🔍

SOA-C02 — questions

Page 16 of 24 · 477 total questions.

SOA-C02 Question 301

Single page →
Topic 1 · Question 301

A SysOps administrator needs to update an AWS account name. What should the SysOps administrator do to accomplish this goal?

  • AAdd the AdministratorAccess policy to the SysOps administrator’s IAM user.
  • BAdd the AWS_ConfigureRole policy to the SysOps administrator’s IAM user.
  • CChange the AWS account name through the AWS Trusted Advisor interface.
  • DSign in as the AWS account root user to make the change. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Sign in as the AWS account root user to make the change.

SOA-C02 Question 302

Single page →
Topic 1 · Question 302

A team of developers is using several Amazon S3 buckets as centralized repositories. Users across the world upload large sets of files to these repositories. The development team's applications later process these files. A SysOps administrator sets up a new S3 bucket, DOC-EXAMPLE-BUCKET, to support a new workload, The rew S3 bucket also receives regular uploads cf large sets of files from users worldwide. When the new S3 bucket is put into production, the upload performance from certain geographic areas is lower than the upload performance that the existing $3 buckets provide What should the SysOps administrator do to remediate this issue?

  • AProvision an Amazon ElastiCache for Redis cluster for the new S3 bucket. Provide the developers with the configuration endpoint of the cluster for use in their API calls
  • BAdd the new S3 bucket to a new Amazon CloudFront distribution. Provide the developers with the domain name of the new distribution for use in their API calls.
  • CEnable S3 Transfer Acceleration for the new S3 bucket. Verify that the developers are using the DOC-EXAMPLE-BUCKET.s3-accelerate.amazonaws.com endpoint name in their API calls. (correct answer)
  • DUse S3 multipart upload for the new S3 bucket. Verify that the developers are using Region-specific S3 endpoint names such as DOC-EXAMPLE-BUCKETS3, [Region] amazonaws.com in their API calls.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Enable S3 Transfer Acceleration for the new S3 bucket. Verify that the developers are using the DOC-EXAMPLE-BUCKET.s3-accelerate.amazonaws.com endpoint name in their API calls.

Explanation

S3 Transfer Acceleration speeds up long-distance uploads to S3 over the AWS edge network. Amazon S3 provides durable, scalable object storage that is fully managed.

SOA-C02 Question 303

Single page →
Topic 1 · Question 303

A SysOps administrator wants to use AWS Systems Manager Patch Manager to automate the process of patching Amazon EC2 Windows instances. The SysOps administrator wants to ensure that patches are auto-approved 2 days after the release date for development instances. Patches also must be auto-approved 5 days after the release date for production instances. Maintenance must occur only during a 2-hour window for all instances. Which solution will meet these requirements?

  • AUse tags to identify development instances and production instances. In Patch Manager, create two patch groups and one patch baseline. Add an auto-approval delay to each patch group. Create a single maintenance window.
  • BUse tags to identify development instances and production instances. In Patch Manager, create two patch groups and two patch baselines. Specify an auto-approval delay in each of the patch baselines. Create a single maintenance window. (correct answer)
  • CUse tags to identity development instances and production instances. In Patch Manager, create two patch groups and one patch baseline, Create two separate maintenance windows, each with an auto-approval delay.
  • DUse tags to identify development instances. In Patch Manager, create one patch group and one patch baseline. Specify auto-approval delays in the patch baseline, Add development instances to the new patch group. Use predefined Patch Manager patch baselines for all remaining instances. Create a single maintenance window.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use tags to identify development instances and production instances. In Patch Manager, create two patch groups and two patch baselines. Specify an auto-approval delay in each of the patch baselines. Create a single ma...

SOA-C02 Question 304

Single page →
Topic 1 · Question 304

A SysOps administrator must analyze Amazon CloudWatch logs across 10 AWS Lambda functions for historical errors. The logs are in JSON format and are stored in Amazon S3. Errors sometimes do not appear in the same field, but all errors begin with the same string prefix. What is the MOST operationally efficient way for the SysOps administrator to analyze the log files?

