Quiz IT certification exam

Question 1

A Sysops administrator creates an Amazon Elastic Kubernetes Service (Amazon EKS) cluster that uses AWS Fargate. The cluster is deployed successfully. The Sysops administrator needs to manage the cluster by using the kubect1 command line tool.

Which of the following must be configured on the Sysops administrator's machine so that kubect1can communicate with the cluster API server?

Become a Premium Member for full access

Unlock Premium Member

Accepted Answer

The kubeconfig file

Answer

The kube-proxy Amazon EKS add-on

Answer

The Fargate profile

Answer

The eks-connector.yaml file

Question 2

A Sysops administrator needs to configure automatic rotation for Amazon RDS database credentials.The credentials must rotate every 30 days. The solution must integrate with Amazon RDS.Which solution will meet these requirements with the LEAST operational overhead?

Accepted Answer

Store the credentials in AWS Secrets Manager. Configure automatic rotation with a rotation interval of 30 days.

Answer

Store the credentials in AWS Systems Manager Parameter Store as a secure string. Configure automatic rotation with a rotation interval of 30 days.

Answer

Store the credentials in a file in an Amazon S3 bucket. Deploy an AWS Lambda function to automatically rotate the credentials every 30 days.

Answer

Store the credentials in AWS Secrets Manager. Deploy an AWS Lambda function to automatically rotate the credentials every 30 days.

Question 3

A company has an application that runs only on Amazon EC2 Spot Instances. The instances run in an Amazon EC2 Auto Scaling group with scheduled scaling actions. However, the capacity does not always increase at the scheduled times, and instances terminate many times a day. A Sysops administrator must ensure that the instances launch on time and have fewer interruptions. Which action will meet these requirements?

Accepted Answer

Specify the capacity-optimized allocation strategy for Spot Instances. Add more instance types to the Auto Scaling group.

Answer

Specify the capacity-optimized allocation strategy for Spot Instances. Increase the size of the instances in the Auto Scaling group.

Answer

Specify the lowest-price allocation strategy for Spot Instances. Add more instance types to the Auto Scaling group.

Answer

Specify the lowest-price allocation strategy for Spot Instances. Increase the size of the instances in the Auto Scaling group.

Question 4

A company stores its data in an Amazon S3 bucket. The company is required to classify the data and find any sensitive personal information in its S3 files. Which solution will meet these requirements?

Accepted Answer

Enable Amazon Macie. Create a discovery job that uses the managed data identifier.

Answer

Create an AWS Config rule to discover sensitive personal information in the S3 files and mark them as noncompliant.

Answer

Create an S3 event-driven artificial intelligence/machine learning (AI/ML) pipeline to classify sensitive personal information by using Amazon Recognition.

Answer

Enable Amazon GuardDuty. Configure S3 protection to monitor all data inside Amazon S3.

Question 5

A company has an application that customers use to search for records on a website. The application's data is stored in an Amazon Aurora DB cluster. The application's usage varies by season and by day of the week. The website's popularity is increasing, and the website is experiencing slower performance because of increased load on the DB cluster during periods of peak activity. The application logs show that the performance issues occur when users are searching for information. The same search is rarely performed multiple times.A SysOps administrator must improve the performance of the platform by using a solution that maximizes resource efficiency. Which solution will meet these requirements?

Accepted Answer

Deploy an Aurora Replica for the DB cluster. Modify the application to use the reader endpoint for search operations. Use Aurora Auto Scaling to scale the number of replicas based on load. Most Voted

Answer

Deploy an Amazon ElastiCache for Redis cluster in front of the DB cluster. Modify the application to check the cache before the application issues new queries to the database. Add the results of any queries to the cache.

Answer

Use Provisioned IOPS on the storage volumes that support the DB cluster to improve performance sufficiently to support the peak load on the application.

Answer

Increase the instance size in the DB cluster to a size that is sufficient to support the peak load on the application. Use Aurora Auto Scaling to scale the instance size based on load.

