ExamGecko
Login
Home / Amazon / SOA-C02 / List of questions
Ask Question

Amazon SOA-C02 Practice Test - Questions Answers, Page 21

List of questions

Question 201

Report
Export
Collapse

A company wants to use only IPv6 for all its Amazon EC2 instances. The EC2 instances must not be accessible from the internet, but the EC2 instances must be able to access the internet. The company creates a dual-stack VPC and IPv6- only subnets.

How should a SysOps administrator configure the VPC to meet these requirements?

Create and attach a NAT gateway. Create a custom route table that includes an entry to point all IPv6 traffic to the NAT gateway. Attach the custom route table to the IPv6-only subnets.
Create and attach a NAT gateway. Create a custom route table that includes an entry to point all IPv6 traffic to the NAT gateway. Attach the custom route table to the IPv6-only subnets.
Create and attach an internet gateway. Create a custom route table that includes an entry to point all IPv6 traffic to the internet gateway. Attach the custom route table to the IPv6-only subnets.
Create and attach an internet gateway. Create a custom route table that includes an entry to point all IPv6 traffic to the internet gateway. Attach the custom route table to the IPv6-only subnets.
Create and attach an egress-only internet gateway. Create a custom route table that includes an entry to point all IPv6 traffic to the egress-only internet gateway. Attach the custom route table to the IPv6-only subnets.
Create and attach an egress-only internet gateway. Create a custom route table that includes an entry to point all IPv6 traffic to the egress-only internet gateway. Attach the custom route table to the IPv6-only subnets.
Create and attach an internet gateway and a NAT gateway. Create a custom route table that includes an entry to point all IPv6 traffic to the internet gateway and all IPv4 traffic to the NAT gateway. Attach the custom route table to the IPv6-only subnets.
Create and attach an internet gateway and a NAT gateway. Create a custom route table that includes an entry to point all IPv6 traffic to the internet gateway and all IPv4 traffic to the NAT gateway. Attach the custom route table to the IPv6-only subnets.
Suggested answer: C
asked 16/09/2024
Kong Yew Kuen
38 questions

Question 202

Report
Export
Collapse

A company wants to track its AWS costs in all member accounts that are part of an organization in AWS Organizations. Managers of the member accounts want to receive a notification when the estimated costs exceed a predetermined amount each month. The managers are unable to configure a billing alarm. The IAM permissions for all users are correct. What could be the cause of this issue?

The management/payer account does not have billing alerts turned on.
The management/payer account does not have billing alerts turned on.
The company has not configured AWS Resource Access Manager (AWS RAM) to share billing information between the member accounts and the management/payer account.
The company has not configured AWS Resource Access Manager (AWS RAM) to share billing information between the member accounts and the management/payer account.
Amazon GuardDuty is turned on for all the accounts.
Amazon GuardDuty is turned on for all the accounts.
The company has not configured an AWS Config rule to monitor billing.
The company has not configured an AWS Config rule to monitor billing.
Suggested answer: B
asked 16/09/2024
Lester Ballesteros
45 questions

Question 203

Report
Export
Collapse

A SysOps administrator creates an AWS CloudFormation template to define an application stack that can be deployed in multiple AWS Regions. The SysOps administrator also creates an Amazon CloudWatch dashboard by using the AWS Management Console. Each deployment of the application requires its own CloudWatch dashboard. How can the SysOps administrator automate the creation of the CloudWatch dashboard each time the application is deployed?