  • AUse S3 Select to write a query to search for errors. Run the query across all log groups of interest.
  • BCreate an AWS Glue processing job to index the logs of interest. Run a query in Amazon Athena to search for errors. (correct answer)
  • CUse Amazon CloudWatch Logs Insights to write a query to search for errors. Run the query across all log groups of interest.
  • DUse Amazon CloudWatch Contributor Insights to create a rule. Apply the rule across all log groups of interest.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create an AWS Glue processing job to index the logs of interest. Run a query in Amazon Athena to search for errors.

Explanation

Amazon Athena runs serverless SQL queries directly on data in Amazon S3 with no infrastructure to manage. AWS Glue is a serverless ETL and data-catalog service that prepares and integrates data.

SOA-C02 Question 305

Single page →
Topic 1 · Question 305

A company has a policy that all Amazon EC2 instance logs must be published to Amazon CloudWatch Logs. A SysOps administrator is troubleshooting an EC2 instance that is running Amazon Linux 2. The EC2 instance is not publishing logs to CloudWatch Logs. The Amazon CloudWatch agent is running on the EC2 instance, and the agent configuration file is correct. What should the SysOps administrator do to resolve the issue?

  • AConfigure the AWS CLI on the EC2 instance. Create a cron job that calls the PutLogEvents API operation to push the log files to CloudWatch every 5 minutes.
  • BInspect the retention period of the CloudWatch Logs log group. Ensure that the retention period is set to a value that is greater than 1 day.
  • CSet up an Amazon Kinesis data stream that is running in the same AWS Region as the EC2 instance. Configure the CloudWatch agent on the EC2 instance to send CloudWatch events to the data stream.
  • DEnsure that the IAM role that is attached to the EC2 instance has permissions in CloudWatch Logs for the CreateLogGroup, CreateLogStream, PutLogEvents, and DescribeLogStreams actions. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Ensure that the IAM role that is attached to the EC2 instance has permissions in CloudWatch Logs for the CreateLogGroup, CreateLogStream, PutLogEvents, and DescribeLogStreams actions.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

SOA-C02 Question 306

Single page →
Topic 1 · Question 306

A company runs a workload on an Amazon EC2 instance. The workload needs a temporary cache that contains data that changes frequently. The workload does not need to retain the cache across instance restarts. Which storage option will provide the HIGHEST performance for the cache?

  • AGeneral Purpose SSD (gp3) Amazon Elastic Block Store (Amazon EBS) volume
  • BProvisioned IOPS SSD (io2) Amazon Elastic Block Store (Amazon EBS) volume
  • CThroughput Optimized HDD (st1) Amazon Elastic Block Store (Amazon EBS) volume
  • DEC2 instance store (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: EC2 instance store

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

SOA-C02 Question 307

Single page →
Topic 1 · Question 307

A company runs multiple workloads across an organization in AWS Organizations. The company's finance team needs detailed dashboards to track cost changes and provide detailed cost metrics. The finance team needs to track trends as granular as every hour. What should a SysOps administrator do to meet these requirements in the MOST operationally efficient way?

  • AGenerate Amazon CloudWatch dashboards by using CloudWatch insights and AWS Cost Explorer data.
  • BGenerate an AWS Cost and Usage Report. Store the report in Amazon S3. Use Amazon Athena to query the data. Use Amazon QuickSight to develop dashbosrds based on the data in the AWS Cost and Usage Report. (correct answer)
  • CCreate an AWS Lambda function that runs once a day and assumes a role in every account in the organization. Configure the Lambda function to read AWS Cost Explorer data in each account and to store the cost data in an Amazon S3 bucket. Use Amazon Athena to query the data. Use Amazon QuickSight to display the data in dashboards.
  • DCreate an IAM user for the finance team. Grant permissions to the IAM user to view AWS Cost Explorer data and billing data in the management account.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Generate an AWS Cost and Usage Report. Store the report in Amazon S3. Use Amazon Athena to query the data. Use Amazon QuickSight to develop dashbosrds based on the data in the AWS Cost and Usage Report.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon RDS is a managed relational database that handles patching, backups and failover. Amazon Athena runs serverless SQL queries directly on data in Amazon S3 with no infrastructure to manage.