Question 6

A company hosts a web application on an Amazon EC2 instance. The web server logs are published to Amazon CloudWatch Logs. The log events have the same structure and include the HTTP response codes that are associated with the user requests. The company needs to monitor the number of times that the web server returns an HTTP 404 response. What is the MOST operationally efficient solution that meets these requirements?

Accepted Answer

Create a CloudWatch Logs metric filter that counts the number of times that the web server returns an HTTP 404 response.

Answer

Create a CloudWatch Logs subscription filter that counts the number of times that the web server returns an HTTP 404 response.

Answer

Create an AWS Lambda function that runs a CloudWatch Logs Insights query that counts the number of 404 codes in the log events during the past hour.

Answer

Create a script that runs a CloudWatch Logs Insights query that counts the number of 404 codes in the log events during the past hour.

Question 7

A Sysops administrator has created an Amazon EC2 instance using an AWS CloudFormation template in the us-east-I Region. The administrator finds that this template has failed to create an EC2 instance in the us-west-2 Region. What is one cause for this failure?

Accepted Answer

The Amazon Machine Image (AMI) ID referenced in the CloudFormation template could not be found in the us-west-2 Region.

Answer

Resource tags defined in the CloudFormation template are specific to the us-east-I Region.

Answer

The cfn-init script did not run during resource provisioning in the us-west-2 Region.

Answer

The IAM user was not created in the specified Region.

Question 8

A company plans to deploy a database on an Amazon Aurora MySQL DB cluster. The database will store data for a demonstration environment. The data must be reset on a daily basis. What is the MOST operationally efficient solution that meets these requirements?

Accepted Answer

Set the DB cluster backup retention period to 2 days. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function on a daily basis. Configure the function to restore the DB cluster to a point in time and then delete the previous DB cluster.

Answer

Create a manual snapshot of the DB cluster after the data has been populated. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function on a daily basis. Configure the function to restore the snapshot and then delete the previous DB cluster.

Answer

Enable the Backtrack feature during the creation of the DB cluster. Specify a target backtrack window of 48 hours. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function on a daily basis. Configure the function to perform a backtrack operation.

Answer

Export a manual snapshot of the DB cluster to an Amazon S3 bucket after the data has been populated. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function on a daily basis. Configure the function to restore the snapshot from Amazon S3.

Question 9

A company has a memory-intensive application that runs on a fleet of Amazon EC2 instances behind an Elastic Load Balancer (ELB). The instances run in an Auto Scaling group. A Sysops administrator must ensure that the application can scale based on the number of users that connect to the application. Which solution will meet these requirements?

Accepted Answer

Create a scaling policy that will scale the application based on the ActiveConnectionCount Amazon CloudWatch metric that is generated from the ELB.

Answer

Create a scaling policy that will scale the application based on the mem used Amazon CloudWatch metric that is generated from the ELB.

Answer

Create a scheduled scaling policy to increase the number of EC2 instances in the Auto Scaling group to support additional connections.

Answer

Create and deploy a script on the ELB to expose the number of connected users as a custom Amazon CloudWatch metric. Create a scaling policy that uses the metric.

Question 10

A company is using Amazon CloudFront to serve static content for its web application to its users.The CloudFront distribution uses an existing on-premises website as a custom origin.The company requires the use of TLS between CloudFront and the origin server. This configuration has worked as expected for several months. However, users are now experiencing HTTP 502 (Bad Gateway) errors when they view webpages that include content from the CloudFront distribution.What should a SysOps administrator do to resolve this problem?

Accepted Answer

Examine the expiration date on the certificate on the origin site. Validate that the certificate has not expired. Replace the certificate if necessary.

Answer

Examine the hostname on the certificate on the origin site. Validate that the hostname matches one of the hostnames on the CloudFront distribution. Replace the certificate if necessary.

Answer

Examine the firewall rules that are associated with the origin server. Validate that port 443 is open for inbound traffic from the internet. Create an inbound rule if necessary.

Answer

Examine the network ACL rules that are associated with the CloudFront distribution. Validate that port 443 is open for outbound traffic to the origin server. Create an outbound rule if necessary.

