🔍

SOA-C02 — questions

Page 15 of 24 · 477 total questions.

SOA-C02 Question 281

Single page →
Topic 1 · Question 281

A SysOps administrator needs to provision a new fleet of Amazon EC2 Spot Instances in an Amazon EC2 Auto Scaling group. The Auto Scaling group will use a wide range of instance types. The configured fleet must come from pools that have the most availability for the number of instances that are launched. Which solution will meet these requirements?

  • ALaunch the Spot Instances up to the maximum capacity of the Auto Scaling group.
  • BLaunch the Spot Instances by using the diversified strategy.
  • CLaunch the Spot Instances by using the capacity optimized strategy. (correct answer)
  • DUse the Spot Instance advisor to help determine the best Spot allocation strategy.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Launch the Spot Instances by using the capacity optimized strategy.

Explanation

Spot Instances use spare capacity at a large discount, ideal for fault-tolerant or interruptible workloads.

SOA-C02 Question 282

Single page →
Topic 1 · Question 282

A SysOps administrator creates a custom Amazon Machine Image (AMI) in the eu-west-2 Region and uses the AMI to launch Amazon EC2 instances. The SysOps administrator needs to use the same AMI to launch EC2 instances in two other Regions: us-east-1 and us-east-2. What must the SysOps administrator do to use the custom AMI in the additional Regions?

  • ACopy the AMI to the additional Regions. (correct answer)
  • BMake the AMI public in the Community AMIs section of the AWS Management Console.
  • CShare the AMI to the additional Regions. Assign the required access permissions.
  • DCopy the AMI to a new Amazon S3 bucket. Assign access permissions to the AMI for the additional Regions.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Copy the AMI to the additional Regions.

SOA-C02 Question 283

Single page →
Topic 1 · Question 283

A company has many accounts in an organization in AWS Organizations. The company must automate resource provisioning from the organization’s management account to the member accounts. Which solution will meet this requirement?

  • ACreate an AWS CloudFormation change set. Deploy the change set to all member accounts.
  • BCreate an AWS CloudFormation nested stack. Deploy the nested stack to all member accounts.
  • CCreate an AWS CloudFormation stack set. Deploy the stack set to all member accounts. (correct answer)
  • DCreate an AWS Serverless Application Model (AWS SAM) template. Deploy the template to all member accounts.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an AWS CloudFormation stack set. Deploy the stack set to all member accounts.

Explanation

AWS CloudFormation provisions infrastructure as code repeatably.

SOA-C02 Question 284

Single page →
Topic 1 · Question 284

A company is building an interactive application for personal finance. The application stores financial data in Amazon S3, and the data must be encrypted. The company does not want to provide its own encryption keys. However, the company wants to maintain an audit trail that shows when an encryption key was used and who used the key. Which solution will meet these requirements?

  • AUse client-side encryption with client-provided keys. Upload the encrypted user data to Amazon S3.
  • BUse server-side encryption with S3 managed encryption keys (SSE-S3) to encrypt the user data on Amazon S3.
  • CUse server-side encryption with customer-provided encryption keys (SSE-C) to encrypt the user data on Amazon S3.
  • DUse server-side encryption with AWS KMS managed encryption keys (SSE-KMS) to encrypt the user data on Amazon S3. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use server-side encryption with AWS KMS managed encryption keys (SSE-KMS) to encrypt the user data on Amazon S3.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS KMS manages encryption keys and integrates with most AWS services for encryption at rest.

SOA-C02 Question 285

Single page →
Topic 1 · Question 285 · Select all that apply

A company has an AWS CloudFormation template that creates an Amazon S3 bucket. A user authenticates to the corporate AWS account with their Active Directory credentials and attempts to deploy the CloudFormation template. However, the stack creation fails. Which factors could cause this failure? (Choose two.)

