SOA-C02 — questions

Page 17 of 24 · 477 total questions.

SOA-C02 Question 321

Topic 1 · Question 321

A company hosts a production database on an Amazon Elastic Block Store (Amazon EBS) backed Amazon EC2 instance. As part of an annual disaster recovery exercise, the company needs to restore recent EBS snapshots to a new EC2 instance in a second Availability Zone. After the snapshots are restored to EBS volumes, the resulting volumes must deliver all of their provisioned performance. The company must perform validation tests on the restored data as quickly as possible. Which configuration will meet these requirements?

AEnable EBS fast snapshot restore (FSR) on the snapshots for the second Availability Zone. Create new EBS volumes in the second Availability Zone from the snapshots. Attach the new EBS volumes to a new EC2 instance. (correct answer)
BEnable EBS fast snapshot restore (FSR) on the snapshots for the current Availability Zone. Create new EBS volumes in the second Availability Zone from the snapshots, Attach the new EBS volumes to a new EC2 instance.
CSpecify Provisioned IOPS on the snapshots, Create new EBS volumes in the second Availability Zone from the snapshots. Attach the new EBS volumes to a new EC2 instance.
DSpecify Provisioned IOPS on the existing EBS volumes. Create the snapshots. After the snapshots are completed, create new EBS volumes in the second Availability Zone from the snapshots. Attach the new EBS volumes to a new EC2 instance.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Enable EBS fast snapshot restore (FSR) on the snapshots for the second Availability Zone. Create new EBS volumes in the second Availability Zone from the snapshots. Attach the new EBS volumes to a new EC2 instance.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon EBS provides block storage attached to a single EC2 instance. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SOA-C02 Question 322

Single page →

Topic 1 · Question 322

A SysOps administrator is responsible for a legacy, CPU-heavy application. The application can only be scaled vertically. Currently, the application is deployed on a single t3.large Amazon EC2 instance. The system is showing 90% CPU usage and significant performance latency after a few minutes. What change should be made to alleviate the performance problem?

AChange the Amazon EBS volume to Provisioned IOPs.
BUpgrade to a compute-optimized instance. (correct answer)
CAdd additional t2.large instances to the application.
DPurchase Reserved Instances.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Upgrade to a compute-optimized instance.

SOA-C02 Question 323

Single page →

Topic 1 · Question 323

A user is connected to an Amazon EC2 instance in a private subnet. The user is unable to access the internet from the instance by using the following curl command: curl http:/www.example.com. A SysOps administrator reviews the VPC configuration and learns the following information: • The private subnet has a route to a NAT gateway for CIDR 0.0.0.0/0 • The outbound security group for the EC2 instance contains one rule: outbound for port 443 to CIDR 0.0.0.0/0 • The inbound security group for the EC2 instance allows ports 22 and 443 from the user's IP address. • The inbound network ACL for the subnet allows port 22 and port range 1024-65535 from CIDR 0.0.0.0/0 Which action will allow the user to complete the curl request successfully?

AAdd an additional inbound network ACL rule for port 80 to CIDR 0.0.0.0/0.
BAdd an additional inbound security group rule for port 80 to CIDR 0.0.0.0/0.
CAdd an additional outbound security group rule for port 80 to CIDR 0.0.0.0/0. (correct answer)
DAdd an additional outbound security group rule for port 80 to the user's IP address.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Add an additional outbound security group rule for port 80 to CIDR 0.0.0.0/0.

SOA-C02 Question 324

Single page →

Topic 1 · Question 324

A company’s financial department needs to view the cost details of each project in an AWS account. A SysOps administrator must perform the initial configuration that is required to view cost for each project in Cost Explorer. Which solution will meet this requirement?

AActivate cost allocation tags. Add a project tag to the appropriate resources. (correct answer)
BConfigure consolidated billing. Create AWS Cost and Usage Reports.
CUse AWS Budgets. Create AWS Budgets reports.
DUse cost categories to define custom groups that are based on AWS cost and usage dimensions.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Activate cost allocation tags. Add a project tag to the appropriate resources.

SOA-C02 Question 325

Single page →

Topic 1 · Question 325

A SysOps administrator is managing a web application that runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances run in an EC2 Auto Scaling group. The administrator wants to set an alarm for when all target instances associated with the ALB are unhealthy. Which condition should be used with the alarm?