SOA-C02 Question 308

Single page →
Topic 1 · Question 308

A company has a core application that must run 24 hours a day, 7 days a week. The application uses Amazon EC2. AWS Fargate, and AWS Lambda. The company uses a combination of operating systems across different AWS Regions. The company needs to maximize cost savings while committing to a pricing model that offers flexibility to make changes. What should the company do to meet these requirements?

  • APurchase a Compute Savings Plan that is based on Savings Plans recommendations (correct answer)
  • BPurchase an EC2 Instance Savings Plan that covers the EC2 instance types and the Fargate and Lambda vCPU equivalents.
  • CPurchase a Reserved Instance for the instance types, operating systems, Region, and tenancy,
  • DUse EC2 Spot Instances that match the type and size of existing instances that run in each Region.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Purchase a Compute Savings Plan that is based on Savings Plans recommendations

Explanation

Savings Plans reduce cost for consistent compute usage in exchange for a usage commitment.

SOA-C02 Question 309

Single page →
Topic 1 · Question 309

A company’s architecture team must receive immediate email notification whenever new Amazon EC2 instances are launched in the company's main AWS production account. ‘What should a SysOps administrator do to meet this requirement?

  • ACreate a user data script that sends an email message through a smart host connector. Include the architecture team's email address in the user data script as the recipient. Ensure that all new EC2 instances include the user data script as part of a standardized build process.
  • BCreate an Amazon Simple Notification Service (Amazon SNS) topic and a subscription that uses the email protocol. Enter the architecture team's email address as the subscriber. Create an Amazon EventBridge rule that reacts when EC2 instances are launched. Specify the SNS topic as the rule's target. (correct answer)
  • CCreate an Amazon Simple Queue Service (Amazon SQS) queue and a subscription that uses the email protocol. Enter the architecture team's email address as the subscriber. Create an Amazon EventBridge rule that reacts when EC2 instances are launched. Specify the SQS queue as the rule's target.
  • DCreate an Amazon Simple Notification Service (Amazon SNS) topic. Configure AWS Systems Manager to publish EC2 events to the SNS topic. Create an AWS Lambda function to poll the SNS topic. Configure the Lambda function to send any messages to the architecture team's email address.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create an Amazon Simple Notification Service (Amazon SNS) topic and a subscription that uses the email protocol. Enter the architecture team's email address as the subscriber. Create an Amazon EventBridge rule that re...

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures.

SOA-C02 Question 310

Single page →
Topic 1 · Question 310

A SysOps administrator manages an AWS account where developers run CPU-intensive tasks on Amazon EC2 instances. The tasks can take several days to finish running and sometimes need to be repeated several times. The developers often forget to terminate the instances when the tasks are complete. The SysOps administrator needs to implement a solution to monitor EC2 CPU utilization and automatically terminate underutilized instances. Which solution will meet these requirements?

  • AConfigure an Amazon GuardDuty finding that is based on EC2 CPU utilization. Associate an AWS Lambda function with the GuardDuty finding to terminate any instances that are identified as idle.
  • BConfigure an Amazon Simple Notification Service (Amazon SNS) topic to receive EC2 utilization messages from the AWS Health Dashboard. Create an AWS Lambda function. Subscribe the Lambda function to the SNS topic. Use the ec2.stop_instances operation to terminate idle instances.
  • CConfigure a Low Utilization Amazon EC2 Instances check in AWS Trusted Advisor to publish status changes to an Amazon Simple Notification Service (Amazon SNS) topic. Create an AWS Lambda function. Subscribe the Lambda function to the SNS topic. Use the ec2.stop_instances operation to terminate idle instances.
  • DConfigure an Amazon EventBridge rule for the Low Utilization Amazon EC2 Instances check in AWS Trusted Advisor. Select the EC2 Terminatelnstances API call as the target. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Configure an Amazon EventBridge rule for the Low Utilization Amazon EC2 Instances check in AWS Trusted Advisor. Select the EC2 Terminatelnstances API call as the target.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 311

Single page →
Topic 1 · Question 311

A company has several business units that want to use Amazon EC2. The company wants to require all business units to provision their EC2 instances by using only approved EC2 instance configurations. What should a SysOps administrator do to implement this requirement?

