🔍

SOA-C02 — questions

Page 10 of 24 · 477 total questions.

SOA-C02 Question 181

Single page →
Topic 1 · Question 181 · Select all that apply

A global gaming company is preparing to launch a new game on AWS. The game runs in multiple AWS Regions on a fleet of Amazon EC2 instances. The instances are in an Auto Scaling group behind an Application Load Balancer (ALB) in each Region. The company plans to use Amazon Route 53 for DNS services. The DNS configuration must direct users to the Region that is closest to them and must provide automated failover. Which combination of steps should a SysOps administrator take to configure Route 53 to meet these requirements? (Choose two.)

  • ACreate Amazon CloudWatch alarms that monitor the health of the ALB in each Region. Configure Route 53 DNS failover by using a health check that monitors the alarms. (correct answer)
  • BCreate Amazon CloudWatch alarms that monitor the health of the EC2 instances in each Region. Configure Route 53 DNS failover by using a health check that monitors the alarms.
  • CConfigure Route 53 DNS failover by using a health check that monitors the private IP address of an EC2 instance in each Region.
  • DConfigure Route 53 geoproximity routing. Specify the Regions that are used for the infrastructure. (correct answer)
  • EConfigure Route 53 simple routing. Specify the continent, country, and state or province that are used for the infrastructure.
Reveal answer & explanation
Correct answer: A, D

The correct answer is A, D. Option A: Create Amazon CloudWatch alarms that monitor the health of the ALB in each Region. Configure Route 53 DNS failover by using a health check that monitors the alarms. Option D: Configure Route 53 geoproximity routing. Specify the Regions that are used for the infrastructure.

Explanation

Amazon Route 53 provides DNS with health checks and routing policies for availability and latency. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 182

Single page →
Topic 1 · Question 182

A SysOps administrator is investigating a company’s web application for performance problems. The application runs on Amazon EC2 instances that are in an Auto Scaling group. The application receives large traffic increases at random times throughout the day. During periods of rapid traffic increases, the Auto Scaling group is not adding capacity fast enough. As a result, users are experiencing poor performance. The company wants to minimize costs without adversely affecting the user experience when web traffic surges quickly. The company needs a solution that adds more capacity to the Auto Scaling group for larger traffic increases than for smaller traffic increases. How should the SysOps administrator configure the Auto Scaling group to meet these requirements?

  • ACreate a simple scaling policy with settings to make larger adjustments in capacity when the system is under heavy load.
  • BCreate a step scaling policy with settings to make larger adjustments in capacity when the system is under heavy load. (correct answer)
  • CCreate a target tracking scaling policy with settings to make larger adjustments in capacity when the system is under heavy load.
  • DUse Amazon EC2 Auto Scaling lifecycle hooks. Adjust the Auto Scaling group’s maximum number of instances after every scaling event.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create a step scaling policy with settings to make larger adjustments in capacity when the system is under heavy load. This option delivers the requirement at the lowest cost.

SOA-C02 Question 183

Single page →
Topic 1 · Question 183

A company has a compliance requirement that no security groups can allow SSH ports to be open to all IP addresses. A SysOps administrator must implement a solution that will notify the company’s SysOps team when a security group rule violates this requirement. The solution also must remediate the security group rule automatically. Which solution will meet these requirements?

  • ACreate an Amazon EventBridge (Amazon CloudWatch Events) rule that invokes an AWS Lambda function when a security group changes. Configure the Lambda function to evaluate the security group for compliance, remove all inbound security group rules on all ports, and notify the SysOps team if the security group is noncompliant.
  • BCreate an AWS CloudTrail metric filter for security group changes. Create an Amazon CloudWatch alarm to notify the SysOps team through an Amazon Simple Notification Service (Amazon SNS) topic when the metric is greater than 0. Subscribe an AWS Lambda function to the SNS topic to remediate the security group rule by removing the rule.
  • CActivate the AWS Config restricted-ssh managed rule. Add automatic remediation to the AWS Config rule by using the AWS Systems Manager Automation AWS-DisablePublicAccessForSecurityGroup runbook. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to notify the SysOps team when the rule is noncompliant. (correct answer)
  • DCreate an AWS CloudTrail metric filter for security group changes. Create an Amazon CloudWatch alarm for when the metric is greater than 0. Add an AWS Systems Manager action to the CloudWatch alarm to suspend the security group by using the Systems Manager Automation AWS-DisablePublicAccessForSecurityGroup runbook when the alarm is in ALARM state. Add an Amazon Simple Notification Service (Amazon SNS) topic as a second target to notify the SysOps team.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Activate the AWS Config restricted-ssh managed rule. Add automatic remediation to the AWS Config rule by using the AWS Systems Manager Automation AWS-DisablePublicAccessForSecurityGroup runbook. Create an Amazon Event...