AAWS/ApplicationELB HealthyHostCount <= 0 (correct answer)
BAWS/ApplicationELB UnhealthyHostCount >= 1
CAWS/EC2 StatusCheckFailed <= 0
DAWS/EC2 StatusCheckFailed >= 1

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: AWS/ApplicationELB HealthyHostCount <= 0.

SOA-C02 Question 326

Single page →

Topic 1 · Question 326

A company uses AWS Organizations to manage its multi-account environment. The organization contains a dedicated account for security and a dedicated account for logging. A SysOps administrator needs to implement a centralized solution that provides alerts when a resource metric in any account crosses a standard defined threshold. Which solution will meet these requirements?

ADeploy an AWS CloudFormation stack set to the accounts in the organization. Use a template that creates the required Amazon CloudWatch alarms and references an Amazon Simple Notification Service (Amazon SNS) topic in the logging account with publish permissions for all the accounts. (correct answer)
BDeploy an AWS CloudFormation stack in each account. Use the stack to deploy the required Amazon CloudWalch alarms and the required Amazon Simple Notification Service (Amazon SNS) topic.
CDeploy an AWS Lambda function on a cron job in each account. Configure the Lambda function to read resources that are in the account and to invoke an Amazon Simple Notification Service (Amazon SNS) topic if any metrics cross the defined threshold.
DDeploy an AWS CloudFormation change set to the organization. Use a template to create the required Amazon CloudWatch alarms and to send alerts to a verified Amazon Simple Email Service (Amazon SES) identity.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Deploy an AWS CloudFormation stack set to the accounts in the organization. Use a template that creates the required Amazon CloudWatch alarms and references an Amazon Simple Notification Service (Amazon SNS) topic in...

Explanation

Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health. AWS CloudFormation provisions infrastructure as code repeatably.

SOA-C02 Question 327

Single page →

Topic 1 · Question 327

A company has an application that uses a scheduled AWS Lambda function to retrieve datasets from external sources over the internet. The function is not associated with a VPC. The company is modifying the application to store the information that the Lambda function retrieves on an Amazon RDS DB instance in a private subnet. The VPC has two public subnets and two private subnets. A SysOps administrator must deploy a solution that allows the Lambda function to access the new database and continue to access the internet. Which solution meets these requirements?

ACreate a new Lambda function with VPC access and an Elastic IP address. Attach the function to public subnets in two Availability Zones. Associate a security group with the Elastic IP address. Configure the security group outbound rules to allow Lambda to access the required resources.
BCreate a new Lambda function with VPC access and two public IP addresses. Attach the function to public subnets in the same Availability Zones that the database uses. Associate a security group with the function. Configure the security group inbound rules to allow Lambda to access the required resources.
CReconfigure the Lambda function for VPC access. Add NAT gateways to the public subnets in the VPAdd route table entries in the private subnets to route through the NAT gateways to the internet. Attach the function to the private subnets that support the database. Associate a security group with the function. Configure the security group outbound rules to allow Lambda to access the internet. (correct answer)
DReconfigure the Lambda function for VPC access. Attach the function to the private subnets. Add route table entries in the private subnets to route through the internet gateway to the internet. Associate a security group with the subnets. Configure the security group inbound rules to allow Lambda to access the required resources through the internet gateway.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Reconfigure the Lambda function for VPC access. Add NAT gateways to the public subnets in the VPAdd route table entries in the private subnets to route through the NAT gateways to the internet. Attach the function to...

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. A NAT gateway lets private subnet resources reach the internet for outbound traffic only. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 328

Single page →

Topic 1 · Question 328

A company is running production workloads that use a Multi-AZ deployment of an Amazon RDS for MySQL db.m6g.xlarge (general purpose) standard DB instance. Users report that they are frequently encountering a “too many connections” error. A SysOps administrator observes that the number of connections on the database is high. The SysOps administrator needs to resolve this issue while keeping code changes to a minimum. Which solution will meet these requirements MOST cost-effectively?

AModify the RDS for MySQL DB instance to a larger instance size.
BModify the RDS for MySQL DB instance to Amazon DynamoDB.
CConfigure RDS Proxy. Modify the application configuration file to use the RDS Proxy endpoint. (correct answer)
DModify the RDS for MySQL DB instance to a memory optimized DB instance.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Configure RDS Proxy. Modify the application configuration file to use the RDS Proxy endpoint.