  • ACreate an EC2 instance launch configuration. Allow the business units to launch EC2 instances by specifying this launch configuration in the AWS Management Console.
  • BDevelop an IAM policy that limits the business units to provision EC2 instances only. Instruct the business units to launch instances by using an AWS CloudFormation template.
  • CPublish a product and launch constraint role for EC2 instances by using AWS Service Catalog. Allow the business units to perform actions in AWS Service Catalog only. (correct answer)
  • DShare an AWS CloudFormation template with the business units. Instruct the business units to pass a role to AWS CloudFormation to allow the service to manage EC2 instances.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Publish a product and launch constraint role for EC2 instances by using AWS Service Catalog. Allow the business units to perform actions in AWS Service Catalog only.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

SOA-C02 Question 312

Single page →
Topic 1 · Question 312

A SysOps administrator needs to secure the credentials for an Amazon RDS database that is created by an AWS CloudFormation template. The solution must encrypt the credentials and must support automatic rotation. Which solution will meet these requirements?

  • ACreate an AWS::SecretsManager::Secret resource in the CloudF ormation template. Reference the credentials in the AWS::RDS::DBInstance resource by using the resolve:secretsmanager dynamic reference. (correct answer)
  • BCreate an AWS::SecretsManager::Secret resource in the CloudFormation template. Reference the credentials in the AWS::RDS::DBInstance resource by using the resolve:ssm-secure dynamic reference.
  • CCreate an AWS::SSM::Parameter resource in he CloudFormation template. Reference the credentias in the AWS::RDS::DBInstance resource by using the resolve:ssm dynamic reference.
  • DCreate parameters for the database credentials in the CloudFormation template. Use the Ref intrinsic function to provide the credentials to the AWS::RDS::DBInstance resource.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create an AWS::SecretsManager::Secret resource in the CloudF ormation template. Reference the credentials in the AWS::RDS::DBInstance resource by using the resolve:secretsmanager dynamic reference.

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover.

SOA-C02 Question 313

Single page →
Topic 1 · Question 313

A company wants to track its expenditures for Amazon EC2 and Amazon RDS within AWS. The company decides to implement more rigorous tagging requirements for resources in its AWS accounts. A SysOps administrator needs to identify all noncompliant resources. What is the MOST operationally efficient solution that meets this requirement?

  • ACreate a rule in Amazon EventBridge that invokes a custom AWS Lambda function that will evaluate all created or updated resources for the specified tags.
  • BCreate a rule in AWS Config that invokes a custom AWS Lambda function that will evaluate all resources for the specified tags.
  • CCreate a rule in AWS Config with the required-tags managed rule to evaluate all resources for the specified tags. (correct answer)
  • DCreate a rule in Amazon EventBridge with a managed rule to evaluate all created or updated resources for the specified tags.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create a rule in AWS Config with the required-tags managed rule to evaluate all resources for the specified tags.

Explanation

AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 314

Single page →
Topic 1 · Question 314 · Select all that apply

A company creates a new Amazon FSx for Windows File Server file system. To help manage costs, the company configures the storage capacity for the file system with minimal room for growth. The company creates an Amazon Simple Notification Service (Amazon SNS) topic in the same AWS account whore the file system resides. The company subscribes a SysOps administrator's email address to the SNS topic. The SysOps administrator needs to receive email notification when the file system has less than 100 GB of space available. Which combination of steps should the SysOps administrator take to meet this requirement? (Choose two.)

  • ACreate an Amazon EventBridge rule for when the FreeStorageCapacity metric is less than or equal to 100,000,000,000 bytes (100 GB).
  • BCreate an Amazon CloudWatch alarm for when the FreeStorageCapacity metric is less than or equal to 100,000,000,000 bytes (100 GB). (correct answer)
  • CCreate an AWS Lambda function that will run when the Amazon CloudWatch alarm enters ALARM state. Configure the Lambda function to publish to the SNS topic.
  • DConfigure the Amazon EventBridge rule's alarm action to publish to the SNS topic when the rule enters ALARM state.
  • EConfigure the Amazon CloudWatch alarm action to publish to the SNS topic when the alarm enters ALARM state. (correct answer)
Reveal answer & explanation
Correct answer: B, E

The correct answer is B, E. Option B: Create an Amazon CloudWatch alarm for when the FreeStorageCapacity metric is less than or equal to 100,000,000,000 bytes (100 GB). Option E: Configure the Amazon CloudWatch alarm action to publish to the SNS topic when the alarm enters ALARM state.

