ExamGecko
Home Home / Amazon / SOA-C02

Amazon SOA-C02 Practice Test - Questions Answers, Page 3

Question list
Search
Search

List of questions

Search

Related questions











An existing, deployed solution uses Amazon EC2 instances with Amazon EBS General Purpose SSD volumes, an Amazon RDS PostgreSQL database, an Amazon EFS file system, and static objects stored in an Amazon S3 bucket. The Security team now mandates that at-rest encryption be turned on immediately for all aspects of the application, without creating new resources and without any downtime. To satisfy the requirements, which one of these services can the SysOps administrator enable at-rest encryption on?

A.
EBS General Purpose SSD volumes
A.
EBS General Purpose SSD volumes
Answers
B.
RDS PostgreSQL database
B.
RDS PostgreSQL database
Answers
C.
Amazon EFS file systems
C.
Amazon EFS file systems
Answers
D.
S3 objects within a bucket
D.
S3 objects within a bucket
Answers
Suggested answer: B

A SysOps administrator notices a scale-up event for an Amazon EC2 Auto Scaling group. Amazon CloudWatch shows a spike in the RequestCount metric for the associated Application Load Balancer. The administrator would like to know the IP addresses for the source of the requests.

Where can the administrator find this information?

A.
Auto Scaling logs
A.
Auto Scaling logs
Answers
B.
AWS CloudTrail logs
B.
AWS CloudTrail logs
Answers
C.
EC2 instance logs
C.
EC2 instance logs
Answers
D.
Elastic Load Balancer access logs
D.
Elastic Load Balancer access logs
Answers
Suggested answer: B

Explanation:

Reference: https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-dg.pdf page 253

A company is running an application on premises and wants to use AWS for data backup. All of the data must be available locally. The backup application can write only to block-based storage that is compatible with the Portable Operating System Interface (POSIX).

Which backup solution will meet these requirements?

A.
Configure the backup software to use Amazon S3 as the target for the data backups.
A.
Configure the backup software to use Amazon S3 as the target for the data backups.
Answers
B.
Configure the backup software to use Amazon S3 Glacier as the target for the data backups.
B.
Configure the backup software to use Amazon S3 Glacier as the target for the data backups.
Answers
C.
Use AWS Storage Gateway, and configure it to use gateway-cached volumes.
C.
Use AWS Storage Gateway, and configure it to use gateway-cached volumes.
Answers
D.
Use AWS Storage Gateway, and configure it to use gateway-stored volumes.
D.
Use AWS Storage Gateway, and configure it to use gateway-stored volumes.
Answers
Suggested answer: D

A company has an Amazon RDS DB instance. The company wants to implement a caching service while maintaining high availability. Which combination of actions will meet these requirements? (Choose two.)

A.
Add Auto Discovery to the data store.
A.
Add Auto Discovery to the data store.
Answers
B.
Create an Amazon ElastiCache for Memcached data store.
B.
Create an Amazon ElastiCache for Memcached data store.
Answers
C.
Create an Amazon ElastiCache for Redis data store.
C.
Create an Amazon ElastiCache for Redis data store.
Answers
D.
Enable Multi-AZ for the data store.
D.
Enable Multi-AZ for the data store.
Answers
E.
Enable Multi-threading for the data store.
E.
Enable Multi-threading for the data store.
Answers
Suggested answer: A, D

A SysOps administrator must create a solution that immediately notifies software developers if an AWS Lambda function experiences an error. Which solution will meet this requirement?

