🔍

SOA-C02 — all questions

477 practice questions with answers and explanations.

SOA-C02 Question 1

Single page →
Topic 1 · Question 1

A company has an infernal web application that runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto Scaling group in a single Availability Zone. A SysOps administrator must make the application highly available. Which action should the SysOps administrator take to meet this requirement?

  • AIncrease the maximum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.
  • BIncrease the minimum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.
  • CUpdate the Auto Scaling group to launch new instances in a second Availability Zone in the same AWS Region. (correct answer)
  • DUpdate the Auto Scaling group to launch new instances in an Availability Zone in a second AWS Region.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Update the Auto Scaling group to launch new instances in a second Availability Zone in the same AWS Region.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SOA-C02 Question 2

Single page →
Topic 1 · Question 2

A company hosts a website on multiple Amazon EC2 instances that run in an Auto Scaling group. Users are reporting slow responses during peak times between 6 PM and 11 PM every weekend. A SysOps administrator must implement a solution to improve performance during these peak times. What is the MOST operationally efficient solution that meets these requirements?

  • ACreate a scheduled Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function to increase the desired capacity before peak times.
  • BConfigure a scheduled scaling action with a recurrence option to change the desired capacity before and after peak times. (correct answer)
  • CCreate a target tracking scaling policy to add more instances when memory utilization is above 70%.
  • DConfigure the cooldown period for the Auto Scaling group to modify desired capacity before and after peak times.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Configure a scheduled scaling action with a recurrence option to change the desired capacity before and after peak times.

Explanation

AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 3

Single page →
Topic 1 · Question 3

A company is running a website on Amazon EC2 instances behind an Application Load Balancer (ALB). The company configured an Amazon CloudFront distribution and set the ALB as the origin. The company created an Amazon Route 53 CNAME record to send all traffic through the CloudFront distribution. As an unintended side effect, mobile users are now being served the desktop version of the website. Which action should a SysOps administrator take to resolve this issue?

  • AConfigure the CloudFront distribution behavior to forward the User-Agent header. (correct answer)
  • BConfigure the CloudFront distribution origin settings. Add a User-Agent header to the list of origin custom headers.
  • CEnable IPv6 on the ALB. Update the CloudFront distribution origin settings to use the dualstack endpoint.
  • DEnable IPv6 on the CloudFront distribution. Update the Route 53 record to use the dualstack endpoint.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure the CloudFront distribution behavior to forward the User-Agent header.

Explanation

Amazon CloudFront caches content at edge locations to reduce latency and offload origins. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 4

Single page →
Topic 1 · Question 4

A SysOps administrator has enabled AWS CloudTrail in an AWS account. If CloudTrail is disabled, it must be re-enabled immediately. What should the SysOps administrator do to meet these requirements WITHOUT writing custom code?

  • AAdd the AWS account to AWS Organizations. Enable CloudTrail in the management account.
  • BCreate an AWS Config rule that is invoked when CloudTrail configuration changes. Apply the AWS-ConfigureCloudTrailLogging automatic remediation action. (correct answer)
  • CCreate an AWS Config rule that is invoked when CloudTrail configuration changes. Configure the rule to invoke an AWS Lambda function to enable CloudTrail.
  • DCreate an Amazon EventBridge (Amazon CloudWatch Event) hourly rule with a schedule pattern to run an AWS Systems Manager Automation document to enable CloudTrail.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create an AWS Config rule that is invoked when CloudTrail configuration changes. Apply the AWS-ConfigureCloudTrailLogging automatic remediation action.

Explanation

AWS CloudTrail records API activity for auditing and governance. AWS Config tracks resource configuration changes and evaluates compliance. This option needs the least custom development effort.

SOA-C02 Question 5

Single page →
Topic 1 · Question 5

A company hosts its website on Amazon EC2 instances behind an Application Load Balancer. The company manages its DNS with Amazon Route 53, and wants to point its domain's zone apex to the website. Which type of record should be used to meet these requirements?

  • AAn AAAA record for the domain's zone apex
  • BAn A record for the domain's zone apex
  • CA CNAME record for the domain's zone apex
  • DAn alias record for the domain's zone apex (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: An alias record for the domain's zone apex.

SOA-C02 Question 6

Single page →
Topic 1 · Question 6 · Select all that apply

A company must ensure that any objects uploaded to an S3 bucket are encrypted. Which of the following actions will meet this requirement? (Choose two.)

