ExamGecko
Login
Home / Amazon / SOA-C02 / List of questions
Ask Question

Amazon SOA-C02 Practice Test - Questions Answers, Page 3

List of questions

Question 21

Report
Export
Collapse

An existing, deployed solution uses Amazon EC2 instances with Amazon EBS General Purpose SSD volumes, an Amazon RDS PostgreSQL database, an Amazon EFS file system, and static objects stored in an Amazon S3 bucket. The Security team now mandates that at-rest encryption be turned on immediately for all aspects of the application, without creating new resources and without any downtime. To satisfy the requirements, which one of these services can the SysOps administrator enable at-rest encryption on?

EBS General Purpose SSD volumes
EBS General Purpose SSD volumes
RDS PostgreSQL database
RDS PostgreSQL database
Amazon EFS file systems
Amazon EFS file systems
S3 objects within a bucket
S3 objects within a bucket
Suggested answer: B
asked 16/09/2024
Roger Perez Espitia
38 questions

Question 22

Report
Export
Collapse

A SysOps administrator notices a scale-up event for an Amazon EC2 Auto Scaling group. Amazon CloudWatch shows a spike in the RequestCount metric for the associated Application Load Balancer. The administrator would like to know the IP addresses for the source of the requests.

Where can the administrator find this information?

Auto Scaling logs
Auto Scaling logs
AWS CloudTrail logs
AWS CloudTrail logs
EC2 instance logs
EC2 instance logs
Elastic Load Balancer access logs
Elastic Load Balancer access logs
Suggested answer: B

Explanation:

Reference: https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-dg.pdf page 253

Amazon SOA-C02 image Question 22 explanation 8057 09162024010005000000

asked 16/09/2024
Leila Bekirova
39 questions

Question 23

Report
Export
Collapse

A company is running an application on premises and wants to use AWS for data backup. All of the data must be available locally. The backup application can write only to block-based storage that is compatible with the Portable Operating System Interface (POSIX).

Which backup solution will meet these requirements?

Configure the backup software to use Amazon S3 as the target for the data backups.
Configure the backup software to use Amazon S3 as the target for the data backups.
Configure the backup software to use Amazon S3 Glacier as the target for the data backups.
Configure the backup software to use Amazon S3 Glacier as the target for the data backups.
Use AWS Storage Gateway, and configure it to use gateway-cached volumes.
Use AWS Storage Gateway, and configure it to use gateway-cached volumes.
Use AWS Storage Gateway, and configure it to use gateway-stored volumes.
Use AWS Storage Gateway, and configure it to use gateway-stored volumes.
Suggested answer: D
asked 16/09/2024
Hasan Elmas
51 questions

Question 24

Report
Export
Collapse

A company has an Amazon RDS DB instance. The company wants to implement a caching service while maintaining high availability. Which combination of actions will meet these requirements? (Choose two.)

Add Auto Discovery to the data store.
Add Auto Discovery to the data store.
Create an Amazon ElastiCache for Memcached data store.
Create an Amazon ElastiCache for Memcached data store.
Create an Amazon ElastiCache for Redis data store.
Create an Amazon ElastiCache for Redis data store.
Enable Multi-AZ for the data store.
Enable Multi-AZ for the data store.
Enable Multi-threading for the data store.
Enable Multi-threading for the data store.
Suggested answer: A, D
asked 16/09/2024
john wick
34 questions

Question 25

Report
Export
Collapse

A SysOps administrator must create a solution that immediately notifies software developers if an AWS Lambda function experiences an error. Which solution will meet this requirement?

Create an Amazon Simple Notification Service (Amazon SNS) topic with an email subscription for each developer. Create an Amazon CloudWatch alarm by using the Errors metric and the Lambda function name as a dimension. Configure the alarm to send a notification to the SNS topic when the alarm state reaches ALARM.
Create an Amazon Simple Notification Service (Amazon SNS) topic with an email subscription for each developer. Create an Amazon CloudWatch alarm by using the Errors metric and the Lambda function name as a dimension. Configure the alarm to send a notification to the SNS topic when the alarm state reaches ALARM.
Create an Amazon Simple Notification Service (Amazon SNS) topic with a mobile subscription for each developer. Create an Amazon EventBridge (Amazon CloudWatch Events) alarm by using the LambdaError as the event pattern and the SNStopic name as a resource. Configure the alarm to send a notification to the SNS topic when the alarm state reaches ALARM.
Create an Amazon Simple Notification Service (Amazon SNS) topic with a mobile subscription for each developer. Create an Amazon EventBridge (Amazon CloudWatch Events) alarm by using the LambdaError as the event pattern and the SNStopic name as a resource. Configure the alarm to send a notification to the SNS topic when the alarm state reaches ALARM.
Verify each developer email address in Amazon Simple Email Service (Amazon SES). Create an Amazon CloudWatch rule by using the LambdaError metric and developer email addresses as dimensions. Configure the rule to send an email through Amazon SES when the rule state reaches ALARM.
Verify each developer email address in Amazon Simple Email Service (Amazon SES). Create an Amazon CloudWatch rule by using the LambdaError metric and developer email addresses as dimensions. Configure the rule to send an email through Amazon SES when the rule state reaches ALARM.
Verify each developer mobile phone in Amazon Simple Email Service (Amazon SES). Create an Amazon EventBridge (Amazon CloudWatch Events) rule by using Error as the event pattern and the Lambda function name as a resource. Configure the rule to send a push notification through Amazon SES when the rule state reaches ALARM.
Verify each developer mobile phone in Amazon Simple Email Service (Amazon SES). Create an Amazon EventBridge (Amazon CloudWatch Events) rule by using Error as the event pattern and the Lambda function name as a resource. Configure the rule to send a push notification through Amazon SES when the rule state reaches ALARM.
Suggested answer: D
asked 16/09/2024
John Shelby
36 questions