Question 11

A company runs hundreds of Amazon EC2 instances in a single AWS Region. Each EC2 instance has two attached 1 GiB General Purpose SSD (gp2) Amazon Elastic Block Store (Amazon EBS) volumes. A critical workload is using all the available IOPS capacity on the EBS volumes.According to company policy, the company cannot change instance types or EBS volume types without completing lengthy acceptance tests to validate that the company's applications will function properly. A SysOps administrator needs to increase the I/O performance of the EBS volumes as quickly as possible. Which action should the SysOps administrator take to meet these requirements?

Accepted Answer

Increase the size of the 1 GiB EBS volumes.

Answer

Add two additional elastic network interfaces on each EC2 instance.

Answer

Turn on Transfer Acceleration on the EBS volumes in the Region.

Answer

Add all the EC2 instances to a cluster placement group.

Question 12

A company is implementing a monitoring solution that is based on machine learning. The monitoring solution consumes Amazon EventBridge (Amazon CloudWatch Events) events that are generated by Amazon EC2 Auto Scaling. The monitoring solution provides detection of anomalous behavior such as unanticipated scaling events and is configured as an EventBridge (CloudWatch Events) API destination.During initial testing, the company discovers that the monitoring solution is not receiving events. However, Amazon CloudWatch is showing that the EventBridge (CloudWatch Events) rule is being invoked. A SysOps administrator must implement a solution to retrieve client error details to help resolve this issue. Which solution will meet these requirements with the LEAST operational effort?

Accepted Answer

Create an EventBridge (CloudWatch Events) archive for the event pattern to replay the events.Increase the logging on the monitoring solution. Use replay to invoke the monitoring solution.Examine the error details.

Answer

Add an Amazon Simple Queue Service (Amazon SQS) standard queue as a dead-letter queue for the target. Process the messages in the dead-letter queue to retrieve error details.

Answer

Create a second EventBridge (CloudWatch Events) rule for the same event pattern to target an AWS Lambda function. Configure the Lambda function to invoke the monitoring solution and to record the results to Amazon CloudWatch Logs. Examine the errors in the logs.

Answer

Configure the EventBridge (CloudWatch Events) rule to send error messages to an Amazon Simple Notification Service (Amazon SNS) topic.

Question 13

A company is storing backups in an Amazon S3 bucket. The backups must not be deleted for at least 3 months after the backups are created. What should a SysOps administrator do to meet this requirement?

Accepted Answer

Enable S3 Object Lock on a new S3 bucket in compliance mode. Place all backups in the new S3 bucket with a retention period of 3 months.

Answer

Configure an IAM policy that denies the s3:DeleteObject action for all users. Three months after an object is written, remove the policy.

Answer

Enable S3 Versioning on the existing S3 bucket. Configure S3 Lifecycle rules to protect the backups.

Answer

Enable S3 Object Lock on a new S3 bucket in governance mode. Place all backups in the new S3 bucket with a retention period of 3 months.

Question 14

A SysOps administrator needs to track the costs of data transfer between AWS Regions. The SysOps administrator must implement a solution to send alerts to an email distribution list when transfer costs reach 75% of a specific threshold.What should the SysOps administrator do to meet these requirements?

Accepted Answer

Create an Amazon CloudWatch billing alarm to detect when costs reach 75% of the threshold.Configure the alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the email distribution list to the topic.

Answer

Create an AWS Cost and Usage Report. Analyze the results in Amazon Athena. Configure an alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic when costs reach 75% of the threshold. Subscribe the email distribution list to the topic.

Answer

Use AWS Budgets to create a cost budget for data transfer costs. Set an alert at 75% of the budgeted amount. Configure the budget to send a notification to the email distribution list when costs reach 75% of the threshold.

Answer

Set up a VPC flow log. Set up a subscription filter to an AWS Lambda function to analyze data transfer. Configure the Lambda function to send a notification to the email distribution list when costs reach 75% of the threshold.