A.
Create an Amazon Simple Notification Service (Amazon SNS) topic with an email subscription for each developer. Create an Amazon CloudWatch alarm by using the Errors metric and the Lambda function name as a dimension. Configure the alarm to send a notification to the SNS topic when the alarm state reaches ALARM.
A.
Create an Amazon Simple Notification Service (Amazon SNS) topic with an email subscription for each developer. Create an Amazon CloudWatch alarm by using the Errors metric and the Lambda function name as a dimension. Configure the alarm to send a notification to the SNS topic when the alarm state reaches ALARM.
Answers
B.
Create an Amazon Simple Notification Service (Amazon SNS) topic with a mobile subscription for each developer. Create an Amazon EventBridge (Amazon CloudWatch Events) alarm by using the LambdaError as the event pattern and the SNStopic name as a resource. Configure the alarm to send a notification to the SNS topic when the alarm state reaches ALARM.
B.
Create an Amazon Simple Notification Service (Amazon SNS) topic with a mobile subscription for each developer. Create an Amazon EventBridge (Amazon CloudWatch Events) alarm by using the LambdaError as the event pattern and the SNStopic name as a resource. Configure the alarm to send a notification to the SNS topic when the alarm state reaches ALARM.
Answers
C.
Verify each developer email address in Amazon Simple Email Service (Amazon SES). Create an Amazon CloudWatch rule by using the LambdaError metric and developer email addresses as dimensions. Configure the rule to send an email through Amazon SES when the rule state reaches ALARM.
C.
Verify each developer email address in Amazon Simple Email Service (Amazon SES). Create an Amazon CloudWatch rule by using the LambdaError metric and developer email addresses as dimensions. Configure the rule to send an email through Amazon SES when the rule state reaches ALARM.
Answers
D.
Verify each developer mobile phone in Amazon Simple Email Service (Amazon SES). Create an Amazon EventBridge (Amazon CloudWatch Events) rule by using Error as the event pattern and the Lambda function name as a resource. Configure the rule to send a push notification through Amazon SES when the rule state reaches ALARM.
D.
Verify each developer mobile phone in Amazon Simple Email Service (Amazon SES). Create an Amazon EventBridge (Amazon CloudWatch Events) rule by using Error as the event pattern and the Lambda function name as a resource. Configure the rule to send a push notification through Amazon SES when the rule state reaches ALARM.
Answers
Suggested answer: D

A large company is using AWS Organizations to manage its multi-account AWS environment. According to company policy, all users should have read-level access to a particular Amazon S3 bucket in a central account. The S3 bucket data should not be available outside the organization. A SysOps administrator must set up the permissions and add a bucket policy to the S3 bucket. Which parameters should be specified to accomplish this in the MOST efficient manner?

A.
Specify "*" as the principal and PrincipalOrgId as a condition.
A.
Specify "*" as the principal and PrincipalOrgId as a condition.
Answers
B.
Specify all account numbers as the principal.
B.
Specify all account numbers as the principal.
Answers
C.
Specify PrincipalOrgId as the principal.
C.
Specify PrincipalOrgId as the principal.
Answers
D.
Specify the organization's master account as the principal.
D.
Specify the organization's master account as the principal.
Answers
Suggested answer: A

Explanation:

Reference: https://aws.amazon.com/blogs/security/iam-share-aws-resources-groups-aws-accounts-aws-organizations/

A company is planning to host an application on a set of Amazon EC2 instances that are distributed across multiple Availability Zones. The application must be able to scale to millions of requests each second.

A SysOps administrator must design a solution to distribute the traffic to the EC2 instances. The solution must be optimized to handle sudden and volatile traffic patterns while using a single static IP address for each Availability Zone.

Which solution will meet these requirements?

A.
Amazon Simple Queue Service (Amazon SQS) queue
A.
Amazon Simple Queue Service (Amazon SQS) queue
Answers
B.
Application Load Balancer
B.
Application Load Balancer
Answers
C.
AWS Global Accelerator
C.
AWS Global Accelerator
Answers
D.
Network Load Balancer
D.
Network Load Balancer
Answers
Suggested answer: B

A company has a critical serverless application that uses multiple AWS Lambda functions. Each Lambda function generates 1 GB of log data daily in its own Amazon CloudWatch Logs log group. The company's security team asks for a count of application errors, grouped by type, across all of the log group.

What should a SysOps administrator do to meet this requirement?

