A SysOps administrator is creating resources from an AWS CloudFormation template that defines an Auto Scaling group of Amazon EC2 instances. The Auto Scaling group launch template provisions each EC2 instance by using a user data script. The creation of the Auto Scaling group resource is failing because of an error The wait condition is not receiving the required number of signals.How should the SysOps administrator resolve this error?

Run cfn-signal at the completion of the user data script.

Modify the EC2 instances' security group to allow outgoing traffic on port 443.

Reduce the Auto Scaling group's DesiredCapacity value in the CloudFormation template.

Set the AssociatePubliclpAddress property to True in the Auto Scaling group launch template.

A SysOps administrator is using AWS CloudFormation StackSets to create AWS resources in two AWS Regions in the same AWS account. A stack operation fails in one Region and returns the stack instance status of OUTDATED.What is the cause of this failure?

The stack has not yet been deployed to the Region.

The CloudFormation template changed on the local disk and has not been submitted to Cloud Formation.

The CloudFormation template is trying to create a global resource that is not unique

The stack has not yet been deployed to the Region.

The SysOps administrator is using an old version of the CloudFormation API.

A company hosts an application on Amazon EC2 instances. The application periodically causes a surge in CPU utilization on the EC2 instances.A SysOps administrator needs to implement a solution to detect when these surges occur. The solution also must send an email alert to the company's development team.Which solution will meet these requirements?

Create an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the development team's email address to the SNS topic. Create an Amazon CloudWatch alarm for the EC2 instances. Use the average of the CPU utilization metric, an upper threshold of 80%. and a period of 5 minutes for the alarm. Link the alarm to the SNS topic

Create an Amazon Simple Email Service (Amazon SES) email. Verify the development team's email address. Create an Amazon CloudWatch alarm for the EC2 instances Use the sum of the CPU utilization metric, an upper threshold of 80%. and a period of 15 minutes for the alarm. Link the alarm to the SES email.

Create an Amazon Simple Email Service (Amazon SES) email. Verify the development team's email address. Create an Amazon CloudWatch alarm for the EC2 instances Use the average of the CPU utilization metric, an upper threshold of 80%. and a period of 5 minutes for the alarm. Link the alarm to the SES email.

Create an Amazon Simple Notification Service (Amazon SNS) topic Subscribe the development team's email address to the SNS topic. Create an Amazon CloudWatch alarm for the EC2 instances. Use the sum of the CPU utilization metric, an upper threshold of 80%. and a period of 15 minutes for the alarm. Link the alarm to the SNS topic.

Create an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the development team's email address to the SNS topic. Create an Amazon CloudWatch alarm for the EC2 instances. Use the average of the CPU utilization metric, an upper threshold of 80%. and a period of 5 minutes for the alarm. Link the alarm to the SNS topic

A company observes that a newly created Amazon CloudWatch alarm is not transitioning out of the INSUFFICIENT_DATA state. The alarm was created to track the mem_used_percent metric from an Amazon EC2 instance that is deployed in a public subnet.A review of the EC2 instance shows that the unified CloudWatch agent is installed and is running. However, the metric is not available in CloudWatch. A SysOps administrator needs to implement a solution to resolve this problemWhich solution will meet these requirements?

Create an 1AM instance profile that contains CloudWatch permissions. Add the instance profile to the EC2 instance.

Enable CloudWatch detailed monitoring for the EC2 instance.

Create an 1AM instance profile that contains CloudWatch permissions. Add the instance profile to the EC2 instance.

Migrate the EC2 instance into a private subnet

Create an 1AM user that has an access key ID and a secret access key. Update the unified CloudWatch agent configuration file to use those credentials.

A company's SysOps administrator is troubleshooting communication between the components of an application. The company configured VPC flow logs to be published to Amazon CloudWatch Logs However, there are no logs in CloudWatch LogsWhat could be blocking the VPC flow logs from being published to CloudWatch Logs?

The 1AM policy that is attached to the 1AM role for the flow log is missing the logs:CreateLogGroup permission.

The 1AM policy that is attached to the 1AM role for the flow log is missing the logs:CreateExportTask permission.

The VPC is configured for IPv6 addresses.

The VPC is peered with another VPC in the AWS account.