Question 15

A company needs to archive all audit logs for 10 years. The company must protect the logs from any future edits. Which solution will meet these requirements?

Accepted Answer

Store the data in an Amazon S3 Glacier vault. Configure a vault lock policy for write-once, readmany (WORM) access.

Answer

Store the data in an Amazon Elastic Block Store (Amazon EBS) volume. Configure AWS Key Management Service (AWS KMS) encryption.

Answer

Store the data in Amazon S3 Standard-Infrequent Access (S3 Standard-IA). Configure server-side encryption.

Answer

Store the data in Amazon S3 Standard-Infrequent Access (S3 Standard-IA). Configure multi-factor authentication (MFA).

Question 16

A company's AWS Lambda function is experiencing performance issues. The Lambda function performs many CPU-intensive operations. The Lambda function is not running fast enough and is creating bottlenecks in the system.What should a SysOps administrator do to resolve this issue?

Accepted Answer

Increase the amount of memory for the Lambda function.

Answer

In the CPU launch options for the Lambda function, activate hyperthreading.

Answer

Turn off the AWS managed encryption.

Answer

Load the required code into a custom layer.

Question 17

A company is attempting to manage its costs in the AWS Cloud. A SysOps administrator needs specific company-defined tags that are assigned to resources to appear on the billing report. What should the SysOps administrator do to meet this requirement?

Accepted Answer

Activate the tags as user-defined cost allocation tags.

Answer

Activate the tags as AWS generated cost allocation tags.

Answer

Create a new cost category. Select the account billing dimension.

Answer

Create a new AWS Cost and Usage Report. Include the resource IDs.

Question 18

A company's application currently uses an IAM role that allows all access to all AWS services. A SysOps administrator must ensure that the company's IAM policies allow only the permissions that the application requires.How can the SysOps administrator create a policy to meet this requirement?

Accepted Answer

Turn on AWS CloudTrail. Generate a policy by using AWS Identity and Access Management Access Analyzer.

Answer

Turn on AWS CloudTrail. Generate a policy by using AWS Security Hub.

Answer

Turn on Amazon EventBridge (Amazon CloudWatch Events). Generate a policy by using AWS Identity and Access Management Access Analyzer.

Answer

Use the AWS CLI to run the get-generated-policy command in AWS Identity and Access Management Access Analyzer.

Question 19

A company updates its security policy to clarify cloud hosting arrangements for regulated workloads. Workloads that are identified as sensitive must run on hardware that is not shared with other customers or with other AWS accounts within the company. Which solution will ensure compliance with this policy?

Accepted Answer

Deploy workloads only to Dedicated Hosts.

Answer

Deploy workloads only to Dedicated Instances.

Answer

Deploy workloads only to Reserved Instances.

Answer

Place all instances in a dedicated placement group.

Question 20

A company needs to implement a managed file system to host Windows file shares for users on premises. Resources in the AWS Cloud also need access to the data on these file shares. A SysOps administrator needs to present the user file shares on premises and make the user file shares available on AWS with minimum latency. What should the SysOps administrator do to meet these requirements?

Accepted Answer

Set up an Amazon FSx File Gateway.

Answer

Set up an Amazon S3 File Gateway.

Answer

Set up an AWS Direct Connect connection.

Answer

Use AWS DataSync to automate data transfers between the existing file servers and AWS.

Question 21

A company is hosting applications on Amazon EC2 instances. The company is hosting a database on an Amazon RDS for PostgreSQL DB instance. The company requires all connections to the DB instance to be encrypted. What should a SysOps administrator do to meet this requirement?

Accepted Answer

Enforce SSL connections to the database by using a custom parameter group.

Answer

Allow SSL connections to the database by using an inbound security group rule.

Answer

Encrypt the database by using an AWS Key Management Service (AWS KMS) encryption key.

Answer

Patch the database with SSL/TLS by using a custom PostgreSQL extension.

Question 22

A company recently purchased Savings Plans. The company wants to receive email notification when the company's utilization drops below 90% for a given day. Which solution will meet this requirement?