A.
Perform a CloudWatch Logs Insights query that uses the stats command and count function.
A.
Perform a CloudWatch Logs Insights query that uses the stats command and count function.
Answers
B.
Perform a CloudWatch Logs search that uses the groupby keyword and count function.
B.
Perform a CloudWatch Logs search that uses the groupby keyword and count function.
Answers
C.
Perform an Amazon Athena query that uses the SELECT and GROUP BY keywords.
C.
Perform an Amazon Athena query that uses the SELECT and GROUP BY keywords.
Answers
D.
Perform an Amazon RDS query that uses the SELECT and GROUP BY keywords.
D.
Perform an Amazon RDS query that uses the SELECT and GROUP BY keywords.
Answers
Suggested answer: A

A company is running an application on a fleet of Amazon EC2 instances behind an Application Load Balancer (ALB). The EC2 instances are launched by an Auto Scaling group and are automatically registered in a target group. A SysOps administrator must set up a notification to alert application owners when targets fail health checks. What should the SysOps administrator do to meet these requirements?

A.
Create an Amazon CloudWatch alarm on the UnHealthyHostCount metric. Configure an action to send an Amazon Simple Notification Service (Amazon SNS) notification when the metric is greater than 0.
A.
Create an Amazon CloudWatch alarm on the UnHealthyHostCount metric. Configure an action to send an Amazon Simple Notification Service (Amazon SNS) notification when the metric is greater than 0.
Answers
B.
Configure an Amazon EC2 Auto Scaling custom lifecycle action to send an Amazon Simple Notification Service (Amazon SNS) notification when an instance is in the Pending: Wait state.
B.
Configure an Amazon EC2 Auto Scaling custom lifecycle action to send an Amazon Simple Notification Service (Amazon SNS) notification when an instance is in the Pending: Wait state.
Answers
C.
Update the Auto Scaling group. Configure an activity notification to send an Amazon Simple Notification Service (Amazon SNS) notification for the Unhealthy event type.
C.
Update the Auto Scaling group. Configure an activity notification to send an Amazon Simple Notification Service (Amazon SNS) notification for the Unhealthy event type.
Answers
D.
Update the ALB health check to send an Amazon Simple Notification Service (Amazon SNS) notification when an instance is unhealthy.
D.
Update the ALB health check to send an Amazon Simple Notification Service (Amazon SNS) notification when an instance is unhealthy.
Answers
Suggested answer: A

Explanation:

Reference: https://aws.amazon.com/blogs/networking-and-content-delivery/identifying-unhealthy-targets-of-elastic-loadbalancer/

A SysOps administrator is troubleshooting an AWS CloudFormation template whereby multiple Amazon EC2 instances are being created. The template is working in us-east-1, but it is failing in us-west-2 with the error code:

AMI [ami-12345678] does not exist

How should the Administrator ensure that the AWS CloudFormation template is working in every region?

A.
Copy the source region's Amazon Machine Image (AMI) to the destination region and assign it the same ID.
A.
Copy the source region's Amazon Machine Image (AMI) to the destination region and assign it the same ID.
Answers
B.
Edit the AWS CloudFormation template to specify the region code as part of the fully qualified AMI ID.
B.
Edit the AWS CloudFormation template to specify the region code as part of the fully qualified AMI ID.
Answers
C.
Edit the AWS CloudFormation template to offer a drop-down list of all AMIs to the user by using the AWS::EC2::AMI::ImageID control.
C.
Edit the AWS CloudFormation template to offer a drop-down list of all AMIs to the user by using the AWS::EC2::AMI::ImageID control.
Answers
D.
Modify the AWS CloudFormation template by including the AMI IDs in the "Mappings" section. Refer to the proper mapping within the template for the proper AMI ID.
D.
Modify the AWS CloudFormation template by including the AMI IDs in the "Mappings" section. Refer to the proper mapping within the template for the proper AMI ID.
Answers
Suggested answer: D
Total 425 questions
Go to page: of 43