Question 26

Report
Export
Collapse

A large company is using AWS Organizations to manage its multi-account AWS environment. According to company policy, all users should have read-level access to a particular Amazon S3 bucket in a central account. The S3 bucket data should not be available outside the organization. A SysOps administrator must set up the permissions and add a bucket policy to the S3 bucket. Which parameters should be specified to accomplish this in the MOST efficient manner?

Specify "*" as the principal and PrincipalOrgId as a condition.
Specify "*" as the principal and PrincipalOrgId as a condition.
Specify all account numbers as the principal.
Specify all account numbers as the principal.
Specify PrincipalOrgId as the principal.
Specify PrincipalOrgId as the principal.
Specify the organization's master account as the principal.
Specify the organization's master account as the principal.
Suggested answer: A

Explanation:

Reference: https://aws.amazon.com/blogs/security/iam-share-aws-resources-groups-aws-accounts-aws-organizations/

Amazon SOA-C02 image Question 26 explanation 8061 09162024010005000000

asked 16/09/2024
Avion Bryant
46 questions

Question 27

Report
Export
Collapse

A company is planning to host an application on a set of Amazon EC2 instances that are distributed across multiple Availability Zones. The application must be able to scale to millions of requests each second.

A SysOps administrator must design a solution to distribute the traffic to the EC2 instances. The solution must be optimized to handle sudden and volatile traffic patterns while using a single static IP address for each Availability Zone.

Which solution will meet these requirements?

Amazon Simple Queue Service (Amazon SQS) queue
Amazon Simple Queue Service (Amazon SQS) queue
Application Load Balancer
Application Load Balancer
AWS Global Accelerator
AWS Global Accelerator
Network Load Balancer
Network Load Balancer
Suggested answer: B
asked 16/09/2024
ivaylo Skechleiev
36 questions

Question 28

Report
Export
Collapse

A company has a critical serverless application that uses multiple AWS Lambda functions. Each Lambda function generates 1 GB of log data daily in its own Amazon CloudWatch Logs log group. The company's security team asks for a count of application errors, grouped by type, across all of the log group.

What should a SysOps administrator do to meet this requirement?

Perform a CloudWatch Logs Insights query that uses the stats command and count function.
Perform a CloudWatch Logs Insights query that uses the stats command and count function.
Perform a CloudWatch Logs search that uses the groupby keyword and count function.
Perform a CloudWatch Logs search that uses the groupby keyword and count function.
Perform an Amazon Athena query that uses the SELECT and GROUP BY keywords.
Perform an Amazon Athena query that uses the SELECT and GROUP BY keywords.
Perform an Amazon RDS query that uses the SELECT and GROUP BY keywords.
Perform an Amazon RDS query that uses the SELECT and GROUP BY keywords.
Suggested answer: A
asked 16/09/2024
Avishek Das
42 questions

Question 29

Report
Export
Collapse

A company is running an application on a fleet of Amazon EC2 instances behind an Application Load Balancer (ALB). The EC2 instances are launched by an Auto Scaling group and are automatically registered in a target group. A SysOps administrator must set up a notification to alert application owners when targets fail health checks. What should the SysOps administrator do to meet these requirements?