Explanation

Amazon RDS Proxy pools and shares database connections to improve scalability and resilience. Amazon RDS is a managed relational database that handles patching, backups and failover. AWS Config tracks resource configuration changes and evaluates compliance. This option delivers the requirement at the lowest cost.

SOA-C02 Question 329

Single page →

Topic 1 · Question 329

A company has multiple Amazon EC2 instances that run a resource-intensive application in a development environment. A SysOps administrator is implementing a solution to stop these EC2 instances when they are not in use. Which solution will meet this requirement?

AAssess AWS CloudTrail logs to verify that there is no EC2 API activity. Invoke an AWS Lambda function to stop the EC2 instances.
BCreate an Amazon CloudWatch alarm to stop the EC2 instances when the average CPU utilization is lower than 5% for a 30-minute period. (correct answer)
CCreate an Amazon CloudWatch metric to stop the EC2 instances when the VolumeReadBytes metric is lower than 500 for a 30-minute period.
DUse AWS Config to invoke an AWS Lambda function to stop the EC2 instances based on resource configuration changes.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Create an Amazon CloudWatch alarm to stop the EC2 instances when the average CPU utilization is lower than 5% for a 30-minute period.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

SOA-C02 Question 330

Single page →

Topic 1 · Question 330

A company has a web application with a database tier that consists of an Amazon EC2 instance that runs MySQL. A SysOps administrator needs to minimize potential data loss and the time that is required to recover in the event of a database failure. What is the MOST operationally efficient solution that meets these requirements?

ACreate an Amazon CloudWatch alarm for the StatusCheckFailed_System metric to invoke an AWS Lambda function that stops and starts the EC2 instance.
BCreate an Amazon RDS for MySQL Multi-AZ DB instance. Use a MySQL native backup that is stored in Amazon S3 to restore the data to the new database. Update the connection string in the web application. (correct answer)
CCreate an Amazon RDS for MySQL Single-AZ DB instance with a read replica. Use a MySQL native backup that is stored in Amazon S3 to restore the data to the new database. Update the connection string in the web application
DUse Amazon Data Lifecycle Manager (Amazon DLM) to take a snapshot of the Amazon Elastic Block Store (Amazon EBS) volume every hour. In the event of an EC2 instance failure, restore the EBS volume from a snapshot.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: Create an Amazon RDS for MySQL Multi-AZ DB instance. Use a MySQL native backup that is stored in Amazon S3 to restore the data to the new database. Update the connection string in the web application.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS Backup centrally automates and manages backups across AWS services. Amazon RDS is a managed relational database that handles patching, backups and failover.

SOA-C02 Question 331

Single page →

Topic 1 · Question 331

A company uses AWS CloudFormation to manage a stack of Amazon EC2 instances on AWS. A SysOps administrator needs to keep the instances and all of the instances’ data, even if someone deletes the stack. Which solution will meet these requirements?

ASet the DeletionPolicy attribute to Snapshot for the EC2 instance resource in the CloudFormation template.
BAutomate backups by using Amazon Data Lifecycle Manager (Amazon DLM).
CCreate a backup plan in AWS Backup.
DSet the DeletionPolicy attribute to Retain for the EC2 instance resource in the CloudFormation template. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Set the DeletionPolicy attribute to Retain for the EC2 instance resource in the CloudFormation template.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS CloudFormation provisions infrastructure as code repeatably.

SOA-C02 Question 332

Single page →

Topic 1 · Question 332

Accompany wants to monitor the number of Amazon EC2 instances that it is running. The company also wants to automate a service quota increase when the number of instances reaches a specific threshold. Which solution meets these requirements?

ACreate an Amazon CloudWatch alarm to monitor Service Quotas. Configure the alarm to invoke an AWS Lambda function to request a quota increase when the alarm reaches the threshold. (correct answer)
BCreate an AWS Config rule to monitor Service Quotas. Call an AWS Lambda function to remediate the action and increase the quota.
CCreate an Amazon CloudWateh alarm to monitor the AWS Health Dashboard. Configure the alarm to invoke an AWS Lambda function to request a quota increase when the alarm reaches the threshold.
DCreate an Amazon CloudWatch alarm to monitor AWS Trusted Advisor service quotas. Configure the alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to increase the quota.