Explanation

Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 315

Single page →
Topic 1 · Question 315

A company decides to stop non-production Amazon EC2 instances during the EC2 instances. The company's IT manager must receive notification in near real time whenever an EC2 instance that has an environment type tag value of non-production is started during the night. Which solution will meet this requirement with the MOST operational efficiency?

  • AConfigure an AWS Lambda function with an SMTP client library. Subscribe the Lambda function to the AWS Health Dashboard to receive notification whenever an EC2 instance is in the running state. Configure the Lambda function to use Amazon Pinpoint to send email notifications to the IT manager. Deploy a second Lambda function to throttle calls from the first Lambda function during the daytime.
  • BDeploy an AWS Lambda function that queries the Amazon EC2 API to determine the state of each EC2 instance. Use the EC2 instance scheduler to configure the Lambda function to run every minute during the night and to send an email notification to the IT manager for each non-production EC2 instance that is in the running state.
  • CCreate an Amazon EventBridge rule that includes the EC2 Instance State-change Notification event type. Filter the event to capture only the running state. Create an AWS Lambda function as a target of the rule. Configure the Lambda function to check the current time and the EC2 instances’ tags to determine the environment type. Create an Amazon Simple Notification Service (Amazon SNS) topic as a target of the Lambda function for notifications. Subscribe the IT manager's email address to the SNS topic. (correct answer)
  • DStore the EC2 instance metadata, including the environment type, in an Amazon DynamoDB table. Deploy a custom application to an EC2 instance. Configure the custom application to poll the DynamoDB data every minute during the night and to query the Amazon EC2 API to determine the state of each instance. Additionally, configure the custom application to send an email notification to the IT manager for each non-production EC2 instance that is in the running state.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an Amazon EventBridge rule that includes the EC2 Instance State-change Notification event type. Filter the event to capture only the running state. Create an AWS Lambda function as a target of the rule. Configu...

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. This option meets the real-time / low-latency performance requirement.

SOA-C02 Question 316

Single page →
Topic 1 · Question 316 · Select all that apply

A company’s SysOps administrator manages a fleet of Windows Amazon EC2 instances that run in a single AWS account. The instances have a tag that includes a key of “OS" and a value of "Windows." The company uses AWS Systems Manager to patch the instances. The company has installed the Amazon CloudWatch agent on the instances, but the configuration is inconsistent. The SysOps administrator needs to reconfigure every instance to use the same predefined CloudWatch configuration. Which combination of steps will meet these requirements? (Choose two.)

  • AStore the CloudWatch agent configuration file in an Amazon S3 bucket.
  • BStore the contents of the CloudWatch agent configuration file in Systems Manager OpsCenter.
  • CStore the contents of the CloudWatch agent configuration file in Systems Manager Parameter Store. (correct answer)
  • DCreate a Systems Manager State Manager association to run the AmazonCloudWatch-ManageAgent Systems Manager Run Command document. Select Systems Manager as an optional configuration source. Target the instances based on tag values. (correct answer)
  • ECreate a Systems Manager State Manager association to run the AmazonCloudWatch-ManageAgent Systems Manager Run Command document. Configure the document to use the S3 bucket location as the configuration source. Target the instances based on tag value.
Reveal answer & explanation
Correct answer: C, D

The correct answer is C, D. Option C: Store the contents of the CloudWatch agent configuration file in Systems Manager Parameter Store. Option D: Create a Systems Manager State Manager association to run the AmazonCloudWatch-ManageAgent Systems Manager Run Command document. Select Systems Manager as an optional configuration source. Target the instances based o...

Explanation

Systems Manager Parameter Store securely stores configuration data and secrets. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 317

Single page →
Topic 1 · Question 317

A company is experiencing issues with legacy software running on Amazon EC2 instances. Errors occur when the total CPU utilization on the EC2 instances exceeds 80%. A short-term solution is required while the software is being rewritten. A SysOps administrator is tasked with creating a solution to restart the instances when the CPU utilization rises above 80%. Which solution meets these requirements with the LEAST operational overhead?