Explanation

Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 184

Single page →
Topic 1 · Question 184

A company has an application that runs only on Amazon EC2 Spot Instances. The instances run in an Amazon EC2 Auto Scaling group with scheduled scaling actions. However, the capacity does not always increase at the scheduled times, and instances terminate many times a day. A SysOps administrator must ensure that the instances launch on time and have fewer interruptions. Which action will meet these requirements?

  • ASpecify the capacity-optimized allocation strategy for Spot Instances. Add more instance types to the Auto Scaling group. (correct answer)
  • BSpecify the capacity-optimized allocation strategy for Spot Instances. Increase the size of the instances in the Auto Scaling group.
  • CSpecify the lowest-price allocation strategy for Spot Instances. Add more instance types to the Auto Scaling group.
  • DSpecify the lowest-price allocation strategy for Spot Instances. Increase the size of the instances in the Auto Scaling group.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Specify the capacity-optimized allocation strategy for Spot Instances. Add more instance types to the Auto Scaling group.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Spot Instances use spare capacity at a large discount, ideal for fault-tolerant or interruptible workloads.

SOA-C02 Question 185

Single page →
Topic 1 · Question 185

A company plans to deploy a database on an Amazon Aurora MySQL DB cluster. The database will store data for a demonstration environment. The data must be reset on a daily basis. What is the MOST operationally efficient solution that meets these requirements?

  • ACreate a manual snapshot of the DB cluster after the data has been populated. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function on a daily basis. Configure the function to restore the snapshot and then delete the previous DB cluster.
  • BEnable the Backtrack feature during the creation of the DB cluster. Specify a target backtrack window of 48 hours. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function on a daily basis. Configure the function to perform a backtrack operation. (correct answer)
  • CExport a manual snapshot of the DB cluster to an Amazon S3 bucket after the data has been populated. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function on a daily basis. Configure the function to restore the snapshot from Amazon S3.
  • DSet the DB cluster backup retention period to 2 days. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function on a daily basis. Configure the function to restore the DB cluster to a point in time and then delete the previous DB cluster.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Enable the Backtrack feature during the creation of the DB cluster. Specify a target backtrack window of 48 hours. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function on a dai...

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

SOA-C02 Question 186

Single page →
Topic 1 · Question 186

A SysOps administrator is setting up an automated process to recover an Amazon EC2 instance in the event of an underlying hardware failure. The recovered instance must have the same private IP address and the same Elastic IP address that the original instance had. The SysOps team must receive an email notification when the recovery process is initiated. Which solution will meet these requirements?

  • ACreate an Amazon CloudWatch alarm for the EC2 instance, and specify the StatusCheckFailed_Instance metric. Add an EC2 action to the alarm to recover the instance. Add an alarm notification to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the SysOps team email address to the SNS topic.
  • BCreate an Amazon CloudWatch alarm for the EC2 instance, and specify the StatusCheckFailed_System metric. Add an EC2 action to the alarm to recover the instance. Add an alarm notification to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the SysOps team email address to the SNS topic. (correct answer)
  • CCreate an Auto Scaling group across three different subnets in the same Availability Zone with a minimum, maximum, and desired size of 1. Configure the Auto Scaling group to use a launch template that specifies the private IP address and the Elastic IP address. Add an activity notification for the Auto Scaling group to send an email message to the SysOps team through Amazon Simple Email Service (Amazon SES).
  • DCreate an Auto Scaling group across three Availability Zones with a minimum, maximum, and desired size of 1. Configure the Auto Scaling group to use a launch template that specifies the private IP address and the Elastic IP address. Add an activity notification for the Auto Scaling group to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the SysOps team email address to the SNS topic.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create an Amazon CloudWatch alarm for the EC2 instance, and specify the StatusCheckFailed_System metric. Add an EC2 action to the alarm to recover the instance. Add an alarm notification to publish a message to an Ama...

