A non-production application is installed on an Amazon EC2 instance. The application's developer has created an Amazon CloudWatch alarm that reboots the EC2 instance if a critical application error occurs. When the developer tests the new alarm, the alarm enters ALARM state. However, the EC2 instance fails to reboot. A SysOps administrator needs to troubleshoot the developer's IAM permissions. What should the SysOps administrator do to ensure that the developer can configure the alarm correctly?

Ensure that the developer has the iamiCreateServiceLinkedRole permission.

Ensure that the developer has the iam:AttachGroupPolicy permission.

Ensure that the developer has the iamiCreateServiceLinkedRole permission.

Ensure that the developer has the iam:CreateServiceSpecificCredential permission.

Ensure that the developer does not have the iam:EnabieMFADevice permission.

An application runs on Amazon EC2 instances that are in an Auto Scaling group. A SysOps administrator needs to implement a solution that provides a central storage location for errors that the application logs to disk. The solution must provide an alert when the application logs an error. What should the SysOps administrator do to meet these requirements?

Deploy and configure the Amazon CloudWatch agent on the EC2 instances to log to a CloudWatch Log group. Create a metric filter on the target CloudWatch Log group. Create a CloudWatch alarm that publishes to an Amazon Simple Notification Service (Amazon SNS) topic that has an email subscription.

Create a cron job on the EC2 instances to identify errors and push the errors to an Amazon CloudWatch metric filter. Configure the filter to publish to an Amazon Simple Notification Service (Amazon SNS) topic that has an SMS subscription.

Deploy an AWS Lambda function that pushes the errors directly to Amazon CloudWatch Logs. Configure the Lambda function to run every time the log file is updated on disk.

Create an Auto Scaling lifecycle hook that invokes an EC2 based script to identify errors. Configure the script to push the error messages to an Amazon CloudWatch log group when the EC2 instances scale in. Create a CloudWatch alarm that publishes to an Amazon Simple Notification Service (Amazon SNS) topic that has an email subscription when the number of error messages exceeds a threshold.

A company is running workloads on Amazon EC2 instances that are in a single AWS Region. The company needs to create daily backups of each EC2 instance.A SysOps administrator must implement a solution to automate the backup creation process.Which solution will meet this requirement with the LEAST operational overhead?

Use AWS Backup to create a backup plan that uses a daily default template. Specify the EC2 instances as the resources to back up.

Create a shell script that uses the AWS CLI. Configure the shell script to list all the instances and to create a snapshot of each instance. Launch a new instance to host the shell script. Set up a cron job to run the shell script every 24 hours.

Use the EC2 console to enable the Auto Recovery option for each instance. Schedule the Auto Recovery option to run every 24 hours.

Create a shell script that creates a daily cron job on the instances. Configure the cron job to use the AWS CLI to create a snapshot of each instance. Ensure that the instance profile has the required permissions to create a snapshot. Add the shell script to run as part of the instance user data.

Use AWS Backup to create a backup plan that uses a daily default template. Specify the EC2 instances as the resources to back up.

A company has an Amazon EC2 instance that has high CPU utilization. The EC2 instance is a t3.large instance and is running a test web application. The company discovers that the web application would operate better on a compute optimized large instance.What should a SysOps administrator do to make this change?

Stop the EC2 instance. Change the instance type to a compute optimized instance. Start the EC2 instance.

Migrate the EC2 Instance to a compute optimized instance by using AWS VM Import/Export.

Enable hibernation on the EC2 instance. Change the instance type to a compute optimized instance. Disable hibernation on the EC2 instance.

Stop the EC2 instance. Change the instance type to a compute optimized instance. Start the EC2 instance.

Change the instance type to a compute optimized instance while the EC2 instance is running.

A company has a non-production application that runs on an Amazon EC2 instance. The Amazon CloudWatch agent is installed on the EC2 instance. The application includes a process that randomly overuses temporary disk space and fills disks to 100% capacity. A SysOps administrator needs to automate a reboot of the EC2 instance after the disks reach 100% capacity. Which solution will meet this requirement in the MOST operationally efficient way?