Users are reporting consistent forced logouts from a stateful web application. The web application Is hosted on Amazon EC2 instances that are in an Auto Scaling group. The instances run behind an Application Load Balancer (ALB) that has multiple target groups with one listener rule The ALB is configured as the origin in an Amazon CloudFront distribution.Which combination of actions should a SysOps administrator take to resolve the logout problem? (Select TWO.)

Configure cookie forwarding in the CloudFront distribution's cache behavior settings.

Enable group-level stickiness on the ALB listener rule for the target groups.

Change to the least outstanding requests algorithm on the ALB target group.

Configure cookie forwarding in the CloudFront distribution's cache behavior settings.

Configure header forwarding in the CloudFront distribution's cache behavior settings.

Enable group-level stickiness on the ALB listener rule for the target groups.

Configure weighted target groups on the ALB.

A company requires that all activity in its AWS account be logged using AWS CloudTrail. Additionally, a SysOps administrator must know when CloudTrail log files are modified or deleted.How should the SysOps administrator meet these requirements?

Enable log file integrity validation Use the AWS CLI to validate the log files.

Enable log file integrity validation. Use the AWS CloudTrail .Processing Library to validate the log files.

Use CloudTrail Insights to monitor the log files for modifications.

Use Amazon CloudWatch Logs to monitor the log files for modifications.

A company has users that deploy Amazon EC2 instances that have more disk performance capacity than is required. A SysOps administrator needs to review all Amazon Elastic Block Store (Amazon EBS) volumes that are associated with the instances and create cost optimization recommendations based on IOPS and throughput.What should the SysOps administrator do to meet these requirements in the MOST operationally efficient way?

Opt in to AWS Compute Optimizer. Allow sufficient time for metrics to be gathered. Review the Compute Optimizer findings for EBS volumes.

Use the monitoring graphs in the EC2 console to view metrics for EBS volumes Review the consumed space against the provisioned space on each volume. Identify any volumes that have low utilization.

Stop the EC2 instances from the EC2 console. Change the EC2 instance type to Amazon EBS-optimized. Start the EC2 instances

Opt in to AWS Compute Optimizer. Allow sufficient time for metrics to be gathered. Review the Compute Optimizer findings for EBS volumes.

Install the fio tool onto the EC2 instances and create a cfg file to approximate the required workloads. Use the benchmark results to gauge whether the provisioned EBS volumes are of the most appropriate type.

A company's security policy requires incoming SSH traffic to be restricted to a defined set of addresses. The company is using an AWS Config rule to check whether security groups allow unrestricted incoming SSH traffic.A SysOps administrator discovers a noncompliant resource and fixes the security group manually. The SysOps administrator wants to automate the remediation of other noncomphant resources.What is the MOST operationally efficient solution that meets these requirements?

Configure an automatic remediation action on the AWS Config rule Specify the AWS-DisablelncommgSSHOnPort22 remediation action.

Create an Amazon CloudWatch alarm for the AWS Config rule's status metric Create an AWS Lambda function that can remove the noncompliant rule from the security group. Configure the alarm action to invoke the Lambda function.

Configure an automatic remediation action on the AWS Config rule Specify the AWS-DisablelncommgSSHOnPort22 remediation action.

Configure an Amazon EventBridge rule for AWS Config configuration item change events. Create an AWS Lambda function that can remove the noncompliant rule from the security group. Configure the rule to invoke the Lambda function.

Create an AWS Lambda function that can analyze a security group's inbound rules to check for unrestricted SSH access. Configure the Lambda function to remove the noncompliant rule from the security group. Configure an Amazon EventBridge rule to invoke the Lambda function every hour.

Amazon SOA-C02 Practice Test 12 - Free Online Exam Prep & Questions

A SysOps administrator needs to provision a new fleet of Amazon EC2 Spot Instances in an Amazon EC2 Auto Scaling group. The Auto Scaling group will use a wide range of instance types The configured fleet must come from pools that have the most availability for the number of instances that are launched.

Which solution will meet these requirements?

Become a Premium Member for full access

Unlock Premium Member

Amazon SOA-C02 Practice Test 12

Question

Amazon SOA-C02 Practice Tests

Practice Tests