  • AImplement AWS Shield to protect against unencrypted objects stored in S3 buckets.
  • BImplement Object access control list (ACL) to deny unencrypted objects from being uploaded to the S3 bucket.
  • CImplement Amazon S3 default encryption to make sure that any object being uploaded is encrypted before it is stored. (correct answer)
  • DImplement Amazon Inspector to inspect objects uploaded to the S3 bucket to make sure that they are encrypted.
  • EImplement S3 bucket policies to deny unencrypted objects from being uploaded to the buckets. (correct answer)
Reveal answer & explanation
Correct answer: C, E

The correct answer is C, E. Option C: Implement Amazon S3 default encryption to make sure that any object being uploaded is encrypted before it is stored. Option E: Implement S3 bucket policies to deny unencrypted objects from being uploaded to the buckets.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed.

SOA-C02 Question 7

Single page →
Topic 1 · Question 7 · Select all that apply

A company has a stateful web application that is hosted on Amazon EC2 instances in an Auto Scaling group. The instances run behind an Application Load Balancer (ALB) that has a single target group. The ALB is configured as the origin in an Amazon CloudFront distribution. Users are reporting random logouts from the web application. Which combination of actions should a SysOps administrator take to resolve this problem? (Choose two.)

  • AChange to the least outstanding requests algorithm on the ALB target group.
  • BConfigure cookie forwarding in the CloudFront distribution cache behavior. (correct answer)
  • CConfigure header forwarding in the CloudFront distribution cache behavior.
  • DEnable group-level stickiness on the ALB listener rule.
  • EEnable sticky sessions on the ALB target group. (correct answer)
Reveal answer & explanation
Correct answer: B, E

The correct answer is B, E. Option B: Configure cookie forwarding in the CloudFront distribution cache behavior. Option E: Enable sticky sessions on the ALB target group.

Explanation

Amazon CloudFront caches content at edge locations to reduce latency and offload origins. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 8

Single page →
Topic 1 · Question 8

A company is running a serverless application on AWS Lambda. The application stores data in an Amazon RDS for MySQL DB instance. Usage has steadily increased, and recently there have been numerous "too many connections" errors when the Lambda function attempts to connect to the database. The company already has configured the database to use the maximum max_connections value that is possible. What should a SysOps administrator do to resolve these errors?

  • ACreate a read replica of the database. Use Amazon Route 53 to create a weighted DNS record that contains both databases.
  • BUse Amazon RDS Proxy to create a proxy. Update the connection string in the Lambda function. (correct answer)
  • CIncrease the value in the max_connect_errors parameter in the parameter group that the database uses.
  • DUpdate the Lambda function's reserved concurrency to a higher value.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use Amazon RDS Proxy to create a proxy. Update the connection string in the Lambda function.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon RDS Proxy pools and shares database connections to improve scalability and resilience. Amazon RDS is a managed relational database that handles patching, backups and failover.

SOA-C02 Question 9

Single page →
Topic 1 · Question 9

A SysOps administrator is deploying an application on 10 Amazon EC2 instances. The application must be highly available. The instances must be placed on distinct underlying hardware. What should the SysOps administrator do to meet these requirements?

  • ALaunch the instances into a cluster placement group in a single AWS Region.
  • BLaunch the instances into a partition placement group in multiple AWS Regions.
  • CLaunch the instances into a spread placement group in multiple AWS Regions.
  • DLaunch the instances into a spread placement group in a single AWS Region. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Launch the instances into a spread placement group in a single AWS Region. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SOA-C02 Question 10

Single page →
Topic 1 · Question 10

A SysOps administrator is troubleshooting an AWS CloudFormation template whereby multiple Amazon EC2 instances are being created. The template is working in us-east-1, but it is failing in us-west-2 with the error code: AMI [ami-12345678] does not exist How should the Administrator ensure that the AWS CloudFormation template is working in every region?

  • ACopy the source region's Amazon Machine Image (AMI) to the destination region and assign it the same ID.
  • BEdit the AWS CloudFormation template to specify the region code as part of the fully qualified AMI ID.
  • CEdit the AWS CloudFormation template to offer a drop-down list of all AMIs to the user by using the AWS::EC2::AMI::ImageID control.
  • DModify the AWS CloudFormation template by including the AMI IDs in the "Mappings" section. Refer to the proper mapping within the template for the proper AMI ID. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Modify the AWS CloudFormation template by including the AMI IDs in the "Mappings" section. Refer to the proper mapping within the template for the proper AMI ID.

Explanation

AWS CloudFormation provisions infrastructure as code repeatably.

SOA-C02 Question 11

Single page →
Topic 1 · Question 11

A SysOps administrator is provisioning an Amazon Elastic File System (Amazon EFS) file system to provide shared storage across multiple Amazon EC2 instances. The instances all exist in the same VPC across multiple Availability Zones. There are two instances in each Availability Zone. The SysOps administrator must make the file system accessible to each instance with the lowest possible latency. Which solution will meet these requirements?