Create an AWS Lambda function to reboot the EC2 instance. Create a CloudWatch alarm that uses Amazon EventBridge to invoke the Lambda function.

Create a CloudWatch alarm for the EC2 instance. Create an Amazon EventBridge event rule that reacts to the CloudWatch alarm and reboots the EC2 instance.

Create a CloudWatch alarm for the EC2 instance. Create an Amazon Simple Email Service (Amazon SES) notification that reacts to the CloudWatch alarm and reboots the EC2 instance.

Create an AWS Lambda function to reboot the EC2 instance. Create a CloudWatch alarm that uses Amazon EventBridge to invoke the Lambda function.

Create an AWS Lambda function to reboot the EC2 instance. Use EC2 health checks to invoke the Lambda function.

A company has implemented a Kubemetes cluster on Amazon Elastic Kubernetes Service (Amazon EKS) to host a mkroservices-based application. The company expects application traffic to increase significantly for the next month and wants to prevent the application from crashing because of the high number of requests.Which solution will meet these requirements with the LEAST administrative overhead?

Implement the Kubernetes Horizontal Pod Autoscaler. Set a target CPU utilization percentage.

Create a second EKS cluster. Load balance the workload between the two clusters.

Implement the Kubernetes Horizontal Pod Autoscaler. Set a target CPU utilization percentage.

Migrate the application from Amazon EKS to Amazon EC2 for the next month. Migrate the application back to Amazon EKS when the month ends.

Implement the Kubernetes Vertical Pod Autoscaler. Set a target CPU utilization percentage.

A SysOps administrator is troubleshooting an implementation of Amazon CloudWatch Synthetics. The CloudWatch Synthetics results must be sent to an Amazon S3 bucket. The SysOps administrator has copied the configuration of an existing canary that runs on a VPC that has an internet gateway attached. However, the SysOps administrator cannot get the canary to successfully start on a private VPC that has no internet access. What should the SysOps administrator do to successfully run the canary on the private VPC?

Ensure that the DNS resolution option and the DNS hostnames option are turned on in the VPC. Create an interface VPC endpoint for CloudWatch. Create a gateway VPC endpoint for Amazon S3. Add the permissions to allow CloudWatch Synthetics to use both endpoints.

Ensure that the DNS resolution option and the DNS hostnames option are turned on in the VPC. Add the synthetics:GetCanaryRuns permission to the VPC. On the S3 bucket, add the IgnorePublicAcls permission to the CloudWatch Synthetics role.

Ensure that the DNS resolution option and the DNS hostnames option are turned off in the VPC. Create a gateway VPC endpoint for Amazon S3. Add the permissions to allow CloudWatch Synthetics to use the S3 endpoint.

Ensure that the DNS resolution option and the DNS hostnames option are turned off in the VPC. Add a security group to the canary to allow outbound traffic on the DNS port. Add the permissions to allow CloudWatch Synthetics to write to the S3 bucket.

Ensure that the DNS resolution option and the DNS hostnames option are turned on in the VPC. Create an interface VPC endpoint for CloudWatch. Create a gateway VPC endpoint for Amazon S3. Add the permissions to allow CloudWatch Synthetics to use both endpoints.

A restaurant has a service that receives and processes delivery orders. The restaurant uses Amazon EventBridge for its event bus and event-driven routing requirements. When an order is ready for delivery, the service sends an event to a delivery company. The event notifies the delivery company that the order is ready for pickup.For a short time during a day that included many orders, the restaurant could not deliver order completion events to the delivery company. The reason was that the delivery company's order receiving service was experiencing errors. The restaurant needs the capability to reprocess the orders that were undelivered.Which solution will ensure that the orders can be reprocessed?

Configure an archive in EventBridge. Specify an event pattern to ensure that events are sent to the archive. Use the EventBridge replay capability to replay events from the appropriate time period.