Create an Amazon CloudWatch alarm on the UnHealthyHostCount metric. Configure an action to send an Amazon Simple Notification Service (Amazon SNS) notification when the metric is greater than 0.
Create an Amazon CloudWatch alarm on the UnHealthyHostCount metric. Configure an action to send an Amazon Simple Notification Service (Amazon SNS) notification when the metric is greater than 0.
Configure an Amazon EC2 Auto Scaling custom lifecycle action to send an Amazon Simple Notification Service (Amazon SNS) notification when an instance is in the Pending: Wait state.
Configure an Amazon EC2 Auto Scaling custom lifecycle action to send an Amazon Simple Notification Service (Amazon SNS) notification when an instance is in the Pending: Wait state.
Update the Auto Scaling group. Configure an activity notification to send an Amazon Simple Notification Service (Amazon SNS) notification for the Unhealthy event type.
Update the Auto Scaling group. Configure an activity notification to send an Amazon Simple Notification Service (Amazon SNS) notification for the Unhealthy event type.
Update the ALB health check to send an Amazon Simple Notification Service (Amazon SNS) notification when an instance is unhealthy.
Update the ALB health check to send an Amazon Simple Notification Service (Amazon SNS) notification when an instance is unhealthy.
Suggested answer: A

Explanation:

Reference: https://aws.amazon.com/blogs/networking-and-content-delivery/identifying-unhealthy-targets-of-elastic-loadbalancer/

asked 16/09/2024
Tolga Kesici
48 questions

Question 30

Report
Export
Collapse

A SysOps administrator is troubleshooting an AWS CloudFormation template whereby multiple Amazon EC2 instances are being created. The template is working in us-east-1, but it is failing in us-west-2 with the error code:

AMI [ami-12345678] does not exist

How should the Administrator ensure that the AWS CloudFormation template is working in every region?

Copy the source region's Amazon Machine Image (AMI) to the destination region and assign it the same ID.
Copy the source region's Amazon Machine Image (AMI) to the destination region and assign it the same ID.
Edit the AWS CloudFormation template to specify the region code as part of the fully qualified AMI ID.
Edit the AWS CloudFormation template to specify the region code as part of the fully qualified AMI ID.
Edit the AWS CloudFormation template to offer a drop-down list of all AMIs to the user by using the AWS::EC2::AMI::ImageID control.
Edit the AWS CloudFormation template to offer a drop-down list of all AMIs to the user by using the AWS::EC2::AMI::ImageID control.
Modify the AWS CloudFormation template by including the AMI IDs in the "Mappings" section. Refer to the proper mapping within the template for the proper AMI ID.
Modify the AWS CloudFormation template by including the AMI IDs in the "Mappings" section. Refer to the proper mapping within the template for the proper AMI ID.
Suggested answer: D
asked 16/09/2024
Victor Ogbonna
34 questions
Total 450 questions
Go to page: of 45
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

The company needs a shared file solution for EC2 Windows instances in a Multi-AZ deployment that uses native Windows storage capabilities and maximizes consistency.
After creating a presigned URL for an S3 object, users can no longer access the file after a few days.
A company has an AWS Site-to-Site VPN connection between on-premises resources and resources that are hosted in a VPC. A SysOps administrator launches an Amazon EC2 instance that has only a private IP address into a private subnet in the VPC. The EC2 instance runs Microsoft Windows Server. A security group for the EC2 instance has rules that allow inbound traffic from the on-premises network over the VPN connection. The on-premises environment contains a third-party network firewall. Rules in the third-party network firewall allow Remote Desktop Protocol (RDP) traffic to flow between the on-premises users over the VPN connection. The on-premises users are unable to connect to the EC2 instance and receive a timeout error. What should the SysOps administrator do to troubleshoot this issue?
The SysOps administrator needs to complete the KMS key policy for least privilege read access for the DataEngineer role to decrypt S3 objects encrypted with a KMS key.
The SysOps administrator needs to deploy auditing software on all existing and new EC2 instances across multiple Regions, using AWS Systems Manager.
A company recently migrated its application to a VPC on AWS. An AWS Site-to-Site VPN connection connects the company's on-premises network to the VPC. The application retrieves customer data from another system that resides on premises. The application uses an on-premises DNS server to resolve domain records. After the migration, the application is not able to connect to the customer data because of name resolution errors. Which solution will give the application the ability to resolve the internal domain names?
A SysOps administrator is responsible for a legacy, CPU-heavy application. The application can only be scaled vertically. Currently, the application is deployed on a single t2. large Amazon EC2 instance. The system is showing 90% CPU usage and significant performance latency after a few minutes. What change should be made to alleviate the performance problem?
A SysOps administrator needs to share a new AMI with all accounts within an organization managed through AWS Organizations.
ASysOps administrator configures an application to run on Amazon EC2 instances behind an Application Load Balancer (ALB) in a simple scaling Auto Scaling group with the default settings. The Auto Scaling group is configured to use the RequestCountPerTarget metric for scaling. The SysOps administrator notices that the RequestCountPerTarget metric exceeded the specified limit twice in 180 seconds. How will the number of EC2 instances in this Auto Scaling group be affected in this scenario?
A SysOps administrator needs EC2 instances in a VPC to resolve DNS names for hosts in an on-premises data center.