  • AThe user’s IAM policy does not allow the cloudformation:CreateStack action. (correct answer)
  • BThe user’s IAM policy does not allow the cloudformation:CreateStackSet action.
  • CThe user’s IAM policy does not allow the s3:CreateBucket action. (correct answer)
  • DThe user’s IAM policy explicitly denies the s3:ListBucket action.
  • EThe user’s IAM policy explicitly denies the s3:PutObject action.
Reveal answer & explanation
Correct answer: A, C

The correct answer is A, C. Option A: The user’s IAM policy does not allow the cloudformation:CreateStack action. Option C: The user’s IAM policy does not allow the s3:CreateBucket action.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. AWS CloudFormation provisions infrastructure as code repeatably.

SOA-C02 Question 286

Single page →
Topic 1 · Question 286 · Select all that apply

An Amazon RDS for PostgreSQL DB cluster has automated backups turned on with a 7-day retention period. A SysOps administrator needs to create a new RDS DB cluster by using data that is no more than 24 hours old from the original DB cluster. Which solutions will meet these requirements with the LEAST operational overhead? (Choose two.)

  • AIdentify the most recent automated snapshot. Restore the snapshot to a new RDS DB cluster. (correct answer)
  • BBack up the database to Amazon S3 by using native database backup tools. Create a new RDS DB cluster and restore the data to the new RDS DB cluster.
  • CCreate a read replica instance in the original RDS DB cluster. Promote the read replica to a standalone DB cluster. (correct answer)
  • DCreate a new RDS DB cluster. Use AWS Database Migration Service (AWS DMS) to migrate data from the current RDS DB cluster to the newly created RDS DB cluster.
  • EUse the pg_dump utility to export data from the original RDS DB cluster to an Amazon EC2 instance. Create a new RDS DB cluster. Use the pg_restore utility to import the data from the EC2 instance to the new RDS DB cluster.
Reveal answer & explanation
Correct answer: A, C

The correct answer is A, C. Option A: Identify the most recent automated snapshot. Restore the snapshot to a new RDS DB cluster. Option C: Create a read replica instance in the original RDS DB cluster. Promote the read replica to a standalone DB cluster.

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover.

SOA-C02 Question 287

Single page →
Topic 1 · Question 287 · Select all that apply

A company is managing a website with a global user base hosted on Amazon EC2 with an Application Load Balancer (ALB). To reduce the load on the web servers, a SysOps administrator configures an Amazon CloudFront distribution with the ALB as the origin. After a week of monitoring the solution, the administrator notices that requests are still being served by the ALB and there is no change in the web server load. What are possible causes for this problem? (Choose two.)

  • ACloudFront does not have the ALB configured as the origin access identity.
  • BThe DNS is still pointing to the ALB instead of the CloudFront distribution. (correct answer)
  • CThe ALB security group is not permitting inbound traffic from CloudFront.
  • DThe default, minimum, and maximum Time to Live (TTL) are set to 0 seconds on the CloudFront distribution. (correct answer)
  • EThe target groups associated with the ALB are configured for sticky sessions.
Reveal answer & explanation
Correct answer: B, D

The correct answer is B, D. Option B: The DNS is still pointing to the ALB instead of the CloudFront distribution. Option D: The default, minimum, and maximum Time to Live (TTL) are set to 0 seconds on the CloudFront distribution.

Explanation

Amazon CloudFront caches content at edge locations to reduce latency and offload origins.

SOA-C02 Question 288

Single page →
Topic 1 · Question 288 · Select all that apply

A SysOps administrator needs to configure the Amazon Route 53 hosted zone for example.com and www.example.com to point to an Application Load Balancer (ALB). Which combination of actions should the SysOps administrator take to meet these requirements? (Choose two.)

  • AConfigure an A record for example.com to point to the IP address of the ALB.
  • BConfigure an A record for www.example.com to point to the IP address of the ALB.
  • CConfigure an alias record for example.com to point to the CNAME of the ALB. (correct answer)
  • DConfigure an alias record for www.example.com to point to the Route 53 example.com record. (correct answer)
  • EConfigure a CNAME record for example.com to point to the CNAME of the ALB.
Reveal answer & explanation
Correct answer: C, D

The correct answer is C, D. Option C: Configure an alias record for example.com to point to the CNAME of the ALB. Option D: Configure an alias record for www.example.com to point to the Route 53 example.com record.