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

SOA-C02 Question 187

Single page →
Topic 1 · Question 187

A company has a public website that recently experienced problems. Some links led to missing webpages, and other links rendered incorrect webpages. The application infrastructure was running properly, and all the provisioned resources were healthy. Application logs and dashboards did not show any errors, and no monitoring alarms were raised. Systems administrators were not aware of any problems until end users reported the issues. The company needs to proactively monitor the website for such issues in the future and must implement a solution as soon as possible. Which solution will meet these requirements with the LEAST operational overhead?

  • ARewrite the application to surface a custom error to the application log when issues occur. Automatically parse logs for errors. Create an Amazon CloudWatch alarm to provide alerts when issues are detected.
  • BCreate an AWS Lambda function to test the website. Configure the Lambda function to emit an Amazon CloudWatch custom metric when errors are detected. Configure a CloudWatch alarm to provide alerts when issues are detected.
  • CCreate an Amazon CloudWatch Synthetics canary. Use the CloudWatch Synthetics Recorder plugin to generate the script for the canary run. Configure the canary in line with requirements. Create an alarm to provide alerts when issues are detected. (correct answer)
  • DIn the Amazon CloudWatch console, turn on Application Insights. Create a CloudWatch alarm to provide alerts when an issue is detected.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an Amazon CloudWatch Synthetics canary. Use the CloudWatch Synthetics Recorder plugin to generate the script for the canary run. Configure the canary in line with requirements. Create an alarm to provide alerts...

Explanation

Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 188

Single page →
Topic 1 · Question 188

A SysOps administrator is responsible for a company’s security groups. The company wants to maintain a documented trail of any changes that are made to the security groups. The SysOps administrator must receive notification whenever the security groups change. Which solution will meet these requirements?

  • ASet up Amazon Detective to record security group changes. Specify an Amazon CloudWatch Logs log group to store configuration history logs. Create an Amazon Simple Queue Service (Amazon SQS) queue for notifications about configuration changes. Subscribe the SysOps administrator’s email address to the SQS queue.
  • BSet up AWS Systems Manager Change Manager to record security group changes. Specify an Amazon CloudWatch Logs log group to store configuration history logs. Create an Amazon Simple Notification Service (Amazon SNS) topic for notifications about configuration changes. Subscribe the SysOps administrator’s email address to the SNS topic.
  • CSet up AWS Config to record security group changes. Specify an Amazon S3 bucket as the location for configuration snapshots and history files. Create an Amazon Simple Notification Service (Amazon SNS) topic for notifications about configuration changes. Subscribe the SysOps administrator’s email address to the SNS topic. (correct answer)
  • DSet up Amazon Detective to record security group changes. Specify an Amazon S3 bucket as the location for configuration snapshots and history files. Create an Amazon Simple Notification Service (Amazon SNS) topic for notifications about configuration changes. Subscribe the SysOps administrator’s email address to the SNS topic.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Set up AWS Config to record security group changes. Specify an Amazon S3 bucket as the location for configuration snapshots and history files. Create an Amazon Simple Notification Service (Amazon SNS) topic for notifi...

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 189

Single page →
Topic 1 · Question 189

An ecommerce company has built a web application that uses an Amazon Aurora DB cluster. The DB cluster includes memory optimized instance types with both a writer node and a reader node. Traffic volume changes throughout the day. During sudden traffic surges, Amazon CloudWatch metrics for the DB cluster indicate high RAM consumption and an increase in select latency. A SysOps administrator must implement a configuration change to improve the performance of the DB cluster. The change must minimize downtime and must not result in the loss of data. Which change will meet these requirements?