Accepted Answer

Use AWS Budgets to create a Savings Plans budget to track the daily utilization of the Savings Plans. Configure an Amazon Simple Notification Service (Amazon SNS) topic for email notification when the utilization drops below 90% for a given day.

Answer

Create an Amazon CloudWatch alarm to monitor the Savings Plan check in AWS Trusted Advisor.Configure an Amazon Simple Queue Service (Amazon SQS) queue for email notification when the utilization drops below 90% for a given day.

Answer

Create an Amazon CloudWatch alarm to monitor the SavingsPlansUtilization metric under the AWS/SavingsPlans namespace in CloudWatch. Configure an Amazon Simple Queue Service (Amazon SQS) queue for email notification when the utilization drops below 90% for a given day.

Answer

Create a Savings Plans alert to monitor the daily utilization of the Savings Plans. Configure an Amazon Simple Notification Service (Amazon SNS) topic for email notification when the utilization drops below 90% for a given day.

Question 23

A SysOps administrator receives an alert from Amazon GuardDuty about suspicious network activity on an Amazon EC2 instance. The GuardDuty finding lists a new external IP address as a traffic destination. The SysOps administrator does not recognize the external IP address. The SysOps administrator must block traffic to the external IP address that GuardDuty identified. Which solution will meet this requirement?

Accepted Answer

Create a network ACL. Add an outbound deny rule for traffic to the external IP address.

Answer

Create a new security group to block traffic to the external IP address. Assign the new security group to the EC2 instance.

Answer

Use VPC flow logs with Amazon Athena to block traffic to the external IP address.

Answer

Create a new security group to block traffic to the external IP address. Assign the new security group to the entire VPC.

Question 24

A company's reporting job that used to run in 15 minutes is now taking an hour to run. An application generates the reports. The application runs on Amazon EC2 instances and extracts data from an Amazon RDS for MySQL database. A SysOps administrator checks the Amazon CloudWatch dashboard for the RDS instance and notices that the Read IOPS metrics are high, even when the reports are not running. The SysOps administrator needs to improve the performance and the availability of the RDS instance.Which solution will meet these requirements?

Accepted Answer

Deploy an RDS read replica. Update the reporting job to query the reader endpoint.

Answer

Configure an Amazon ElastiCache cluster in front of the RDS instance. Update the reporting job to query the ElastiCache cluster.

Answer

Create an Amazon CloudFront distribution. Set the RDS instance as the origin. Update the reporting job to query the CloudFront distribution.

Answer

Increase the size of the RDS instance.

Question 25

A company's SysOps administrator regularly checks the AWS Personal Health Dashboard in each of the company's accounts. The accounts are part of an organization in AWS Organizations. The company recently added 10 more accounts to the organization. The SysOps administrator must consolidate the alerts from each account's Personal Health Dashboard. Which solution will meet this requirement with the LEAST amount of effort?

Accepted Answer

Enable organizational view in AWS Health.

Answer

Configure the Personal Health Dashboard in each account to forward events to a central AWS CloudTrail log.

Answer

Create an AWS Lambda function to query the AWS Health API and to write all events to an Amazon DynamoDB table.

Answer

Use the AWS Health API to write events to an Amazon DynamoDB table.

Question 26

A company runs an application on Amazon EC2 instances. The EC2 instances are in an Auto Scaling group and run behind an Application Load Balancer (ALB). The application experiences errors when total requests exceed 100 requests per second. A SysOps administrator must collect information about total requests for a 2-week period to determine when requests exceeded this threshold. What should the SysOps administrator do to collect this data?

Accepted Answer

Use the ALB's RequestCount metric. Configure a time range of 2 weeks and a period of 1 minute.Examine the chart to determine peak traffic times and volumes.

Answer

Use Amazon CloudWatch metric math to generate a sum of request counts for all the EC2 instances over a 2-week period. Sort by a 1-minute interval.

Answer

Create Amazon CloudWatch custom metrics on the EC2 launch configuration templates to create aggregated request metrics across all the EC2 instances.