  • ACreate a mount target for the EFS file system in the VPC. Use the mount target to mount the file system on each of the instances.
  • BCreate a mount target for the EFS file system in one Availability Zone of the VPC. Use the mount target to mount the file system on the instances in that Availability Zone. Share the directory with the other instances.
  • CCreate a mount target for each instance. Use each mount target to mount the EFS file system on each respective instance.
  • DCreate a mount target in each Availability Zone of the VPC. Use the mount target to mount the EFS file system on the instances in the respective Availability Zone. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create a mount target in each Availability Zone of the VPC. Use the mount target to mount the EFS file system on the instances in the respective Availability Zone.

Explanation

Amazon EFS is a shared, elastic NFS file system that multiple instances can mount concurrently across AZs. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SOA-C02 Question 12

Single page →
Topic 1 · Question 12

A SysOps administrator has successfully deployed a VPC with an AWS CloudFormation template. The SysOps administrator wants to deploy the same template across multiple accounts that are managed through AWS Organizations. Which solution will meet this requirement with the LEAST operational overhead?

  • AAssume the OrganizationAccountAccessRole IAM role from the management account. Deploy the template in each of the accounts.
  • BCreate an AWS Lambda function to assume a role in each account. Deploy the template by using the AWS CloudFormation CreateStack API call.
  • CCreate an AWS Lambda function to query for a list of accounts. Deploy the template by using the AWS CloudFormation CreateStack API call.
  • DUse AWS CloudFormation StackSets from the management account to deploy the template in each of the accounts. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use AWS CloudFormation StackSets from the management account to deploy the template in each of the accounts.

Explanation

AWS CloudFormation provisions infrastructure as code repeatably.

SOA-C02 Question 13

Single page →
Topic 1 · Question 13 · Select all that apply

A company is running distributed computing software to manage a fleet of 20 Amazon EC2 instances for calculations. The fleet includes 2 control nodes and 18 task nodes to run the calculations. Control nodes can automatically start the task nodes. Currently, all the nodes run on demand. The control nodes must be available 24 hours a day, 7 days a week. The task nodes run for 4 hours each day. A SysOps administrator needs to optimize the cost of this solution. Which combination of actions will meet these requirements? (Choose two.)

  • APurchase EC2 Instance Savings Plans for the control nodes. (correct answer)
  • BUse Dedicated Hosts for the control nodes.
  • CUse Reserved Instances for the task nodes.
  • DUse Spot Instances for the control nodes. Use On-Demand Instances if there is no Spot availability.
  • EUse Spot Instances for the task nodes. Use On-Demand Instances if there is no Spot availability. (correct answer)
Reveal answer & explanation
Correct answer: A, E

The correct answer is A, E. Option A: Purchase EC2 Instance Savings Plans for the control nodes. Option E: Use Spot Instances for the task nodes. Use On-Demand Instances if there is no Spot availability.

Explanation

Spot Instances use spare capacity at a large discount, ideal for fault-tolerant or interruptible workloads. Savings Plans reduce cost for consistent compute usage in exchange for a usage commitment. Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

SOA-C02 Question 14

Single page →
Topic 1 · Question 14

A company is supposed to receive a data file every hour in an Amazon S3 bucket. An S3 event notification invokes an AWS Lambda function each time a file arrives. The function processes the data for use by an application. The application team notices that sometimes the file does not arrive. The application team wants to receive a notification whenever the file does not arrive. What is the MOST operationally efficient solution that meets these requirements?

  • AAdd an S3 Lifecycle rule on the S3 bucket with a scope that is limited to objects that were created in the last hour. Configure another S3 event notification to be invoked by the lifecycle transition when the number of objects transitioned is zero. Publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to notify the application team.
  • BConfigure another S3 event notification to invoke a Lambda function that posts a message to an Amazon Simple Queue Service (Amazon SQS) queue. Create an Amazon CloudWatch alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to notify the application team when the ApproximateAgeOfOldestMessage metric of the queue is greater than 1 hour.
  • CCreate an Amazon CloudWatch alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to alert the application team when the Invocations metric of the Lambda function is zero for an hour. Configure the alarm to treat missing data as breaching. (correct answer)
  • DCreate a new Lambda function to get the timestamp of the newest file in the S3 bucket. If the timestamp is more than 1 hour ago, publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to notify the application team. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke the new function hourly.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an Amazon CloudWatch alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to alert the application team when the Invocations metric of the Lambda function is zero for an hour....