Create a script by using the AWS CLI to run the aws cloudformation put-dashboard command with the name of the dashboard. Run the command each time a new CloudFormation stack is created.
Create a script by using the AWS CLI to run the aws cloudformation put-dashboard command with the name of the dashboard. Run the command each time a new CloudFormation stack is created.
Export the existing CloudWatch dashboard as JSON. Update the CloudFormation template to define an AWS::CloudWatch::Dashboard resource. Include the exported JSON in the resource's DashboardBody property.
Export the existing CloudWatch dashboard as JSON. Update the CloudFormation template to define an AWS::CloudWatch::Dashboard resource. Include the exported JSON in the resource's DashboardBody property.
Update the CloudFormation template to define an resource. Use the intrinsic Ref function to reference the ID of the existing CloudWatch dashboard.
Update the CloudFormation template to define an resource. Use the intrinsic Ref function to reference the ID of the existing CloudWatch dashboard.
Update the CloudFormation template to define an AWS::CloudWatch::Dashboard resource.Specify the name of the existing dashboard in the DashboardName property.
Update the CloudFormation template to define an AWS::CloudWatch::Dashboard resource.Specify the name of the existing dashboard in the DashboardName property.
Suggested answer: B

Explanation:

You can only use the Intrinsic Ref function to reference a resource that is being created at the same time as the current CloudFormation template. The question states that the CloudWatch dashboard was previously created using the AWS Management Console, so there is no ID to reference the existing CloudWatch dashboard in the CloudFormation template. You would need to export the existing CloudWatch dashboard as JSON, then use the DashboardBody property in the CloudFormation template to replicate it upon each deployment(https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/CloudWatch-Dashboard- Body-Structure.html)

asked 16/09/2024
Geetanjali Singh
36 questions

Question 204

Report
Export
Collapse

A SysOps administrator is required to monitor free space on Amazon EBS volumes attached to Microsoft Windows-based Amazon EC2 instances within a company’s account. The administrator must be alerted to potential issues. What should the administrator do to receive email alerts before low storage space affects EC2 instance performance?

Use built-in Amazon CloudWatch metrics, and configure CloudWatch alarms and an Amazon SNS topic for email notifications
Use built-in Amazon CloudWatch metrics, and configure CloudWatch alarms and an Amazon SNS topic for email notifications
Use AWS CloudTrail logs and configure the trail to send notifications to an Amazon SNS topic.
Use AWS CloudTrail logs and configure the trail to send notifications to an Amazon SNS topic.
Use the Amazon CloudWatch agent to send disk space metrics, then set up CloudWatch alarms using an Amazon SNS topic.
Use the Amazon CloudWatch agent to send disk space metrics, then set up CloudWatch alarms using an Amazon SNS topic.
Use AWS Trusted Advisor and enable email notification alerts for EC2 disk space
Use AWS Trusted Advisor and enable email notification alerts for EC2 disk space
Suggested answer: C
asked 16/09/2024
Brett Tin
37 questions

Question 205

Report
Export
Collapse

A company plans to migrate several of its high performance computing (MPC) virtual machines (VMs) to Amazon EC2 instances on AWS. A SysOps administrator must identify a placement group for this deployment. The strategy must minimize network latency and must maximize network throughput between the HPC VMs.

Which strategy should the SysOps administrator choose to meet these requirements?

Deploy the instances in a cluster placement group in one Availability Zone.
Deploy the instances in a cluster placement group in one Availability Zone.
Deploy the instances in a partition placement group in two Availability Zones
Deploy the instances in a partition placement group in two Availability Zones
Deploy the instances in a partition placement group in one Availability Zone
Deploy the instances in a partition placement group in one Availability Zone
Deploy the instances in a spread placement group in two Availably Zones
Deploy the instances in a spread placement group in two Availably Zones
Suggested answer: A
asked 16/09/2024
Christian Andrew TANAP
41 questions

Question 206

Report
Export
Collapse

A company's VPC has connectivity to an on-premises data center through an AWS Site-to-Site VPN.

The company needs Amazon EC2 instances in the VPC to send DNS queries for example com to the DNS servers in the data center. Which solution will meet these requirements?