Answer

Create an Amazon EventBridge (Amazon CloudWatch Events) rule. Configure an EC2 event matching pattern that creates a metric that is based on EC2 requests. Display the data in a graph.

Question 27

A company recently migrated its application to a VPC on AWS. An AWS Site-to-Site VPN connection connects the company's on-premises network to the VPC. The application retrieves customer data from another system that resides on premises. The application uses an on-premises DNS server to resolve domain records. After the migration, the application is not able to connect to the customer data because of name resolution errors.Which solution will give the application the ability to resolve the internal domain names?

Accepted Answer

Create an Amazon Route 53 Resolver outbound endpoint. Configure the outbound endpoint to forward DNS queries against the on-premises domain to the on-premises DNS server.

Answer

Launch EC2 instances in the VPC. On the EC2 instances, deploy a custom DNS forwarder that forwards all DNS requests to the on-premises DNS server. Create an Amazon Route 53 private hosted zone that uses the EC2 instances for name servers.

Answer

Set up two AWS Direct Connect connections between the AWS environment and the on-premises network. Set up a link aggregation group (LAG) that includes the two connections. Change the VPC resolver address to point to the on-premises DNS server.

Answer

Create an Amazon Route 53 public hosted zone for the on-premises domain. Configure the network ACLs to forward DNS requests against the on-premises domain to the Route 53 public hosted zone.

Question 28

A SysOps administrator creates two VPCs, VPC1 and VPC2, in a company's AWS account The SysOps administrator deploys a Linux Amazon EC2 instance in VPC1 and deploys an Amazon RDS for MySQL DB instance in VPC2. The DB instance is deployed in a private subnet. An application that runs on the EC2 instance needs to connect to the database. What should the SysOps administrator do to give the EC2 instance the ability to connect to the database?

Accepted Answer

Configure VPC peering between the two VPCs.

Answer

Enter the DB instance connection string into the VPC1 route table.

Answer

Add the same IPv4 CIDR range for both VPCs.

Answer

Connect to the DB instance by using the DB instance's public IP address.

Question 29

A company needs to take an inventory of applications that are running on multiple Amazon EC2 instances. The company has configured users and roles with the appropriate permissions for AWS Systems Manager. An updated version of Systems Manager Agent has been installed and is running \on every instance. While configuring an inventory collection, a SysOps administrator discovers that not all the instances in a single subnet are managed by Systems Manager.What must the SysOps administrator do to fix this issue?

Accepted Answer

Ensure that all the EC2 instances have an instance profile with Systems Manager access.

Answer

Ensure that all the EC2 instances have the correct tags for Systems Manager access.

Answer

Configure AWS Identity and Access Management Access Analyzer to determine and automatically remediate the issue.

Answer

Configure Systems Manager to use an interface VPC endpoint.

Question 30

A company hosts an application on an Amazon EC2 instance in a single AWS Region. The application requires support for non-HTTP TCP traffic and HTTP traffic. The company wants to deliver content with low latency by leveraging the AWS network. The company also wants to implement an Auto Scaling group with an Elastic Load Balancer. How should a SysOps administrator meet these requirements?

Accepted Answer

Create an Auto Scaling group with a Network Load Balancer (NLB). Add an accelerator with AWS Global Accelerator with the NLB as an endpoint.

Answer

Create an Auto Scaling group with an Application Load Balancer (ALB). Add an Amazon CloudFront distribution with the ALB as the origin.

Answer

Create an Auto Scaling group with an Application Load Balancer (ALB). Add an accelerator with AWS Global Accelerator with the ALB as an endpoint.

Answer

Create an Auto Scaling group with a Network Load Balancer (NLB). Add an Amazon CloudFront distribution with the NLB as the origin.

Question 31

A SysOps administrator is managing a Memcached cluster in Amazon ElastiCache. The cluster has been heavily used recently, and the administrator wants to use a larger instance type with more memory.What should the administrator use to make this change?

Accepted Answer

Use the ModifycacheCluster API and specify a new cacheNodeType.

Answer

Use the createcacheciuster API and specify a new cacheNodeType.