Configure an Amazon Simple Queue Service (Amazon SQS) queue as a new target in EventBridge for existing events. For reprocessing, create an EventBridge rule that processes orders from the SQS queue. Specify the delivery company as the rule's target.

Configure an archive in EventBridge. Specify an event pattern to ensure that events are sent to the archive. Use the EventBridge replay capability to replay events from the appropriate time period.

Create an EventBridge rule that matches the pattern for failed orders from AWS CloudTrail. Specify the delivery company as the rule's target.

Create an Amazon Simple Notification Service (Amazon SNS) topic. Set up message filter policies to filter on failed events.

A SysOps administrator is troubleshooting a website that will not load for users. The website is hosted by an Amazon CloudFront distribution that has an Amazon S3 bucket as the origin. The CloudFront distribution is named d11111abcdef8.cloudfront.net. The S3 bucket has the following Amazon Resource Name (ARN): arn:aws:s3:::example-com-website-files. The S3 bucket has S3 Block Public Access enabled. The SysOps administrator examines the website's DNS CNAME records and discovers that the record value is set to s3.amazonaws.com/example-com-website-files/. What should the SysOps administrator do to configure the website for use with CloudFront?

Modify the value of the DNS CNAME record to be d11111abcdef8.cloudfront.net instead of the S3 URL.

Disable S3 Block Public Access on the S3 bucket.

Create an S3 access point in the same AWS Region where the S3 bucket is located. Configure the access point policy to allow CloudFront to read from the S3 bucket. Point the CNAME record to the S3 access point name.

Modify the value of the DNS CNAME record to be arn:aws:s3:::example-com-website-files instead of the S3 URL.

Modify the value of the DNS CNAME record to be d11111abcdef8.cloudfront.net instead of the S3 URL.

A company has an Amazon RDS for MySQL DB instance that is configured as a Single-AZ DB instance. A SysOps administrator must configure the DB instance to fail over automatically in the event of a failure.Which action will meet this requirement?

Modify the DB instance to be a Multi-AZ DB instance.

Change the DB instance to an RDS for PostgreSQL DB instance.

Modify the DB instance to be a Multi-AZ DB instance.

Create a read replica of the DB instance.

Enable automated backups for the DB instance.

A company is preparing for a marketing campaign that will increase traffic to a new web application. The application uses Amazon API Gateway and AWS Lambda for the application logic. The application stores relevant user data in an Amazon Aurora MySQL DB cluster that has one Aurora Replica. Database queries for the application are 5% write and 95% read. What should a SysOps administrator do to scale the database when traffic increases?

Configure Aurora Auto Scaling to add or remove Aurora Replicas in the cluster based on the average CPU utilization of the Aurora Replicas.

Configure Aurora Auto Scaling to increase or decrease the size of the Aurora Replicas based on the average CPU utilization of the Aurora Replicas.

Configure AWS Auto Scaling to monitor the Aurora cluster. Configure AWS Auto Scaling to add or remove Aurora Replicas in the cluster based on the average CPU utilization of the primary instance.

Configure AWS Auto Scaling to monitor the Aurora cluster. Configure AWS Auto Scaling to add or remove Aurora Replicas in the cluster based on the average CPU utilization of the existing Aurora Replica.

A company's IT help desk reports that a recently deployed EC2 instance has set off an Amazon CloudWatch alarm that monitors HTTP availability. The instance runs Amazon Linux and hosts a non-production web server. A SysOps administrator needs to connect to the instance to review the cloud-init.log file for the instance. The instance is in an isolated subnet that does not have a NAT gateway. The VPC where the instance is located has no VPN connectivity.Which solution will meet these requirements with the LEAST operational effort?

Connect to the instance by using EC2 Instance Connect. Use an EC2 Instance Connect endpoint. Ensure that the security groups on the endpoint and instance allow SSH access.

Connect to the instance by using EC2 Instance Connect. Ensure that the instance security group and network ACL allow port 22 access from the IT help desk client's IP address.

Connect to the instance by using AWS Systems Manager Session Manager. Ensure that the instance security group and network ACL allow outbound connectivity to the internet.