  • AWrite a script that monitors the CPU utilization of the EC2 instances and reboots the instances when utilization exceeds 80%. Run the script as a cron job.
  • BAdd an Amazon CloudWatch alarm for CPU utilization and configure the alarm action to reboot the EC2 instances. (correct answer)
  • CCreate an Amazon EventBridge rule using the predefined patterns for CPU utilization of the EC2 instances. When utilization exceeds 80%, invoke an AWS Lambda function to restart the instances.
  • DAdd an Amazon CloudWatch alarm for CPU utilization and configure an AWS Systems Manager Automation runbook to reboot the EC2 instances when utilization exceeds 80%.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Add an Amazon CloudWatch alarm for CPU utilization and configure the alarm action to reboot the EC2 instances.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 318

Single page →
Topic 1 · Question 318

A SysOps administrator launches an Amazon EC2 instance in a private subnet of a VPC. When the SysOps administrator attempts a curl command from the command line of the EC2 instance, the SysOps administrator cannot connect to https:www.example.com. What should the SysOps administrator do to resolve this issue?

  • AEnsure that there is an outbound security group for port 443 to 0.0.0.0/0. (correct answer)
  • BEnsure that there is an inbound security group for port 443 from 0.0.0.0/0.
  • CEnsure that there is an outbound network ACL for ephemeral ports 1024-66535 to 0.0.0.0/0.
  • DEnsure that there is an outbound network ACL for port 80 to 0.0.0.0/0.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Ensure that there is an outbound security group for port 443 to 0.0.0.0/0.

SOA-C02 Question 319

Single page →
Topic 1 · Question 319

A SysOps administrator needs to implement a backup strategy for Amazon EC2 resources and Amazon RDS resources. The backup strategy must meet the following retention requirements: • Daily backups: must be kept for 6 days • Weekly backups: must be kept for 4 weeks: • Monthly backups: must be kept for 11 months • Yearly backups: must be kept for 7 years Which backup strategy will meet these requirements with the LEAST administrative effort?

  • AUse Amazon Data Lifecycle Manager to create an Amazon Elastic Block Store (Amazon EBS) snapshot policy. Create tags on each resource that needs to be backed up. Create multiple schedules according to the requirements within the policy. Set the appropriate frequency and retention period.
  • BUse AWS Backup to create a new backup plan for each retention requirement with a backup frequency of daily, weekly, monthly, or yearly. Set the retention period to match the requirement. Create tags on each resource that needs to be backed up. Set up resource assignment by using the tags. (correct answer)
  • CCreate an AWS Lambda function. Program the Lambda function to use native tooling to take backups of file systems in Amazon EC2 and to make copies of databases in Amazon RDS. Create an Amazon EventBridge rule to invoke the Lambda function.
  • DUse Amazon Data Lifecycle Manager to create an Amazon Elastic Block Store (Amazon EBS) snapshot policy. Create tags on each resource that needs to be backed up. Set up resource assignment by using the tags. Create multiple schedules according to the requirements within the policy. Set the appropriate frequency and retention period. In Amazon RDS, activate automated backups on the required DB instances.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use AWS Backup to create a new backup plan for each retention requirement with a backup frequency of daily, weekly, monthly, or yearly. Set the retention period to match the requirement. Create tags on each resource t...

Explanation

AWS Backup centrally automates and manages backups across AWS services.

SOA-C02 Question 320

Single page →
Topic 1 · Question 320

An application team uses an Amazon Aurora MySQL DB cluster with one Aurora Replica. The application team notices that the application read performance degrades when user connections exceed 200. The number of user connections is typically consistent around 180, with occasional sudden increases above 200 connections. The application team wants the application to automatically scale as user demand increases or decreases. Which solution will meet these requirements?

  • AMigrate to a new Aurora multi-master DB cluster. Modify the application database connection string.
  • BModify the DB cluster by changing to serverless mode whenever user connections exceed 200.
  • CCreate an auto scaling policy with a target metric of 195 DatabaseConnections. (correct answer)
  • DModify the DB cluster by increasing the Aurora Replica instance size.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an auto scaling policy with a target metric of 195 DatabaseConnections.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency.

Showing questions 301–320 of 477 · Page 16 of 24