  • AAdd an Aurora Replica to the DB cluster. (correct answer)
  • BModify the DB cluster to convert the DB cluster into a multi-master DB cluster.
  • CTake a snapshot of the DB cluster. From that snapshot, create a new DB cluster that has larger memory optimized instances.
  • DIncrease the disk storage capacity of the DB cluster to double the existing disk capacity.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Add an Aurora Replica to the DB cluster.

Explanation

Amazon Aurora is a high-performance managed relational database with built-in replication and failover.

SOA-C02 Question 190

Single page →
Topic 1 · Question 190

A company has a simple web application that runs on a set of Amazon EC2 instances behind an Elastic Load Balancer in the eu-west-2 Region. Amazon Route 53 holds a DNS record for the application with a simple routing policy. Users from all over the world access the application through their web browsers. The company needs to create additional copies of the application in the us-east-1 Region and in the ap-south-1 Region. The company must direct users to the Region that provides the fastest response times when the users load the application. What should a SysOps administrator do to meet these requirements?

  • AIn each new Region, create a new Elastic Load Balancer and a new set of EC2 instances to run a copy of the application. Transition to a geolocation routing policy.
  • BIn each new Region, create a copy of the application on new EC2 instances. Add these new EC2 instances to the Elastic Load Balancer in eu-west-2. Transition to a latency routing policy.
  • CIn each new Region, create a copy of the application on new EC2 instances. Add these new EC2 instances to the Elastic Load Balancer in eu-west-2. Transition to a multivalue routing policy.
  • DIn each new Region, create a new Elastic Load Balancer and a new set of EC2 instances to run a copy of the application. Transition to a latency routing policy. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: In each new Region, create a new Elastic Load Balancer and a new set of EC2 instances to run a copy of the application. Transition to a latency routing policy.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Elastic Load Balancing spreads traffic across targets in multiple AZs for availability. A load balancer distributes traffic across targets in multiple AZs for availability and scale.

SOA-C02 Question 191

Single page →
Topic 1 · Question 191 · Select all that apply

A company creates a new member account by using AWS Organizations. A SysOps administrator needs to add AWS Business Support to the new account. Which combination of steps must the SysOps administrator take to meet this requirement? (Choose two.)

  • ASign in to the new account by using IAM credentials. Change the support plan. (correct answer)
  • BSign in to the new account by using root user credentials. Change the support plan.
  • CUse the AWS Support API to change the support plan.
  • DReset the password of the account root user.
  • ECreate an IAM user that has administrator privileges in the new account. (correct answer)
Reveal answer & explanation
Correct answer: A, E

The correct answer is A, E. Option A: Sign in to the new account by using IAM credentials. Change the support plan. Option E: Create an IAM user that has administrator privileges in the new account.

Explanation

AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

SOA-C02 Question 192

Single page →
Topic 1 · Question 192

A SysOps administrator creates two VPCs, VPC1 and VPC2, in a company’s AWS account The SysOps administrator deploys a Linux Amazon EC2 instance in VPC1 and deploys an Amazon RDS for MySQL DB instance in VPC2. The DB instance is deployed in a private subnet. An application that runs on the EC2 instance needs to connect to the database. What should the SysOps administrator do to give the EC2 instance the ability to connect to the database?

  • AEnter the DB instance connection string into the VPC1 route table.
  • BConfigure VPC peering between the two VPCs. (correct answer)
  • CAdd the same IPv4 CIDR range for both VPCs.
  • DConnect to the DB instance by using the DB instance’s public IP address.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Configure VPC peering between the two VPCs.

Explanation

VPC peering privately connects two VPCs without a gateway. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 193

Single page →
Topic 1 · Question 193

A company uses an Amazon S3 bucket to store data files. The S3 bucket contains hundreds of objects. The company needs to replace a tag on all the objects in the S3 bucket with another tag. What is the MOST operationally efficient way to meet this requirement?