Explanation

Amazon Route 53 provides DNS with health checks and routing policies for availability and latency. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 289

Single page →
Topic 1 · Question 289

A company has a hybrid environment. The company has set up an AWS Direct Connect connection between the company's on-premises data center and a workload that runs in a VPC. The company uses Amazon Route 53 for DNS on AWS. The company uses a private hosted zone to manage DNS names for a set of services that are hosted on AWS. The company wants the on-premises servers to use Route 53 for DNS resolution of the private hosted zone. Which solution will meet these requirements?

  • ACreate a Route 53 inbound endpoint. Ensure that security groups and routing allow the traffic from the on-premises data center. Configure the DNS server on the on-premises network to conditionally forward DNS queries for the private hosted zone's domain name to the IP addresses of the inbound endpoint. (correct answer)
  • BCreate a Route 53 outbound endpoint. Ensure that security groups and routing allow the traffic from the VPC. Configure the DNS server on the on-premises network to conditionally forward DNS queries for the private hosted zone’s domain name to the IP addresses of the outbound endpoint.
  • CEdit the private hosted zone in Route 53 with a TXT record that references the on-premises DNS servers. Configure the DNS server on the on-premises network to conditionally forward DNS queries for the private hosted zone’s domain name to the base of the VPC CIDR IPv4 network range, plus two.
  • DEdit the private hosted zone in Route 53 with a PTR record that references the on-premises DNS servers. Configure the DNS server on the on-premises network to conditionally forward DNS queries for the private hosted zone’s domain name to the base of the VPC CIDR IPv4 network range, plus two.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create a Route 53 inbound endpoint. Ensure that security groups and routing allow the traffic from the on-premises data center. Configure the DNS server on the on-premises network to conditionally forward DNS queries...

Explanation

Amazon Route 53 provides DNS with health checks and routing policies for availability and latency. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 290

Single page →
Topic 1 · Question 290

A SysOps administrator is evaluating Amazon Route 53 DNS options to address concerns about high availability for an on-premises website. The website consists of two servers: a primary active server and a secondary passive server. Route 53 should route traffic to the primary server if the associated health check returns 2xx or 3xx HTTP codes. All other traffic should be directed to the secondary passive server. The failover record type, set ID, and routing policy have been set appropriately for both primary and secondary servers. Which next step should be taken to configure Route 53?

  • ACreate an A record for each server. Associate the records with the Route 53 HTTP health check. (correct answer)
  • BCreate an A record for each server. Associate the records with the Route 53 TCP health check.
  • CCreate an alias record for each server with evaluate target health set to yes. Associate the records with the Route 53 HTTP health check.
  • DCreate an alias record for each server with evaluate target health set to yes. Associate the records with the Route 53 TCP health check.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create an A record for each server. Associate the records with the Route 53 HTTP health check.

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover. Amazon Route 53 provides DNS with health checks and routing policies for availability and latency.

SOA-C02 Question 291

Single page →
Topic 1 · Question 291

An Amazon EC2 instance is running an application that uses Amazon Simple Queue Service (Amazon SQS) queues. A SysOps administrator must ensure that the application can read, write, and delete messages from the SQS queues. Which solution will meet these requirements in the MOST secure manner?

  • ACreate an IAM user with an IAM policy that allows the sqs:SendMessage permission, the sqs:ReceiveMessage permission, and the sqs:DeleteMessage permission to the appropriate queues. Embed the IAM user's credentials in the application's configuration
  • BCreate an IAM user with an IAM policy that allows the sqs:SendMessage permission, the sqs:RecelveMessage permission, and the sqs:DeleteMessage permission to the appropriate queues. Export the IAM user's access key and secret access key as environment variables on the EC2 instance.
  • CCreate and associate an IAM role that allows EC2 instances to call AWS services. Attach an IAM policy to the role that allows sqs:* permissions to the appropriate queues.
  • DCreate and associate an IAM role that allows EC2 instances to call AWS services. Attach an IAM policy to the role that allows the sqs:SendMessage permission, the sqs:ReceiveMessage permission, and the sqs:DeleteMessage permission to the appropriate queues. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create and associate an IAM role that allows EC2 instances to call AWS services. Attach an IAM policy to the role that allows the sqs:SendMessage permission, the sqs:ReceiveMessage permission, and the sqs:DeleteMessag...