Connect to the instance by using EC2 Instance Connect. Select a bastion host to connect to. Ensure that the security groups on the instance allow SSH access.

An ecommerce company uses an Amazon ElastiCache (Redis) cluster for in-memory caching of popular product queries on a shopping website. A SysOps administrator views Amazon CloudWatch metrics data for the ElastiCache cluster and notices a large number of evictions. The SysOps administrator needs to implement a solution to reduce the number of evictions. The solution also must keep the popular queries cached. Which solution will meet these requirements with the LEAST operational overhead?

Migrate to a new ElastiCache cluster that has larger nodes.

Add another node to the ElastiCache cluster.

Increase the ElastiCache TTL value.

Decrease the ElastiCache TTL value.

Migrate to a new ElastiCache cluster that has larger nodes.

A company requires the rotation of administrative credentials for production workloads on a regular basis. A SysOps administrator must implement this policy for an Amazon RDS DB instance's master user password.Which solution will meet this requirement with the LEAST operational effort?

Create a new RDS database secret in AWS Secrets Manager. Apply the secret to the RDS DB instance. Configure automatic rotation.

Create an AWS Lambda function to change the RDS master user password. Create an Amazon EventBridge scheduled rule to invoke the Lambda function.

Create a new SecureString parameter in AWS Systems Manager Parameter Store. Encrypt the parameter with an AWS Key Management Service (AWS KMS) key. Configure automatic rotation.

Create a new String parameter in AWS Systems Manager Parameter Store. Configure automatic rotation.

Create a new RDS database secret in AWS Secrets Manager. Apply the secret to the RDS DB instance. Configure automatic rotation.

A company is deploying a third-party unit testing solution that is delivered as an Amazon EC2 Amazon Machine Image (AMI). The company is deploying the testing solution on On-Demand Instances. The company wants to use an additional three Spot Instances when the Spot Instance prices drop to a specific threshold. A minimum of three instances are required at all times to operate the testing solution. A SysOps administrator must implement high availability for the architecture. Which solution will meet these requirements with the LEAST management overhead?

Configure a launch template that uses the MixedInstancesPolicy property for the Spot Instances and the On-Demand Instances. Set the maximum price for the Spot Instances.

Configure a launch template for the Spot Instances. Set the maximum price for the Spot Instances. Configure another launch template for the On-Demand Instances.

Configure a launch template that uses the InstanceMarketOptions property for the Spot Instances and the On-Demand Instances. Set the maximum price for the Spot Instances.

Configure a launch template that uses the MixedInstancesPolicy property for the Spot Instances and the On-Demand Instances. Set the maximum price for the Spot Instances.

Configure a launch template that uses the InstanceMarketOptions property and the MixedInstancesPolicy property for the Spot Instances and the On-Demand Instances. Set the maximum price for the Spot Instances.

SIMULATIONYou need to update an existing AWS CloudFormation stack. If needed, a copy to the CloudFormation template is available in an Amazon SB bucket named cloudformation-bucket1. Use the us-east-2 Region for all resources.2. Unless specified below, use the default configuration settings.3. update the Amazon EQ instance named Devinstance by making the following changes to the stack named 1700182:a) Change the EC2 instance type to us-east-t2.nano.b) Allow SSH to connect to the EC2 instance from the IP address range192.168.100.0/30.c) Replace the instance profile IAM role with IamRoleB.4. Deploy the changes by updating the stack using the CFServiceR01e role.5. Edit the stack options to prevent accidental deletion.6. Using the output from the stack, enter the value of the Prodlnstanceld in the text box below:

See the Explanation for solution

A company hosts an application on an Amazon EC2 instance in a single AWS Region. The application requires support for non-HTTP TCP traffic and HTTP traffic.The company wants to deliver content with low latency by leveraging the AWS network. The company also wants to implement an Auto Scaling group with anElastic Load Balancer.How should a SysOps administrator meet these requirements?

