ExamGecko
Home Home / Amazon / SOA-C02

Amazon SOA-C02 Practice Test - Questions Answers, Page 7

Question list
Search
Search

List of questions

Search

Related questions











A SysOps administrator has used AWS CloudFormation to deploy a serverless application into a production VPC. The application consists of an AWS Lambda function, an Amazon DynamoDB table, and an Amazon API Gateway API. The SysOps administrator must delete the AWS CloudFormation stack without deleting the DynamoDB table.

Which action should the SysOps administrator take before deleting the AWS CloudFormation stack?

A.
Add a Retain deletion policy to the DynamoDB resource in the AWS CloudFormation stack.
A.
Add a Retain deletion policy to the DynamoDB resource in the AWS CloudFormation stack.
Answers
B.
Add a Snapshot deletion policy to the DynamoDB resource in the AWS CloudFormation stack.
B.
Add a Snapshot deletion policy to the DynamoDB resource in the AWS CloudFormation stack.
Answers
C.
Enable termination protection on the AWS CloudFormation stack.
C.
Enable termination protection on the AWS CloudFormation stack.
Answers
D.
Update the application's IAM policy with a Deny statement for the dynamodb:DeleteTable action.
D.
Update the application's IAM policy with a Deny statement for the dynamodb:DeleteTable action.
Answers
Suggested answer: A

A company is running a serverless application on AWS Lambda. The application stores data in an Amazon RDS for MySQL DB instance. Usage has steadily increased, and recently there have been numerous "too many connections" errors when the Lambda function attempts to connect to the database. The company already has configured the database to use the maximum max_connections value that is possible. What should a SysOps administrator do to resolve these errors?

A.
Create a read replica of the database. Use Amazon Route 53 to create a weighted DNS record that contains both databases.
A.
Create a read replica of the database. Use Amazon Route 53 to create a weighted DNS record that contains both databases.
Answers
B.
Use Amazon RDS Proxy to create a proxy. Update the connection string in the Lambda function.
B.
Use Amazon RDS Proxy to create a proxy. Update the connection string in the Lambda function.
Answers
C.
Increase the value in the max_connect_errors parameter in the parameter group that the database uses.
C.
Increase the value in the max_connect_errors parameter in the parameter group that the database uses.
Answers
D.
Update the Lambda function's reserved concurrency to a higher value.
D.
Update the Lambda function's reserved concurrency to a higher value.
Answers
Suggested answer: A

A company has multiple Amazon EC2 instances that run a resource-intensive application in a development environment. A SysOps administrator is implementing a solution to stop these EC2 instances when they are not in use. Which solution will meet this requirement?

A.
Assess AWS CloudTrail logs to verify that there is no EC2 API activity. Invoke an AWS lambda function to stop the EC2 instances.
A.
Assess AWS CloudTrail logs to verify that there is no EC2 API activity. Invoke an AWS lambda function to stop the EC2 instances.
Answers
B.
Create an Amazon CloudWatch alarm to stop the EC2 instances when the average CPU utilization is lower than 5% for a 30-minute period.
B.
Create an Amazon CloudWatch alarm to stop the EC2 instances when the average CPU utilization is lower than 5% for a 30-minute period.
Answers
C.
Create an Amazon CloudWatch metric to stop the EC2 instances when the VolumeReadBytes metric is lower than 500 for a 30-minute period.
C.
Create an Amazon CloudWatch metric to stop the EC2 instances when the VolumeReadBytes metric is lower than 500 for a 30-minute period.
Answers
D.
Use AWS Config to invoke an AWS Lambda function to stop the EC2 instances based on resource configuration changes.
D.
Use AWS Config to invoke an AWS Lambda function to stop the EC2 instances based on resource configuration changes.
Answers
Suggested answer: A

A company uses Amazon Elasticsearch Service (Amazon ES) to analyze sales and customer usage data. Members of the company's geographically dispersed sales team are traveling. They need to log in to Kibana by using their existing corporate credentials that are stored in Active Directory. The company has deployed Active Directory Federation Services (AD FS) to enable authentication to cloud services. Which solution will meet these requirements?