Answer

Use the Modi fyCacheParameterGcoup API and specify a new CacheNodeType.

Answer

Use the Rebootcacheclustcr API and specify a new CacheNodeType.

Question 32

A SysOps administrator is examining the following AWS CloudFormation template:<img alt="Amazon SOA-C02 image Question 272 8307 09162024010006000000"   width="487" height="245" src="https://examgecko.com/getfile/18d07f84-1fc6-4e80-9df1-e6d2f6b983a1">Why will the stack creation fail?

Accepted Answer

The PnvateDnsName cannot be set from a CloudFormation template.

Answer

The Outputs section of the Cloud Formation template was omitted.

Answer

The Parameters section of the CtoudFormation template was omitted.

Answer

The VPC was not specified in the CloudFormation template.

Question 33

A SysOps administrator wants to securely share an object from a private Amazon S3 bucket with a group of users who do not have an AWS account. What is the MOST operationally efficient solution that will meet this requirement?

Accepted Answer

Generate a presigned URL for the object. Share the URL with the users.

Answer

Attach an S3 bucket policy that only allows object downloads from the users' IP addresses.

Answer

Create an 1AM role that has access to the object. Instruct the users to assume the role.

Answer

Create an 1AM user that has access to the object. Share the credentials with the users.

Question 34

A company's social media application has strict data residency requirements. The company wants to use Amazon Route 53 to provide the application with DNS services. A SysOps administrator must implement a solution that routes requests to a defined list of AWS Regions. The routing must be based on the user's location. Which solution will meet these requirements?

Accepted Answer

Configure a Route 53 geolocation routing policy.

Answer

Configure a Route 53 latency routing policy.

Answer

Configure a Route 53 multivalue answer routing policy.

Answer

Configure a Route 53 IP-based routing policy.

Question 35

A company runs its applications on a large number of Amazon EC2 instances. A SysOps administrator must implement a solution to notify the operations team whenever an EC2 instance slate changes.What is the MOST operationally efficient solution that meets these requirements?

Accepted Answer

Create an Amazon EventBridge event rule that captures EC2 instance state changes. Set an Amazon Simple Notification Service (Amazon SNS) topic as the target.

Answer

Create a script that captures instance state changes and publishes a notification to an Amazon Simple Notification Service (Amazon SNS) topic. Use AWS Systems Manager Run Command to run the script on all EC2 instances.

Answer

Create an Amazon EventBridge event rule that captures EC2 instance state changes. Set as the target an AWS Lambda function that publishes a notification to an Amazon Simple Notification Service (Amazon SNS) topic.

Answer

Create an AWS Config custom rule that evaluates instance state changes with automatic remediation. Use the rule to invoke an AWS Lambda function that publishes a notification to an Amazon Simple Notification Service (Amazon SNS) topic.

Question 36

A company is running Amazon EC2 On-Demand Instances in an Auto Scaling group. The instances process messages from an Amazon Simple Queue Service (Amazon SQS) queue. The Auto Scaling group is set to scale based on the number of messages in the queue. Messages can take up to 12 hours to process completely. A SysOps administrator must ensure that instances are not interrupted during message processing.What should the SysOps administrator do to meet these requirements?

Accepted Answer

Enable instance scale-in protection for the specific instance in the Auto Scaling group at the start of message processing by calling the Amazon EC2 Auto Scaling API from the processing script. Disable instance scale-in protection after message processing is complete by calling the Amazon EC2 Auto Scaling API from the processing script.

Answer

Set the Auto Scaling group's termination policy to OldestInstance.

Answer

Set the Auto Scaling group's termination policy to OldestLaunchConfiguration.

Answer

Suspend the Launch and Terminate scaling processes for the specific instance in the Auto Scaling group at the start of message processing by calling the Amazon EC2 Auto Scaling API from the processing script. Resume the scaling processes after message processing is complete by calling the Amazon EC2 Auto Scaling API from the processing script.