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon SQS is a fully managed message queue that decouples components and absorbs traffic spikes. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials.

SOA-C02 Question 292

Single page →
Topic 1 · Question 292

A SysOps administrator needs to configure an Amazon S3 bucket to host a web application. The SysOps administrator has created the S3 bucket and has copied the static files for the web application to the S3 bucket. The company has a policy that all $3 buckets must not be public. What should the SysOps administrator do to meet these requirements?

  • ACreate an Amazon CloudFront distribution. Configure the S3 bucket as an origin with an origin access identity (OAI). Give the OAI the s3:GetObject permission in the S3 bucket policy. (correct answer)
  • BConfigure static website hosting in the S3 bucket. Use Amazon Route 53 to create a DNS CNAME to point to the S3 website endpoint.
  • CCreate an Application Load Balancer (ALB). Change the protocol to HTTPS in the ALB listener configuration. Forward the traffic to the S3 bucket.
  • DCreate an accelerator in AWS Global Accelerator. Set up a listener configuration for port 443. Set the endpoint type to forward the traffic to the S3 bucket.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create an Amazon CloudFront distribution. Configure the S3 bucket as an origin with an origin access identity (OAI). Give the OAI the s3:GetObject permission in the S3 bucket policy.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon CloudFront caches content at edge locations to reduce latency and offload origins. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 293

Single page →
Topic 1 · Question 293 · Select all that apply

A company is building a web application on AWS. The company is using Amazon CloudFront with a domain name of www.example.com. All traffic to CloudFront must be encrypted in transit. The company already has provisioned an SSL certificate for www.example.com in AWS Certificate Manager (ACM). Which combination of steps should a SysOps administrator take to encrypt the traffic in transit? (Choose two.)

  • AFor each cache behavior in the CloudFront distribution, modify the Viewer Protocol Policy setting to redirect HTTP to HTTPS. (correct answer)
  • BFor each cache behavior in the CloudFront distribution, modify the Viewer Protocol Policy setting to allow HTTP and HTTPS.
  • CEnter the alternate domain name (CNAME) of www.example.com for the CloudFront distribution. Select the custom SSL certificate. (correct answer)
  • DConfigure an AWS WAF web ACL for the CloudFront distribution.
  • EConfigure CloudFront Origin Shield for the CloudFront origin.
Reveal answer & explanation
Correct answer: A, C

The correct answer is A, C. Option A: For each cache behavior in the CloudFront distribution, modify the Viewer Protocol Policy setting to redirect HTTP to HTTPS. Option C: Enter the alternate domain name (CNAME) of www.example.com for the CloudFront distribution. Select the custom SSL certificate.

Explanation

Amazon CloudFront caches content at edge locations to reduce latency and offload origins.

SOA-C02 Question 294

Single page →
Topic 1 · Question 294

A company runs an application on hundreds of Amazon EC2 instances in three Availability Zones. The application calls a third-party API over the public internet. A SysOps administrator must provide the third party with a list of static IP addresses so that the third party can allow traffic from the application. Which solution will meet these requirements?

  • AAdd a NAT gateway in the public subnet of each Availability Zone. Make the NAT gateway the default route of all private subnets in those Availability Zones. (correct answer)
  • BAllocate one Elastic IP address in each Availability Zone. Associate the Elastic IP address with all the instances in the Availability Zone.
  • CPlace the instances behind a Network Load Balancer (NLB). Send the traffic to the internet through the private IP address of the NLB.
  • DUpdate the main route table to send the traffic to the internet through an Elastic IP address that is assigned to each instance.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Add a NAT gateway in the public subnet of each Availability Zone. Make the NAT gateway the default route of all private subnets in those Availability Zones.

Explanation

A NAT gateway lets private subnet resources reach the internet for outbound traffic only.

