🔍

SOA-C02 — questions

Page 2 of 24 · 477 total questions.

SOA-C02 Question 21

Single page →
Topic 1 · Question 21

A company hosts a static website on Amazon S3. The website is served by an Amazon CloudFront distribution with a default TTL of 86,400 seconds. The company recently uploaded an updated version of the website to Amazon S3. However, users still see the old content when they refresh the site. A SysOps administrator must make the new version of the website visible to users as soon as possible. Which solution meets these requirements?

  • AAdjust the TTL value for the DNS CNAME record that is pointing to the CloudFront distribution.
  • BCreate an invalidation on the CloudFront distribution for the old S3 objects. (correct answer)
  • CCreate a new CloudFront distribution. Update the DNS records to point to the new CloudFront distribution.
  • DUpdate the DNS record for the website to point to the S3 bucket.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create an invalidation on the CloudFront distribution for the old S3 objects.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon CloudFront caches content at edge locations to reduce latency and offload origins.

SOA-C02 Question 22

Single page →
Topic 1 · Question 22

A SysOps administrator is responsible for managing a company's cloud infrastructure with AWS CloudFormation. The SysOps administrator needs to create a single resource that consists of multiple AWS services. The resource must support creation and deletion through the CloudFormation console. Which CloudFormation resource type should the SysOps administrator create to meet these requirements?

  • AAWS::EC2::Instance with a cfn-init helper script
  • BAWS::OpsWorks::Instance
  • CAWS::SSM::Document
  • DCustom::MyCustomType (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Custom::MyCustomType.

SOA-C02 Question 23

Single page →
Topic 1 · Question 23

A new website will run on Amazon EC2 instances behind an Application Load Balancer. Amazon Route 53 will be used to manage DNS records. What type of record should be set in Route 53 to point the website's apex domain name (for example, `company.com`) to the Application Load Balancer?

  • ACNAME
  • BSOA
  • CTXT
  • DALIAS (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: ALIAS.

SOA-C02 Question 24

Single page →
Topic 1 · Question 24

A company is implementing security and compliance by using AWS Trusted Advisor. The company's SysOps team is validating the list of Trusted Advisor checks that it can access. Which factor will affect the quantity of available Trusted Advisor checks?

  • AWhether at least one Amazon EC2 instance is in the running state
  • BThe AWS Support plan (correct answer)
  • CAn AWS Organizations service control policy (SCP)
  • DWhether the AWS account root user has multi-factor authentication (MFA) enabled
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: The AWS Support plan.

SOA-C02 Question 25

Single page →
Topic 1 · Question 25

A SysOps administrator is investigating issues on an Amazon RDS for MariaDB DB instance. The SysOps administrator wants to display the database load categorized by detailed wait events. How can the SysOps administrator accomplish this goal?

  • ACreate an Amazon CloudWatch dashboard.
  • BEnable Amazon RDS Performance Insights. (correct answer)
  • CEnable and configure Enhanced Monitoring.
  • DReview the database logs in Amazon CloudWatch Logs.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Enable Amazon RDS Performance Insights.

Explanation

Amazon RDS is a managed relational database that handles patching, backups and failover.

SOA-C02 Question 26

Single page →
Topic 1 · Question 26

A company is planning to host an application on a set of Amazon EC2 instances that are distributed across multiple Availability Zones. The application must be able to scale to millions of requests each second. A SysOps administrator must design a solution to distribute the traffic to the EC2 instances. The solution must be optimized to handle sudden and volatile traffic patterns while using a single static IP address for each Availability Zone. Which solution will meet these requirements?

  • AAmazon Simple Queue Service (Amazon SQS) queue
  • BApplication Load Balancer
  • CAWS Global Accelerator
  • DNetwork Load Balancer (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Network Load Balancer

Explanation

A Network Load Balancer handles very high throughput TCP/UDP traffic with ultra-low latency and static IPs. A load balancer distributes traffic across targets in multiple AZs for availability and scale. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.

SOA-C02 Question 27

Single page →
Topic 1 · Question 27

A SysOps administrator is using AWS CloudFormation StackSets to create AWS resources in two AWS Regions in the same AWS account. A stack operation fails in one Region and returns the stack instance status of OUTDATED. What is the cause of this failure?

  • AThe CloudFormation template changed on the local disk and has not been submitted to CloudFormation.
  • BThe CloudFormation template is trying to create a global resource that is not unique. (correct answer)
  • CThe stack has not yet been deployed to the Region.
  • DThe SysOps administrator is using an old version of the CloudFormation API.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: The CloudFormation template is trying to create a global resource that is not unique.

Explanation

AWS CloudFormation provisions infrastructure as code repeatably.

SOA-C02 Question 28

Single page →
Topic 1 · Question 28 · Select all that apply

A SysOps administrator must configure Amazon S3 to host a simple nonproduction webpage. The SysOps administrator has created an empty S3 bucket from the AWS Management Console. The S3 bucket has the default configuration in place. Which combination of actions should the SysOps administrator take to complete this process? (Choose two.)