  • AUse S3 Batch Operations. Specify the operation to replace all object tags. (correct answer)
  • BUse the AWS CLI to get the tags for each object. Save the tags in a list. Use S3 Batch Operations. Specify the operation to delete all object tags. Use the AWS CLI and the list to retag the objects.
  • CUse the AWS CLI to get the tags for each object. Save the tags in a list. Use the AWS CLI and the list to remove the object tags. Use the AWS CLI and the list to retag the objects.
  • DUse the AWS CLI to copy the objects to another S3 bucket. Add the new tag to the copied objects. Delete the original objects.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use S3 Batch Operations. Specify the operation to replace all object tags.

Explanation

AWS Batch schedules and runs batch computing jobs at any scale without managing clusters. Amazon S3 provides durable, scalable object storage that is fully managed.

SOA-C02 Question 194

Single page →
Topic 1 · Question 194

A company needs to take an inventory of applications that are running on multiple Amazon EC2 instances. The company has configured users and roles with the appropriate permissions for AWS Systems Manager. An updated version of Systems Manager Agent has been installed and is running on every instance. While configuring an inventory collection, a SysOps administrator discovers that not all the instances in a single subnet are managed by Systems Manager. What must the SysOps administrator do to fix this issue?

  • AEnsure that all the EC2 instances have the correct tags for Systems Manager access.
  • BConfigure AWS Identity and Access Management Access Analyzer to determine and automatically remediate the issue.
  • CEnsure that all the EC2 instances have an instance profile with Systems Manager access. (correct answer)
  • DConfigure Systems Manager to use an interface VPC endpoint.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Ensure that all the EC2 instances have an instance profile with Systems Manager access.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Systems Manager operates and automates management of fleets of resources.

SOA-C02 Question 195

Single page →
Topic 1 · Question 195

A company stores sensitive data in an Amazon S3 bucket. The company must log all access attempts to the S3 bucket. The company’s risk team must receive immediate notification about any delete events. Which solution will meet these requirements?

  • AEnable S3 server access logging for audit logs. Set up an Amazon Simple Notification Service (Amazon SNS) notification for the S3 bucket. Select DeleteObject for the event type for the alert system. (correct answer)
  • BEnable S3 server access logging for audit logs. Launch an Amazon EC2 instance for the alert system. Run a cron job on the EC2 instance to download the access logs each day and to scan for a DeleteObject event.
  • CUse Amazon CloudWatch Logs for audit logs. Use Amazon CloudWatch alarms with an Amazon Simple Notification Service (Amazon SNS) notification for the alert system.
  • DUse Amazon CloudWatch Logs for audit logs. Launch an Amazon EC2 instance for the alert system. Run a cron job on the EC2 instance each day to compare the list of the items with the list from the previous day. Configure the cron job to send a notification if an item is missing.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Enable S3 server access logging for audit logs. Set up an Amazon Simple Notification Service (Amazon SNS) notification for the S3 bucket. Select DeleteObject for the event type for the alert system.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers.

SOA-C02 Question 196

Single page →
Topic 1 · Question 196

A SysOps administrator receives an alert from Amazon GuardDuty about suspicious network activity on an Amazon EC2 instance. The GuardDuty finding lists a new external IP address as a traffic destination. The SysOps administrator does not recognize the external IP address. The SysOps administrator must block traffic to the external IP address that GuardDuty identified. Which solution will meet this requirement?

  • ACreate a new security group to block traffic to the external IP address. Assign the new security group to the EC2 instance.
  • BUse VPC flow logs with Amazon Athena to block traffic to the external IP address.
  • CCreate a network ACL. Add an outbound deny rule for traffic to the external IP address. (correct answer)
  • DCreate a new security group to block traffic to the external IP address. Assign the new security group to the entire VPC.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create a network ACL. Add an outbound deny rule for traffic to the external IP address.

SOA-C02 Question 197

Single page →
Topic 1 · Question 197

A company’s reporting job that used to run in 15 minutes is now taking an hour to run. An application generates the reports. The application runs on Amazon EC2 instances and extracts data from an Amazon RDS for MySQL database. A SysOps administrator checks the Amazon CloudWatch dashboard for the RDS instance and notices that the Read IOPS metrics are high, even when the reports are not running. The SysOps administrator needs to improve the performance and the availability of the RDS instance. Which solution will meet these requirements?