SOA-C02 Question 295

Single page →
Topic 1 · Question 295

A company manages its multi-account environment by using AWS Organizations. The company needs to automate the creation of daily incremental backups of any Amazon Elastic Block Store (Amazon EBS) volume that is marked with a Lifecycle: Production tag in one of its primary AWS accounts. The company wants to prevent users from using Amazon EC2 * permissions to delete any of these production snapshots. What should a SysOps administrator do to meet these requirements?

  • ACreate a daily snapshot of all EBS volumes by using Amazon Data Lifecycle Manager. Specify Lifecycle as the tag key. Specify Production as the tag value.
  • BAssociate a service control policy (SCP) with the account to deny users the ability to delete EBS snapshots. Create an Amazon EventBridge rule with a 24-hour cron schedule. Configure EBS Create Snapshot as the target. Target all EBS volumes with the specified tags.
  • CCreate a daily snapshot of all EBS volumes by using AWS Backup. Specify Lifecycle as the tag key. Specify Production as the tag value. (correct answer)
  • DCreate a daily Amazon Machine Image (AMI) of every production EC2 instance within the AWS account by using Amazon Data Lifecycle Manager.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create a daily snapshot of all EBS volumes by using AWS Backup. Specify Lifecycle as the tag key. Specify Production as the tag value.

Explanation

Amazon EBS provides block storage attached to a single EC2 instance. AWS Backup centrally automates and manages backups across AWS services.

SOA-C02 Question 296

Single page →
Topic 1 · Question 296

A company hosts a Windows-based file server on a fleet of Amazon EC2 instances across multiple Availability Zones. The current setup does not allow application servers to access files simultaneously from the EC2 fleet. Which solution will allow this access in the MOST operationally efficient way?

  • ACreate an Amazon Elastic File System (Amazon EFS) Multi-AZ file system. Copy the files to the EFS file system. Connect the EFS file system to mount points on the application servers.
  • BCreate an Amazon FSx for Windows File Server Multi-AZ file system. Copy the files to the Amazon FSx file system. Adjust the connections from the application servers to use the share that the Amazon FSx file system exposes. (correct answer)
  • CCreate an Amazon Elastic Block Store (Amazon EBS) volume that has EBS Multi-Attach enabled. Create an Auto Scaling group for the Windows file server. Use a script in the file server's user data to attach the SharedFileAccess tag to the EBS volume during launch.
  • DCreate two Amazon FSx for Windows File Server file systems. Configure Distributed File System (DFS) replication between the file systems. Copy the files to the Amazon FSx file systems. Adjust the connections from the application servers to use the shares that the Amazon FSx file systems expose.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create an Amazon FSx for Windows File Server Multi-AZ file system. Copy the files to the Amazon FSx file system. Adjust the connections from the application servers to use the share that the Amazon FSx file system exp...

Explanation

Amazon FSx for Windows File Server provides fully managed SMB/Windows shared file storage. Amazon FSx provides fully managed third-party file systems. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SOA-C02 Question 297

Single page →
Topic 1 · Question 297

A company has deployed an application on Amazon EC2 instances in a single VPC. The company has placed the EC2 instances in a private subnet in the VPC. The EC2 instances need access to Amazon S3 buckets that are in the same AWS Region as the EC2 instances. A SysOps administrator must provide the EC2 instances with access to the S3 buckets without requiring any changes to the EC2 instances or the application. The EC2 instances must not have access to the internet. Which solution will meet these requirements?

  • ACreate an S3 gateway endpoint that uses the default gateway endpoint policy. Associate the private subnet with the gateway endpoint. (correct answer)
  • BCreate an S3 interface endpoint. Associate the EC2 instances with the interface endpoint.
  • CConfigure a NAT gateway. Associate the private subnet with the NAT gateway.
  • DConfigure a proxy EC2 instance. Update the private subnet route tables to route traffic through the proxy EC2 instance. Configure the proxy to route all S3 requests to the target S3 bucket.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create an S3 gateway endpoint that uses the default gateway endpoint policy. Associate the private subnet with the gateway endpoint.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed.

SOA-C02 Question 298

Single page →
Topic 1 · Question 298

A SysOps administrator manages the caching of an Amazon CloudFront distribution that serves pages of a website, The SysOps administrator needs to configure the distribution so that the TTL of individual pages can vary. The TTL of the individual pages must remain within the maximum TLL and the minimum TTL that are set for the distribution. Which solution will meet these requirements?