Question 37

A company is managing a website with a global user base hosted on Amazon EC2 with an Application Load Balancer (ALB). To reduce the load on the web servers, a SysOps administrator configures an Amazon CloudFront distribution with the ALB as the origin. After a week of monitoring the solution, the administrator notices that requests are still being served by the ALB and there is no change in the web server load.What are possible causes for this problem? (Choose two.)

Accepted Answer

The DNS is still pointing to the ALB instead of the CloudFront distribution.

Accepted Answer

The default, minimum, and maximum Time to Live (TTL) are set to 0 seconds on the CloudFront distribution.

Answer

CloudFront does not have the ALB configured as the origin access identity.

Answer

The ALB security group is not permitting inbound traffic from CloudFront.

Answer

The target groups associated with the ALB are configured for sticky sessions.

Question 38

A company has migrated its application to AWS. The company will host the application on Amazon EC2 instances of multiple instance families.During initial testing, a SysOps administrator identifies performance issues on selected EC2 instances. The company has a strict budget allocation policy, so theSysOps administrator must use the right resource types with the performance characteristics to match the workload.What should the SysOps administrator do to meet this requirement?

Accepted Answer

Review and take action on AWS Compute Optimizer recommendations. Purchase Compute Savings Plans to reduce the cost that is required to run the compute resources. Most Voted

Answer

Purchase regional Reserved Instances (RIs) for immediate cost savings. Review and take action on the EC2 rightsizing recommendations in Cost Explorer. Exchange the RIs for the optimal instance family after rightsizing.

Answer

Purchase zonal Reserved Instances (RIs) for the existing instances. Monitor the RI utilization in the AWS Billing and Cost Management console. Make adjustments to instance sizes to optimize utilization.

Answer

Review resource utilization metrics in the AWS Cost and Usage Report. Rightsize the EC2 instances. Create On-Demand Capacity Reservations for the rightsized resources.

Question 39

A Sysops administrator wants to share a copy of a production database with a migration account. The production database is hosted on an Amazon RDS DB instance and is encrypted at rest with an AWS Key Management Service (AWS KMS) key that has an alias ofWhat must the Sysops administrator do to meet these requirements with the LEAST administrative overhead?

Accepted Answer

Take a snapshot of the RDS DB instance in the production account. Amend the KMS key policy of the production-rds-key KMS key to give access to the migration account's root user. Share the snapshot with the migration account.

Answer

Create an RDS read replica in the migration account. Configure the KMS key policy to replicate the production-rds-key KMS key to the migration account.

Answer

Take a snapshot of the RDS DB instance in the production account. Share the snapshot with the migration account. In the migration account, create a new KMS key that has an identical alias.

Answer

Use native database toolsets to export the RDS DB instance to Amazon S3. Create an S3 bucket and an S3 bucket policy for cross-account access between the production account and the migration account. Use native database toolsets to import the database from Amazon S3 to a new RDS DB instance.

Question 40

A company manages its production applications across several AWS accounts. The company hosts the production applications on Amazon EC2 instances that run AmazonLinux 2. The EC2 instances are spread across multiple VPCs. Each VPC uses its own Amazon Route 53 private hosted zone for private DNS.A VPC from Account A needs to resolve private DNS records from a private hosted zone that is associated with a different VPC in Account B.What should a SysOps administrator do to meet these requirements?

Accepted Answer

In Account B, use the AWS CLI to create a VPC association authorization. When the association is created, use the AWS CLI in Account A to associate the VPC from Account B with the private hosted zone in Account A.

Answer

In Account A, create an AWS Systems Manager document that updates the /etc/resolv.conf file across all EC2 instances to point to the AWS provided default DNS resolver for the VPC in Account B.

Answer

In Account A, create an AWS CloudFormation template that associates the private hosted zone from Account B with the private hosted zone in Account A.

Answer

In Account A, use the AWS CLI to create a VPC association authorization. When the association is created, use the AWS CLI in Account B to associate the VPC from Account A with the private hosted zone in Account B.

Amazon SOA-C02 Practice Test 7

Amazon SOA-C02 Practice Tests