Reveal answer & explanation

Correct answer: A

The correct answer is A. Option A: Create an Amazon CloudWatch alarm to monitor Service Quotas. Configure the alarm to invoke an AWS Lambda function to request a quota increase when the alarm reaches the threshold.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 333

Single page →

Topic 1 · Question 333 · Select all that apply

A SysOps administrator is responsible for more than 50 Amazon EC2 instances that are deployed in a single production AWS account. The EC2 instances are running several different operating systems. The company's standards require patching to be completed at least once a month. The SysOps administrator wants to use AWS Systems Manager to reduce the number of hours the company spends on operating system patching each month. Which combination of steps should the SysOps administrator take to meet these requirements? (Choose three.)

AGroup similar EC2 instances together into resource groups by using AWS Resource Groups. (correct answer)
BCreate a schedule in Systems Manager Patch Manager. Specify the appropriate resource group as the target.
CSpecify Systems Manager Automation runbooks to patch the operating systems. Register the runbooks as tasks in the maintenance window. Specify the appropriate resource group as the target. (correct answer)
DCreate a Systems Manager Automation runbook to monitor and control the state of the patches required. Apply the runbook to Systems Manager Patch Manager.
ECreate a single Systems Manager maintenance window for each resource group. (correct answer)
FConfigure Systems Manager Fleet Manager to apply a Systems Manager Automation runbook to the appropriate resource group.

Reveal answer & explanation

Correct answer: A, C, E

The correct answer is A, C, E. Option A: Group similar EC2 instances together into resource groups by using AWS Resource Groups. Option C: Specify Systems Manager Automation runbooks to patch the operating systems. Register the runbooks as tasks in the maintenance window. Specify the appropriate resource group as the target. Option E: Create a single Systems Manager maintenance window for each resource group.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Systems Manager operates and automates management of fleets of resources.

SOA-C02 Question 334

Single page →

Topic 1 · Question 334

A company has multiple AWS accounts. The company uses AWS Organizations with an organizational unit (OU) for the production account and another OU for the development account. Corporate policies state that developers may use only approved AWS services in the production account. What is the MOST operationally efficient solution to control the production account?

ACreate a customer managed policy in AWS Identity and Access Management (IAM). Apply the policy to all users within the production account.
BCreate a job function policy in AWS Identity and Access Management (IAM). Apply the policy to all users within the production OU.
CCreate a service control policy (SCP). Apply the SCP to the production OU. (correct answer)
DCreate an IAM policy. Apply the policy in Amazon API Gateway to restrict the production account.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Create a service control policy (SCP). Apply the SCP to the production OU.

Explanation

Service Control Policies set guardrails on what accounts in an organization can do.

SOA-C02 Question 335

Single page →

Topic 1 · Question 335

A company has applications that process transaction requests multiple times each minute. The applications write transaction data to a single Amazon RDS DB instance. As the company begins to process more transactions, the company becomes concerned that it has no failover solution in place for disaster recovery (DR). The company needs the DB instance to fail over automatically without losing any committed transactions. Which solution will meet these requirements?

ACreate an RDS read replica in the same AWS Region. Configure an AWS Lambda function to promote the replica as the primary DB instance during a DR scenario.
BCreate an RDS read replica in a different AWS Region. Configure an AWS Lambda function to promote the replica as the primary DB instance during a DR scenario.
CModify the DB instance to be a Multi-AZ deployment. (correct answer)
DSetup an Amazon CloudWatch alarm that monitors the DB instance memory utilization with a threshold greater than 90%. Invoke an AWS Lambda function to restart the DB instance.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Modify the DB instance to be a Multi-AZ deployment. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SOA-C02 Question 336

Single page →

Topic 1 · Question 336

ASysOps administrator configures an application to run on Amazon EC2 instances behind an Application Load Balancer (ALB) in a simple scaling Auto Scaling group with the default settings. The Auto Scaling group is configured to use the RequestCountPerTarget metric for scaling. The SysOps administrator notices that the RequestCountPerTarget metric exceeded the specified limit twice in 180 seconds. How will the number of EC2 instances in this Auto Scaling group be affected in this scenario?

AThe Auto Scaling group will launch an additional EC2 instance every time the RequestCountPerTarget metric exceeds the predefined limit.
BThe Auto Scaling group will launch one EC2 instance and will wait for the default cooldown period before launching another instance. (correct answer)
CThe Auto Scaling group will send an alert to the ALB to rebalance the traffic and not add new EC2 instances until the load is normalized.
DThe Auto Scaling group will try to distribute the traffic among all EC2 instances before launching another instance.