Create an Amazon Route 53 Resolver inbound endpoint Create a conditional forwarding rule on the on-primes DNS servers to forward DNS requests for example.com to the inbound endpoints.
Create an Amazon Route 53 Resolver inbound endpoint Create a conditional forwarding rule on the on-primes DNS servers to forward DNS requests for example.com to the inbound endpoints.
Create an Amazon Route 53 Resolver inbound endpoint Create a forwarding rule on the resolver that sends all queries for example.com to the on-premises DNS servers. Associate this rule with the VPC.
Create an Amazon Route 53 Resolver inbound endpoint Create a forwarding rule on the resolver that sends all queries for example.com to the on-premises DNS servers. Associate this rule with the VPC.
Create an Amazon Route 53 Resolver outbound endpoint Create a conditional forwarding rule on the on-premises DNS servers to forward DNS requests for example.com to the outbound endpoints
Create an Amazon Route 53 Resolver outbound endpoint Create a conditional forwarding rule on the on-premises DNS servers to forward DNS requests for example.com to the outbound endpoints
Create an Amazon Route 53 Resolver outbound endpoint. Create a forwarding rule on the resolver that sends all queries for exarrc4e.com to the on-premises DNS servers Associate this rule with the VPC.
Create an Amazon Route 53 Resolver outbound endpoint. Create a forwarding rule on the resolver that sends all queries for exarrc4e.com to the on-premises DNS servers Associate this rule with the VPC.
Suggested answer: C
asked 16/09/2024
Dantrez Griffin
34 questions

Question 207

Report
Export
Collapse

A software company runs a workload on Amazon EC2 instances behind an Application Load Balancer (ALB) A SysOcs administrator needs to define a custom health check for the EC2 instances. What is the MOST operationally efficient solution?

Set up each EC2 Instance so that it writes its healthy/unhealthy status into a shared Amazon S3 bucket for the ALB to read
Set up each EC2 Instance so that it writes its healthy/unhealthy status into a shared Amazon S3 bucket for the ALB to read
Configure the health check on the ALB and ensure that the HeathCheckPath setting s correct
Configure the health check on the ALB and ensure that the HeathCheckPath setting s correct
Set up Amazon ElasticCache to track the EC2 instances as they scale in and out
Set up Amazon ElasticCache to track the EC2 instances as they scale in and out
Configure an Amazon API Gateway health check to ensure custom checks on aw of the EC2 instances
Configure an Amazon API Gateway health check to ensure custom checks on aw of the EC2 instances
Suggested answer: B
asked 16/09/2024
Michael Thornton
43 questions

Question 208

Report
Export
Collapse

A SysOos administrator s tasked with analyzing database performance. The database runs on a single Amazon RDS D6 instance. The SysOps administrator finds that, during times of peak traffic, resources on the database are over utilized due to the amount of read traffic.

Which actions should the SysOps administrator take to improve RDS performance? (Select TWO.)

Add a read replica.
Add a read replica.
Modify the application to use Amazon ElastiCache for Memcached.
Modify the application to use Amazon ElastiCache for Memcached.
Migrate the database from RDS to Amazon DynamoDB.
Migrate the database from RDS to Amazon DynamoDB.
Migrate the database to Amazon EC2 with enhanced networking enabled
Migrate the database to Amazon EC2 with enhanced networking enabled
Upgrade the database to a Multi-AZ deployment.
Upgrade the database to a Multi-AZ deployment.
Suggested answer: A, B
asked 16/09/2024
Yassin Benjajji
37 questions

Question 209

Report
Export
Collapse

A company recently its server infrastructure to Amazon EC2 instances. The company wants to use Amazon CloudWatch metrics to track instance memory utilization and available disk space. What should a SysOps administrator do to meet these requirements?

Configure CloudWatch from the AWS Management Console tor all the instances that require monitoring by CloudWatch. AWS automatically installs and configures the agents far the specified instances.
Configure CloudWatch from the AWS Management Console tor all the instances that require monitoring by CloudWatch. AWS automatically installs and configures the agents far the specified instances.
Install and configure the CloudWatch agent on all the instances Attach an IAM role to allow the instances to write logs to CloudWatch.
Install and configure the CloudWatch agent on all the instances Attach an IAM role to allow the instances to write logs to CloudWatch.
Install and configure the CloudWatch agent on all the instances Attach an IAM user to allow the instances to write logs to CloudWatch.
Install and configure the CloudWatch agent on all the instances Attach an IAM user to allow the instances to write logs to CloudWatch.
Install and configure the CloudWatch agent on all the instances. Attach the necessary security groups to allow the instances to write logs to CloudWatch
Install and configure the CloudWatch agent on all the instances. Attach the necessary security groups to allow the instances to write logs to CloudWatch
Suggested answer: C
asked 16/09/2024
Thabo Sebola
38 questions

