Start learning →

AWS SysOps Associate Sysopssecuritynetwork — practice questions

Explore 3 free Sysopssecuritynetwork questions in AWS SysOps Associate Cloudcomputing. Open each question or exercise to read its content, reference answers and available explanation.

Practise Sysopssecuritynetwork with Quill →

Sysopssecuritynetwork questions and exercises with answers

Showing questions 1–3 of 3.

Which AWS service is the central account / OU / SCP management plane for a multi-account AWS deployment?Read the answer and worked solution →Which networking object inside a VPC is STATELESS (return traffic doesn't auto-allow) and applies at the subnet level?Read the answer and worked solution →Which AWS service tests an IAM policy against a hypothetical request and explains which statement allowed or denied access?Read the answer and worked solution →

Worked practice questions

Which AWS service is the central account / OU / SCP management plane for a multi-account AWS deployment?

  1. Amazon ElastiCache
  2. AWS Snowball
  3. Amazon Athena
  4. AWS Organizations
Show answer and solution

Correct answer: D. AWS Organizations

Organizations groups accounts into OUs and applies Service Control Policies to bound permissions. The other services are unrelated.

Open this question →

Which networking object inside a VPC is STATELESS (return traffic doesn't auto-allow) and applies at the subnet level?

  1. Network ACL (NACL)
  2. Route 53 alias record
  3. IAM policy
  4. Security group
Show answer and solution

Correct answer: A. Network ACL (NACL)

NACLs are stateless, subnet-level, allow + deny rules. Security groups are stateful, instance/ENI-level, allow-only. IAM and Route 53 aren't network ACLs.

Open this question →

Which AWS service tests an IAM policy against a hypothetical request and explains which statement allowed or denied access?

  1. Amazon Comprehend
  2. IAM Policy Simulator
  3. Cost Explorer
  4. AWS Snowball
Show answer and solution

Correct answer: B. IAM Policy Simulator

Policy Simulator evaluates IAM policies for a given principal/action/resource and shows the path through the policies — the canonical debugger. The others are unrelated.

Open this question →

How to practise

  1. Choose a Sysopssecuritynetwork question and try to work out your answer.
  2. Open the question to check the correct answer and read its worked solution.
  3. Continue in the app for bite-sized lessons, explanations and review with Quill. You can start without creating an account.

More Cloudcomputing topics

SysopscostperfSysopsdeploymentSysopsmonitoring