A.
Configure Active Directory as an authentication provider in Amazon ES. Add the Active Directory server's domain name to Amazon ES. Configure Kibana to use Amazon ES authentication.
A.
Configure Active Directory as an authentication provider in Amazon ES. Add the Active Directory server's domain name to Amazon ES. Configure Kibana to use Amazon ES authentication.
Answers
B.
Deploy an Amazon Cognito user pool. Configure Active Directory as an external identity provider for the user pool. Enable Amazon Cognito authentication for Kibana on Amazon ES.
B.
Deploy an Amazon Cognito user pool. Configure Active Directory as an external identity provider for the user pool. Enable Amazon Cognito authentication for Kibana on Amazon ES.
Answers
C.
Enable Active Directory user authentication in Kibana. Create an IP-based custom domain access policy in Amazon ES that includes the Active Directory server's IP address.
C.
Enable Active Directory user authentication in Kibana. Create an IP-based custom domain access policy in Amazon ES that includes the Active Directory server's IP address.
Answers
D.
Establish a trust relationship with Kibana on the Active Directory server. Enable Active Directory user authentication in Kibana. Add the Active Directory server's IP address to Kibana.
D.
Establish a trust relationship with Kibana on the Active Directory server. Enable Active Directory user authentication in Kibana. Add the Active Directory server's IP address to Kibana.
Answers
Suggested answer: B

Explanation:

Reference: https://aws.amazon.com/blogs/security/how-to-enable-secure-access-to-kibana-using-aws-single-sign-on/

A company wants to track its expenditures for Amazon EC2 and Amazon RDS within AWS. The company decides to implement more rigorous tagging requirements for resources in its AWS accounts. A SysOps administrator needs to identify all noncompliant resources.

What is the MOST operationally efficient solution that meets these requirements?

A.
Create a rule in Amazon EventBridge (Amazon CloudWatch Events) that invokes a custom AWS Lambda function that will evaluate all created or updated resources for the specified tags.
A.
Create a rule in Amazon EventBridge (Amazon CloudWatch Events) that invokes a custom AWS Lambda function that will evaluate all created or updated resources for the specified tags.
Answers
B.
Create a rule in AWS Config that invokes a custom AWS Lambda function that will evaluate all resources for the specified tags.
B.
Create a rule in AWS Config that invokes a custom AWS Lambda function that will evaluate all resources for the specified tags.
Answers
C.
Create a rule in AWS Config with the required-tags managed rule to evaluate all resources for the specified tags.
C.
Create a rule in AWS Config with the required-tags managed rule to evaluate all resources for the specified tags.
Answers
D.
Create a rule in Amazon EventBridge (Amazon CloudWatch Events) with a managed rule to evaluate all created or updated resources for the specified tags.
D.
Create a rule in Amazon EventBridge (Amazon CloudWatch Events) with a managed rule to evaluate all created or updated resources for the specified tags.
Answers
Suggested answer: C

Explanation:

Reference: https://docs.aws.amazon.com/config/latest/developerguide/required-tags.html


A company has a stateless application that runs on four Amazon EC2 instances. The application requires four instances at all times to support all traffic. A SysOps administrator must design a highly available, fault-tolerant architecture that continually supports all traffic if one Availability Zone becomes unavailable.

Which configuration meets these requirements?

A.
Deploy two Auto Scaling groups in two Availability Zones with a minimum capacity of two instances in each group.
A.
Deploy two Auto Scaling groups in two Availability Zones with a minimum capacity of two instances in each group.
Answers
B.
Deploy an Auto Scaling group across two Availability Zones with a minimum capacity of four instances.
B.
Deploy an Auto Scaling group across two Availability Zones with a minimum capacity of four instances.
Answers
C.
Deploy an Auto Scaling group across three Availability Zones with a minimum capacity of four instances.
C.
Deploy an Auto Scaling group across three Availability Zones with a minimum capacity of four instances.
Answers
D.
Deploy an Auto Scaling group across three Availability Zones with a minimum capacity of six instances.
D.
Deploy an Auto Scaling group across three Availability Zones with a minimum capacity of six instances.
Answers
Suggested answer: C

The security team is concerned because the number of AWS Identity and Access Management (IAM) policies being used in the environment is increasing. The team tasked a SysOps administrator to report on the current number of IAM policies in use and the total available IAM policies.