Reveal answer & explanation

Correct answer: B

The correct answer is B. Option B: The Auto Scaling group will launch one EC2 instance and will wait for the default cooldown period before launching another instance.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

SOA-C02 Question 337

Single page →

Topic 1 · Question 337

A company has a secure website running on Amazon EC2 instances behind an Application Load Balancer (ALB). An SSL certificate from AWS Certificate Manager (ACM) is used on the ALB. Users with legacy web browsers are experiencing issues with the website. How should the SysOps administrator resolve these issues in the MOST operationally efficient manner?

ACreate a new SSL certificate in ACM and install the new certificate on the ALB to support legacy web browsers.
BCreate a second ALB and install a custom SSL certificate with a different domain name on the second ALB to support legacy web browsers.
CRemove the ALB from the configuration and install a custom SSL certificate on each web server.
DUpdate the SSL negotiation configuration of the ALB with a security policy that contains ciphers for legacy web browsers. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Update the SSL negotiation configuration of the ALB with a security policy that contains ciphers for legacy web browsers.

Explanation

AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 338

Single page →

Topic 1 · Question 338

A company hosts an internet web application on Amazon EC2 instances. The company is replacing the application with a new AWS Lambda function. During a transition period, the company must route some traffic to the legacy application and some traffic to the new Lambda function. The company needs to use the URL path of request to determine the routing. Which solution will meet these requirements?

AConfigure a Gateway Load Balancer to use the URL path to direct traffic to the legacy application and the new Lambda function.
BConfigure a Network Load Balancer to use the URL path to direct traffic to the legacy application and the new Lambda function.
CConfigure a Network Load Balancer to use a regular expression to match the URL path to direct traffic to the new Lambda function.
DConfigure an Application Load Balancer to use the URL path to direct traffic to the legacy application and the new Lambda function. (correct answer)

Reveal answer & explanation

Correct answer: D

The correct answer is D. Option D: Configure an Application Load Balancer to use the URL path to direct traffic to the legacy application and the new Lambda function.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. An Application Load Balancer distributes HTTP/HTTPS traffic and supports path/host routing. A load balancer distributes traffic across targets in multiple AZs for availability and scale.

SOA-C02 Question 339

Single page →

Topic 1 · Question 339

A SysOps administrator launches an Amazon EC2 Linux instance in a public subnet. When the instance is running, the SysOps administrator obtains the public IP address and attempts to remotely connect to the Instance multiple times. However, the SysOps administrator always receives a timeout error. Which action will allow the SysOps administrator to remotely connect to the instance?

AAdd a route table entry in the public subnet for the SysOps administrator's IP address.
BAdd an outbound network ACL rule to allow TCP port 22 for the SysOps administrator's IP address.
CModify the instance security group to allow inbound SSH traffic from the SysOps administrator's IP address. (correct answer)
DModify the instance security group to allow outbound SSH traffic to the SysOps administrator's IP address.

Reveal answer & explanation

Correct answer: C

The correct answer is C. Option C: Modify the instance security group to allow inbound SSH traffic from the SysOps administrator's IP address.

SOA-C02 Question 340

Single page →

Topic 1 · Question 340

SIMULATION - Instructions. If your AWS Management Console browser does not show that you are logged in to an AWS account, close the browser and relaunch the console by using the AWS Management Console shortcut from the VM desktop. If the copy-paste functionality is not working in your environment, refer to the instructions file on the VM desktop and use Ctrl+C, Ctrl+V or Command-C, Command-V. Create a solution to automate Amazon EBS Volume snapshots using Amazon Data Lifecycle Manager. 1. Use the us-east-2 Region for all resources. 2. Unless specified below, use the default configuration settings. 3. Create a snapshot of the existing EBS Volume named OriginalVolume. 4. Create a 1 GB EBS Volume from the snapshot with default encryption. 5. Add the tag Snapshot: true to the new EBS Volume. 6. Ensure that snapshots of all volumes with the tag Snapshot:true are taken every 6 hours and retained for 90 days. Do NOT use a cron expression. Ensure this is the only lifecycle policy that exists. Use the IAM role named DLMRole. Important: Click the Next button to complete this lab and continue to the next lab. Once you click the Next button, you will NOT be able to return to this lab.

Reveal answer & explanation

Correct answer: A

Refer to the exhibit image(s). The correct answer is A.

Showing questions 321–340 of 477 · Page 17 of 24