  • AConfigure an Amazon ElastiCache cluster in front of the RDS instance. Update the reporting job to query the ElastiCache cluster.
  • BDeploy an RDS read replica. Update the reporting job to query the reader endpoint. (correct answer)
  • CCreate an Amazon CloudFront distribution. Set the RDS instance as the origin. Update the reporting job to query the CloudFront distribution.
  • DIncrease the size of the RDS instance.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Deploy an RDS read replica. Update the reporting job to query the reader endpoint.

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover.

SOA-C02 Question 198

Single page →
Topic 1 · Question 198

A company’s SysOps administrator regularly checks the AWS Personal Health Dashboard in each of the company’s accounts. The accounts are part of an organization in AWS Organizations. The company recently added 10 more accounts to the organization. The SysOps administrator must consolidate the alerts from each account’s Personal Health Dashboard. Which solution will meet this requirement with the LEAST amount of effort?

  • AEnable organizational view in AWS Health. (correct answer)
  • BConfigure the Personal Health Dashboard in each account to forward events to a central AWS CloudTrail log.
  • CCreate an AWS Lambda function to query the AWS Health API and to write all events to an Amazon DynamoDB table.
  • DUse the AWS Health API to write events to an Amazon DynamoDB table.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Enable organizational view in AWS Health.

SOA-C02 Question 199

Single page →
Topic 1 · Question 199

A company runs an application on Amazon EC2 instances. The EC2 instances are in an Auto Scaling group and run behind an Application Load Balancer (ALB). The application experiences errors when total requests exceed 100 requests per second. A SysOps administrator must collect information about total requests for a 2-week period to determine when requests exceeded this threshold. What should the SysOps administrator do to collect this data?

  • AUse the ALB’s RequestCount metric. Configure a time range of 2 weeks and a period of 1 minute. Examine the chart to determine peak traffic times and volumes. (correct answer)
  • BUse Amazon CloudWatch metric math to generate a sum of request counts for all the EC2 instances over a 2-week period. Sort by a 1-minute interval.
  • CCreate Amazon CloudWatch custom metrics on the EC2 launch configuration templates to create aggregated request metrics across all the EC2 instances.
  • DCreate an Amazon EventBridge (Amazon CloudWatch Events) rule. Configure an EC2 event matching pattern that creates a metric that is based on EC2 requests. Display the data in a graph.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use the ALB’s RequestCount metric. Configure a time range of 2 weeks and a period of 1 minute. Examine the chart to determine peak traffic times and volumes.

Explanation

Amazon EKS runs managed Kubernetes when you need the Kubernetes ecosystem. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 200

Single page →
Topic 1 · Question 200

A company recently migrated its application to a VPC on AWS. An AWS Site-to-Site VPN connection connects the company’s on-premises network to the VPC. The application retrieves customer data from another system that resides on premises. The application uses an on-premises DNS server to resolve domain records. After the migration, the application is not able to connect to the customer data because of name resolution errors. Which solution will give the application the ability to resolve the internal domain names?

  • ALaunch EC2 instances in the VPC. On the EC2 instances, deploy a custom DNS forwarder that forwards all DNS requests to the on-premises DNS server. Create an Amazon Route 53 private hosted zone that uses the EC2 instances for name servers.
  • BCreate an Amazon Route 53 Resolver outbound endpoint. Configure the outbound endpoint to forward DNS queries against the on-premises domain to the on-premises DNS server. (correct answer)
  • CSet up two AWS Direct Connect connections between the AWS environment and the on-premises network. Set up a link aggregation group (LAG) that includes the two connections. Change the VPC resolver address to point to the on-premises DNS server.
  • DCreate an Amazon Route 53 public hosted zone for the on-premises domain. Configure the network ACLs to forward DNS requests against the on-premises domain to the Route 53 public hosted zone.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create an Amazon Route 53 Resolver outbound endpoint. Configure the outbound endpoint to forward DNS queries against the on-premises domain to the on-premises DNS server.

Explanation

Amazon Route 53 provides DNS with health checks and routing policies for availability and latency. AWS Config tracks resource configuration changes and evaluates compliance.

Showing questions 181–200 of 477 · Page 10 of 24