  • ACreate an AWS Lambda function that calls the Createlnvalidation API operation when a change in cache time is necessary.
  • BAdd a Cache-Control: max-age directive to the object at the origin when content is being returned to CloudFront. (correct answer)
  • CAdd a no-cache header through a Lambda@Edge function in response to the Viewer response.
  • DAdd.an Expires header through a CloudFront function in response to the Viewer response.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Add a Cache-Control: max-age directive to the object at the origin when content is being returned to CloudFront.

Explanation

Amazon CloudFront caches content at edge locations to reduce latency and offload origins.

SOA-C02 Question 299

Single page →
Topic 1 · Question 299

A company has a public web application that experiences rapid traffic increases after advertisements appear on local television. The application runs on Amazon EC2 instances that are in an Auto Scaling group. The Auto Scaling group is not keeping up with the traffic surges after an advertisement runs. The company often needs to scale out to 100 EC2 instances during the traffic surges. The instance startup times are lengthy because of a boot process that creates machine-specific data caches that are unique to each instance. The exact timing of when the advertisements will appear on television is not known. A SysOps administrator must implement a solution so that the application can function properly during the traffic surges. Which solution will meet these requirements?

  • ACreate e warm pool. Keep enough instances in the Stopped state to meet the increased demand. (correct answer)
  • BStart 100 instances. Allow the boot process to finish running. Store this data on the instance store volume before stopping the instances.
  • CIncrease the value of the instance warmup time in the scaling policy
  • DUse predictive scaling for the Auto Scaling group.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create e warm pool. Keep enough instances in the Stopped state to meet the increased demand.

SOA-C02 Question 300

Single page →
Topic 1 · Question 300

A company hosts an internal application on Amazon EC2 On-Demand Instances behind an Application Load Balancer (ALB). The instances are in an Amazon EC2 Auto Scaling group. Employees use the application to provide product prices to potential customers. The Auto Scaling group is configured with a dynamic scaling policy and tracks average CPU utilization of the instances. Employees have noticed that sometimes the application becomes slow or unresponsive. A SysOps administrator finds that some instances are experiencing a high CPU load. The Auto Scaling group cannot scale out because the company is reaching the EC2 instance service quota. The SysOps administrator needs to implement a solution that provides a notification when the company reaches 70% or more of the EC2 instance service quota. Which solution will meet these requirements in the MOST operationally efficient manner?

  • ACreate an AWS Lambda function that lists the EC2 instances, counts the EC2 instances, and compares the total number against the applied quota value by using the Service Quotas API. Configure the Lambda function to publish an Amazon Simple Notification Service (Amazon SNS) notification if the quota utilization is equal to or greater than 70%. Create an Amazon EventBridge rule to invoke the Lambda function.
  • BCreate an AWS Lambda function that lists the EC2 instances, counts the EC2 instances, and compares the total number against the applied quota value by using the Amazon CloudWatch Metrics API. Configure the Lambda function to publish an Amazon Simple Notification Service (Amazon SNS) notification if the quota utilization is equal to or greater than 70%. Create an Amazon EventBridge rule to invoke the Lambda function.
  • CUse the Service Quotas console to create an Amazon CloudWatch alarm for the EC2 instances. Configure the alarm with quota utilization equal to or greater than 70%. Configure the alarm to publish an Amazon Simple Notification Service (Amazon SNS) notification when the alarm enters ALARM state. (correct answer)
  • DCreate an Amazon CloudWatch alarm. Configure the alarm with a threshold of 70% for the CPUUtilization metric for the EC2 instances. Configure the alarm to publish an Amazon Simple Notification Service (Amazon SNS) notification when the alarm enters ALARM state.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use the Service Quotas console to create an Amazon CloudWatch alarm for the EC2 instances. Configure the alarm with quota utilization equal to or greater than 70%. Configure the alarm to publish an Amazon Simple Notif...

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

Showing questions 281–300 of 477 · Page 15 of 24