Luyện thi AWS SysOps Administrator

CloudWatch collects and visualizes metrics from AWS resources and applications. CloudTrail records API calls, S3 stores objects, and Config tracks configuration.

CloudWatch Logs ingests, stores, and queries logs. GuardDuty detects threats, WAF filters web traffic, and Route 53 is DNS.

SNS delivers messages from CloudWatch alarms to subscribers such as email or Lambda. SQS is a queue, Lambda runs code, and EBS provides volumes.

CloudTrail records management and data events. CloudWatch monitors metrics, S3 stores objects, and Elastic Beanstalk deploys apps.

Metrics are time-ordered numeric values such as CPU utilization. Logs, findings, and DNS records are different data types.

Dashboards display metrics and alarms visually. Logs store log data, CloudTrail records calls, and Config tracks configuration.

Composite alarms reduce noise by combining several alarms. Storage alarms, DNS checks, and backups are different.

The Personal Health Dashboard shows service health events affecting your account. CloudWatch monitors metrics, Config tracks configuration, and Inspector scans workloads.

Logs Insights provides interactive queries for log data. Metric filters create metrics, alarms trigger actions, and dashboards display visuals.

CloudWatch collects metrics, CloudTrail records API calls, SNS sends notifications, and Health Dashboard shows service health.

An Auto Scaling group keeps instances healthy and adjusts capacity. S3 stores objects, Route 53 routes DNS, and ACM manages certificates.

Launch templates define AMI, instance type, key pairs, and user data. DNS records, firewall rules, and backups are separate.

Elastic Load Balancing distributes traffic across targets such as EC2 instances. CloudWatch monitors, CloudTrail records calls, and S3 stores data.

ALB routes HTTP/HTTPS traffic at Layer 7 with path and host rules. NLB operates at Layer 4, and Gateway Load Balancer forwards third-party appliances.

NLB handles TCP and UDP at Layer 4 with very high performance. ALB handles HTTP, Classic is legacy, and CloudFront is a CDN.

EC2 health checks verify system status and instance reachability. DNS records, storage tiers, and security groups are not health checks.

Target group health checks send requests to targets to confirm they can serve traffic. Alarms, snapshots, and roles are different.

Multi-AZ deployments place resources across Availability Zones to tolerate failures. One bucket, one instance type, or no backups reduce resilience.

RDS Multi-AZ provides a synchronous standby for failover. Read replicas improve read performance, backups are copies, and VPC peering connects networks.

ASG scales instances, ALB routes HTTP, NLB routes TCP, and Multi-AZ provides a synchronous standby.

CodeDeploy automates code deployments to EC2, Lambda, and on-premises. CloudFormation provisions infrastructure, S3 stores objects, and Route 53 is DNS.

CodeBuild builds and tests source code. CodeDeploy deploys it, CloudWatch monitors it, and CloudTrail records API calls.

CodePipeline automates release pipelines with stages for build, test, and deploy. CodeCommit is source control, S3 is storage, and CloudTrail is auditing.

CloudFormation defines and provisions AWS resources with templates. CodeDeploy deploys apps, CloudWatch monitors, and Shield protects against DDoS.

Elastic Beanstalk is a PaaS that manages capacity, load balancing, and scaling. EC2 is IaaS, S3 is storage, and Direct Connect is networking.

Image Builder creates, tests, and distributes AMIs and container images. Inspector scans workloads, WAF filters traffic, and GuardDuty detects threats.

A golden AMI contains standardized software and security settings for consistent deployments. It is not a DNS record, firewall rule, or snapshot.

CodeCommit hosts private Git repositories. CodeBuild builds code, S3 stores objects, and Config tracks configurations.

Blue/green deployments run old and new environments and shift traffic when ready. It is not deletion, a new VPC, or disabling monitoring.

CloudFormation provisions infrastructure, CodePipeline automates releases, CodeDeploy deploys code, and CodeBuild builds it.

S3 is object storage. EBS is block storage, EFS is Linux file storage, and FSx provides specialized file systems.

S3 Standard offers low latency and high durability for frequent access. Glacier and One Zone-IA target less frequent or cheaper access patterns.

Glacier Deep Archive has the lowest storage cost and longest retrieval time. Standard is for frequent access, and IA is for infrequent access.

EBS provides persistent block volumes for EC2. S3 is objects, EFS is file storage, and Route 53 is DNS.

EFS is a managed NFS file system for Linux. EBS is block storage, S3 is objects, and Glacier is archive storage.

Snapshots capture EBS volume data for backup and recovery. DNS records, load balancers, and security groups are not snapshots.

Versioning keeps previous object versions so you can restore them. Encryption, deletion, and routing are different features.

Lifecycle policies move objects between storage classes or delete them after a set period. They do not manage IAM, scaling, or DNS.

FSx for Windows File Server provides managed Windows file shares. EFS is Linux NFS, EBS is block storage, and S3 is objects.

S3 stores objects, EBS provides blocks, EFS provides Linux files, and Glacier provides archives.

Security groups filter traffic at the instance level. NACLs filter at the subnet level, route tables direct traffic, and internet gateways provide public access.

Route tables define how traffic is directed within a VPC. S3 stores objects, Lambda runs code, and CloudWatch monitors.

Route 53 is a DNS service. CloudFront is a CDN, Shield is DDoS protection, and WAF filters web traffic.

CloudFront caches content at edge locations. Route 53 is DNS, Direct Connect is private connectivity, and VPN creates encrypted tunnels.

VPC peering connects two VPCs privately. Internet gateways provide public access, NAT provides outbound access, and security groups filter traffic.

NAT gateways let private instances reach the internet for outbound traffic. Load balancers route, CloudFront caches, and Route 53 resolves DNS.

Site-to-Site VPN creates encrypted tunnels over the internet. Direct Connect is a private physical connection, CloudFront is a CDN, and S3 is storage.

Direct Connect provides private physical connectivity through providers. VPN uses the internet, Route 53 is DNS, and WAF filters web traffic.

Flow Logs capture IP traffic metadata for analysis. Application logs, DNS records, and backups are different data types.

Route 53 resolves DNS, CloudFront delivers content, NAT gives outbound access, and Flow Logs capture network metadata.

Secrets Manager stores and rotates secrets. KMS manages encryption keys, S3 stores objects, and CloudTrail records calls.

KMS creates and controls encryption keys. IAM manages access, GuardDuty detects threats, and Inspector scans vulnerabilities.

GuardDuty analyzes logs to detect threats. Config tracks configuration, CloudTrail records calls, and Route 53 is DNS.

Inspector assesses workloads for vulnerabilities and exposure. Shield protects against DDoS, WAF filters web traffic, and CloudWatch monitors.

IAM manages users, roles, and policies. KMS manages keys, Config tracks configurations, and S3 stores objects.

SCPs define maximum permissions for accounts in an organization. S3 policies, routes, and dashboards are different.

Security Hub aggregates and prioritizes security findings. CloudWatch monitors, CloudTrail records calls, and Route 53 is DNS.

Artifact provides compliance reports and agreements. Config tracks configuration, GuardDuty detects threats, and WAF filters traffic.

CloudTrail records API calls for auditing. CloudWatch monitors metrics, S3 stores objects, and Route 53 routes DNS.

IAM controls permissions, KMS manages keys, Secrets Manager stores secrets, and GuardDuty detects threats.