Question 210

Report
Export
Collapse

A SysOps administrator configures an Amazon S3 gateway endpoint in a VPC. The private subnets inside the VPC do not nave outbound internet access. A user logs in to an Amazon EC2 instance in one of the private subnets and cannot upload a file to an Amazon S3 bucket in the same AWS Region Which solution will solve this problem?

Update the EC2 instance role policy to allow s3:PutObjed access to the target S3 bucket.
Update the EC2 instance role policy to allow s3:PutObjed access to the target S3 bucket.
Update the EC2 security group to allow outbound traffic to 0.0.0.070 for port 80.
Update the EC2 security group to allow outbound traffic to 0.0.0.070 for port 80.
Update the EC2 subnet route table to include the S3 prefix tot destination routes to the S3 gateway endpoint.
Update the EC2 subnet route table to include the S3 prefix tot destination routes to the S3 gateway endpoint.
Update the S3 bucket policy to allow s3 PurObject access from the private subnet OOR block.
Update the S3 bucket policy to allow s3 PurObject access from the private subnet OOR block.
Suggested answer: C
asked 16/09/2024
Marcin Weglarski
38 questions
Total 450 questions
Go to page: of 45
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

The company needs a shared file solution for EC2 Windows instances in a Multi-AZ deployment that uses native Windows storage capabilities and maximizes consistency.
After creating a presigned URL for an S3 object, users can no longer access the file after a few days.
A company has an AWS Site-to-Site VPN connection between on-premises resources and resources that are hosted in a VPC. A SysOps administrator launches an Amazon EC2 instance that has only a private IP address into a private subnet in the VPC. The EC2 instance runs Microsoft Windows Server. A security group for the EC2 instance has rules that allow inbound traffic from the on-premises network over the VPN connection. The on-premises environment contains a third-party network firewall. Rules in the third-party network firewall allow Remote Desktop Protocol (RDP) traffic to flow between the on-premises users over the VPN connection. The on-premises users are unable to connect to the EC2 instance and receive a timeout error. What should the SysOps administrator do to troubleshoot this issue?
The SysOps administrator needs to complete the KMS key policy for least privilege read access for the DataEngineer role to decrypt S3 objects encrypted with a KMS key.
The SysOps administrator needs to deploy auditing software on all existing and new EC2 instances across multiple Regions, using AWS Systems Manager.
A company recently migrated its application to a VPC on AWS. An AWS Site-to-Site VPN connection connects the company's on-premises network to the VPC. The application retrieves customer data from another system that resides on premises. The application uses an on-premises DNS server to resolve domain records. After the migration, the application is not able to connect to the customer data because of name resolution errors. Which solution will give the application the ability to resolve the internal domain names?
A SysOps administrator is responsible for a legacy, CPU-heavy application. The application can only be scaled vertically. Currently, the application is deployed on a single t2. large Amazon EC2 instance. The system is showing 90% CPU usage and significant performance latency after a few minutes. What change should be made to alleviate the performance problem?
A SysOps administrator needs to share a new AMI with all accounts within an organization managed through AWS Organizations.
ASysOps administrator configures an application to run on Amazon EC2 instances behind an Application Load Balancer (ALB) in a simple scaling Auto Scaling group with the default settings. The Auto Scaling group is configured to use the RequestCountPerTarget metric for scaling. The SysOps administrator notices that the RequestCountPerTarget metric exceeded the specified limit twice in 180 seconds. How will the number of EC2 instances in this Auto Scaling group be affected in this scenario?
A SysOps administrator needs EC2 instances in a VPC to resolve DNS names for hosts in an on-premises data center.