Which AWS service should the administrator use to check how current IAM policy usage compares to current service limits?

A.
AWS Trusted Advisor
A.
AWS Trusted Advisor
Answers
B.
Amazon Inspector
B.
Amazon Inspector
Answers
C.
AWS Config
C.
AWS Config
Answers
D.
AWS Organizations
D.
AWS Organizations
Answers
Suggested answer: A

Explanation:

Reference: https://docs.aws.amazon.com/awssupport/latest/user/trusted-advisor-check-reference.html#iam-policies

A SysOps administrator is responsible for a legacy, CPU-heavy application. The application can only be scaled vertically. Currently, the application is deployed on a single t2. large Amazon EC2 instance. The system is showing 90% CPU usage and significant performance latency after a few minutes. What change should be made to alleviate the performance problem?

A.
Change the Amazon EBS volume to Provisioned IOPs.
A.
Change the Amazon EBS volume to Provisioned IOPs.
Answers
B.
Upgrade to a compute-optimized instance.
B.
Upgrade to a compute-optimized instance.
Answers
C.
Add additional t2.large instances to the application.
C.
Add additional t2.large instances to the application.
Answers
D.
Purchase Reserved Instances
D.
Purchase Reserved Instances
Answers
Suggested answer: B

A company has launched a social media website that gives users the ability to upload images directly to a centralized Amazon S3 bucket. The website is popular in areas that are geographically distant from the AWS Region where the S3 bucket is located. Users are reporting that uploads are slow. A SysOps administrator must improve the upload speed. What should the SysOps administrator do to meet these requirements?

A.
Create S3 access points in Regions that are closer to the users.
A.
Create S3 access points in Regions that are closer to the users.
Answers
B.
Create an accelerator in AWS Global Accelerator for the S3 bucket.
B.
Create an accelerator in AWS Global Accelerator for the S3 bucket.
Answers
C.
Enable S3 Transfer Acceleration on the S3 bucket.
C.
Enable S3 Transfer Acceleration on the S3 bucket.
Answers
D.
Enable cross-origin resource sharing (CORS) on the S3 bucket.
D.
Enable cross-origin resource sharing (CORS) on the S3 bucket.
Answers
Suggested answer: A

A company is testing Amazon Elasticsearch Service (Amazon ES) as a solution for analyzing system logs from a fleet of Amazon EC2 instances. During the test phase, the domain operates on a singlenode cluster. A SysOps administrator needs to transition the test domain into a highly available production-grade deployment.

Which Amazon ES configuration should the SysOps administrator use to meet this requirement?

A.
Use a cluster of four data nodes across two AWS Regions. Deploy four dedicated master nodes in each Region.
A.
Use a cluster of four data nodes across two AWS Regions. Deploy four dedicated master nodes in each Region.
Answers
B.
Use a cluster of six data nodes across three Availability Zones. Use three dedicated master nodes.
B.
Use a cluster of six data nodes across three Availability Zones. Use three dedicated master nodes.
Answers
C.
Use a cluster of six data nodes across three Availability Zones. Use six dedicated master nodes.
C.
Use a cluster of six data nodes across three Availability Zones. Use six dedicated master nodes.
Answers
D.
Use a cluster of eight data nodes across two Availability Zones. Deploy four master nodes in a failover AWS Region.
D.
Use a cluster of eight data nodes across two Availability Zones. Deploy four master nodes in a failover AWS Region.
Answers
Suggested answer: B
Total 425 questions
Go to page: of 43