Create an Auto Scaling group with a Network Load Balancer (NLB). Add an accelerator with AWS Global Accelerator with the NLB as an endpoint.

Create an Auto Scaling group with an Application Load Balancer (ALB). Add an Amazon CloudFront distribution with the ALB as the origin.

Create an Auto Scaling group with an Application Load Balancer (ALB). Add an accelerator with AWS Global Accelerator with the ALB as an endpoint.

Create an Auto Scaling group with a Network Load Balancer (NLB). Add an Amazon CloudFront distribution with the NLB as the origin.

Create an Auto Scaling group with a Network Load Balancer (NLB). Add an accelerator with AWS Global Accelerator with the NLB as an endpoint.

A SysOps administrator needs to configure a caching layer for a read-heavy application that uses an Amazon RDS for PostgreSQL database. The application exists across three AWS Regions. Read and write activities occur in the primary Region. In the two secondary Regions, read-only activity occurs on RDS for PostgreSQL cross-Region read replicas.The cache in each Region must consist of the same data to provide a consistent user experience across Regions.Which solution for the caching layer will meet these requirements?

Set up an Amazon ElastiCache (Redis) global datastore. Include a read and write cluster in the primary Region. Include a read-only cluster in each secondary Region.

Set up an Amazon ElastiCache (Memcached) global database. Include a read and write cluster in the primary Region. Include a read-only cluster in each secondary Region.

Set up query caching on the RDS for PostgreSQL database in the primary Region. Configure query cache replication to the secondary RDS cross-Region replicas.

Set up an Amazon ElastiCache (Memcached) cluster with cluster mode enabled in all three Regions. Set up ElastiCache cross-Region replication from the primary Region to the secondary Regions.

A SysOps administrator must ensure that all of a company's Amazon S3 buckets have versioning enabled. Which solution will meet this requirement?

Enable AWS Config. Set up the s3-bucket-versioning-enabled AWS Config managed rule. Specify the configuration changes trigger type. Configure an automatic remediation action that uses the AWS-ConfigureS3BucketVersioning AWS Systems Manager Automation runbook to enable versioning on noncompliant S3 buckets.

Enable AWS Config. Set up the s3-bucket-versioning-enabled AWS Config managed rule. Specify the configuration changes trigger type. Configure an automatic remediation action that uses an AWS Lambda function to enable versioning on noncompliant S3 buckets.

Enable AWS Config. Set up the s3-bucket-versioning-enabled AWS Config managed rule. Specify the configuration changes trigger type. Configure an automatic remediation action that uses the AWS-ConfigureS3BucketVersioning AWS Systems Manager Automation runbook to enable versioning on noncompliant S3 buckets.

Enable Amazon GuardDuty. Use GuardDuty to identify S3 buckets that have versioning disabled. Create an Amazon EventBridge rule that sends the GuardDuty findings to AWS Systems Manager Automation. Specify the AWS-ConfigureS3BucketVersioning Systems Manager Automation runbook to enable versioning on noncompliant S3 buckets.

Enable Amazon GuardDuty. Use GuardDuty to identify S3 buckets that have versioning disabled. Create an Amazon EventBridge rule that sends the GuardDuty findings to a target AWS Lambda function. Configure the Lambda function to enable versioning on noncompliant S3 buckets.

Amazon SOA-C02 Practice Test 13 - Free Online Exam Questions 481-501

A SysOps administrator needs to monitor Amazon DynamoDB usage across a company's AWS accounts. The accounts are in an organization with all features enabled in AWS Organizations. The company recently experienced write throttling on a DynamoDB table after the company breached the AccountProvisionedWriteCapacityUnits quota in a member account.

The SysOps administrator must create alarms to monitor DynamoDB provisioned write capacity units (WCUs) and quota usage in each account. The SysOps administrator must manage and view the alarms from a single monitoring account.

Which combination of steps will meet these requirements? (Select TWO.)

Become a Premium Member for full access

Unlock Premium Member

Amazon SOA-C02 Practice Test 13

Question

Amazon SOA-C02 Practice Tests

Practice Tests