon GuardDuty