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

SOA-C02 Question 15

Single page →
Topic 1 · Question 15

A company recently acquired another corporation and all of that corporation's AWS accounts. A financial analyst needs the cost data from these accounts. A SysOps administrator uses Cost Explorer to generate cost and usage reports. The SysOps administrator notices that "No Tagkey" represents 20% of the monthly cost. What should the SysOps administrator do to tag the "No Tagkey" resources?

  • AAdd the accounts to AWS Organizations. Use a service control policy (SCP) to tag all the untagged resources.
  • BUse an AWS Config rule to find the untagged resources. Set the remediation action to terminate the resources.
  • CUse Cost Explorer to find and tag all the untagged resources.
  • DUse Tag Editor to find and tag all the untagged resources. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use Tag Editor to find and tag all the untagged resources.

SOA-C02 Question 16

Single page →
Topic 1 · Question 16

While setting up an AWS managed VPN connection, a SysOps administrator creates a customer gateway resource in AWS. The customer gateway device resides in a data center with a NAT gateway in front of it. What address should be used to create the customer gateway resource?

  • AThe private IP address of the customer gateway device
  • BThe MAC address of the NAT device in front of the customer gateway device
  • CThe public IP address of the customer gateway device
  • DThe public IP address of the NAT device in front of the customer gateway device (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: The public IP address of the NAT device in front of the customer gateway device.

SOA-C02 Question 17

Single page →
Topic 1 · Question 17

A company has a web application that is experiencing performance problems many times each night. A root cause analysis reveals sudden increases in CPU utilization that last 5 minutes on an Amazon EC2 Linux instance. A SysOps administrator must find the process ID (PID) of the service or process that is consuming more CPU. What should the SysOps administrator do to collect the process utilization information with the LEAST amount of effort?

  • AConfigure the Amazon CloudWatch agent procstat plugin to capture CPU process metrics. (correct answer)
  • BConfigure an AWS Lambda function to run every minute to capture the PID and send a notification.
  • CLog in to the EC2 instance by using a .pem key each night. Then run the top command.
  • DUse the default Amazon CloudWatch CPU utilization metric to capture the PID in CloudWatch.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure the Amazon CloudWatch agent procstat plugin to capture CPU process metrics.

Explanation

Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 18

Single page →
Topic 1 · Question 18

A SysOps administrator configured AWS Backup to capture snapshots from a single Amazon EC2 instance that has one Amazon Elastic Block Store (Amazon EBS) volume attached. On the first snapshot, the EBS volume has 10 GiB of data. On the second snapshot, the EBS volume still contains 10 GiB of data, but 4 GiB have changed. On the third snapshot, 2 GiB of data have been added to the volume, for a total of 12 GiB. How much total storage is required to store these snapshots?

  • A12 GiB
  • B16 GiB (correct answer)
  • C26 GiB
  • D32 GiB
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: 16 GiB.

SOA-C02 Question 19

Single page →
Topic 1 · Question 19

A team is managing an AWS account that is a member of an organization in AWS Organizations. The organization has consolidated billing features enabled. The account hosts several applications. A SysOps administrator has applied tags to resources within the account to reflect the environment. The team needs a report of the breakdown of charges by environment. What should the SysOps administrator do to meet this requirement?

  • AFilter, map, and categorize resource groups in Tag Editor.
  • BEnsure that the organization's service control policies (SCPs) allow access to cost allocation tags.
  • CEnsure that the IAM credentials that are used to access Cost Explorer have permissions to group cost by tags.
  • DActivate the tag keys for cost allocation on the organization's management account. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Activate the tag keys for cost allocation on the organization's management account.

SOA-C02 Question 20

Single page →
Topic 1 · Question 20

A company uses an AWS CloudFormation template to provision an Amazon EC2 instance and an Amazon RDS DB instance. A SysOps administrator must update the template to ensure that the DB instance is created before the EC2 instance is launched. What should the SysOps administrator do to meet this requirement?

  • AAdd a wait condition to the template. Update the EC2 instance user data script to send a signal after the EC2 instance is started.
  • BAdd the DependsOn attribute to the EC2 instance resource, and provide the logical name of the RDS resource. (correct answer)
  • CChange the order of the resources in the template so that the RDS resource is listed before the EC2 instance resource.
  • DCreate multiple templates. Use AWS CloudFormation StackSets to wait for one stack to complete before the second stack is created.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Add the DependsOn attribute to the EC2 instance resource, and provide the logical name of the RDS resource.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon RDS is a managed relational database that handles patching, backups and failover.

Showing questions 1–20 of 477 · Page 1 of 24