  • AConfigure the S3 bucket by using the "Redirect requests for an object" functionality to point to the bucket root URL.
  • BTurn off the "Block all public access" setting. Allow public access by using a bucket ACL that contains WEBSITE .
  • CTurn off the "Block all public access" setting. Allow public access by using a bucket ACL that allows access to the AuthenticatedUsers grantee.
  • DTurn off the "Block all public access" setting. Set a bucket policy that allows "Principal": the s3:GetObject action. (correct answer)
  • ECreate an index.html document. Configure static website hosting, and upload the index document to the S3 bucket. (correct answer)
Reveal answer & explanation
Correct answer: D, E

The correct answer is D, E. Option D: Turn off the "Block all public access" setting. Set a bucket policy that allows "Principal": the s3:GetObject action. Option E: Create an index.html document. Configure static website hosting, and upload the index document to the S3 bucket.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon EBS provides block storage attached to a single EC2 instance. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 29

Single page →
Topic 1 · Question 29

A company is using an Amazon Aurora MySQL DB cluster that has point-in-time recovery, backtracking, and automatic backup enabled. A SysOps administrator needs to be able to roll back the DB cluster to a specific recovery point within the previous 72 hours. Restores must be completed in the same production DB cluster. Which solution will meet these requirements?

  • ACreate an Aurora Replica. Promote the replica to replace the primary DB instance.
  • BCreate an AWS Lambda function to restore an automatic backup to the existing DB cluster.
  • CUse backtracking to rewind the existing DB cluster to the desired recovery point. (correct answer)
  • DUse point-in-time recovery to restore the existing DB cluster to the desired recovery point.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use backtracking to rewind the existing DB cluster to the desired recovery point.

SOA-C02 Question 30

Single page →
Topic 1 · Question 30

A user working in the Amazon EC2 console increased the size of an Amazon Elastic Block Store (Amazon EBS) volume attached to an Amazon EC2 Windows instance. The change is not reflected in the file system. What should a SysOps administrator do to resolve this issue?

  • AExtend the file system with operating system-level tools to use the new storage capacity. (correct answer)
  • BReattach the EBS volume to the EC2 instance.
  • CReboot the EC2 instance that is attached to the EBS volume.
  • DTake a snapshot of the EBS volume. Replace the original volume with a volume that is created from the snapshot.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Extend the file system with operating system-level tools to use the new storage capacity.

SOA-C02 Question 31

Single page →
Topic 1 · Question 31

A SysOps administrator is using Amazon EC2 instances to host an application. The SysOps administrator needs to grant permissions for the application to access an Amazon DynamoDB table. Which solution will meet this requirement?

  • ACreate access keys to access the DynamoDB table. Assign the access keys to the EC2 instance profile.
  • BCreate an EC2 key pair to access the DynamoDB table. Assign the key pair to the EC2 instance profile.
  • CCreate an IAM user to access the DynamoDB table. Assign the IAM user to the EC2 instance profile.
  • DCreate an IAM role to access the DynamoDB table. Assign the IAM role to the EC2 instance profile. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create an IAM role to access the DynamoDB table. Assign the IAM role to the EC2 instance profile.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling. An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials.

SOA-C02 Question 32

Single page →
Topic 1 · Question 32

A SysOps administrator wants to protect objects in an Amazon S3 bucket from accidental overwrite and deletion. Noncurrent objects must be kept for 90 days and then must be permanently deleted. Objects must reside within the same AWS Region as the original S3 bucket. Which solution meets these requirements?

  • ACreate an Amazon Data Lifecycle Manager (Amazon DLM) lifecycle policy for the S3 bucket. Add a rule to the lifecycle policy to delete noncurrent objects after 90 days.
  • BCreate an AWS Backup policy for the S3 bucket. Create a backup rule that includes a lifecycle to expire noncurrent objects after 90 days.
  • CEnable S3 Cross-Region Replication on the S3 bucket. Create an S3 Lifecycle policy for the bucket to expire noncurrent objects after 90 days.
  • DEnable S3 Versioning on the S3 bucket. Create an S3 Lifecycle policy for the bucket to expire noncurrent objects after 90 days. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Enable S3 Versioning on the S3 bucket. Create an S3 Lifecycle policy for the bucket to expire noncurrent objects after 90 days.

Explanation

S3 Lifecycle policies automatically transition or expire objects to control storage cost. Amazon S3 provides durable, scalable object storage that is fully managed.

SOA-C02 Question 33

Single page →
Topic 1 · Question 33

A company has an application that customers use to search for records on a website. The application's data is stored in an Amazon Aurora DB cluster. The application's usage varies by season and by day of the week. The website's popularity is increasing, and the website is experiencing slower performance because of increased load on the DB cluster during periods of peak activity. The application logs show that the performance issues occur when users are searching for information. The same search is rarely performed multiple times. A SysOps administrator must improve the performance of the platform by using a solution that maximizes resource efficiency. Which solution will meet these requirements?

  • ADeploy an Amazon ElastiCache for Redis cluster in front of the DB cluster. Modify the application to check the cache before the application issues new queries to the database. Add the results of any queries to the cache.
  • BDeploy an Aurora Replica for the DB cluster. Modify the application to use the reader endpoint for search operations. Use Aurora Auto Scaling to scale the number of replicas based on load. (correct answer)
  • CUse Provisioned IOPS on the storage volumes that support the DB cluster to improve performance sufficiently to support the peak load on the application.
  • DIncrease the instance size in the DB cluster to a size that is sufficient to support the peak load on the application. Use Aurora Auto Scaling to scale the instance size based on load.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Deploy an Aurora Replica for the DB cluster. Modify the application to use the reader endpoint for search operations. Use Aurora Auto Scaling to scale the number of replicas based on load.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon Aurora is a high-performance managed relational database with built-in replication and failover.

SOA-C02 Question 34

Single page →
Topic 1 · Question 34

A company uses AWS Organizations to manage multiple AWS accounts. Corporate policy mandates that only specific AWS Regions can be used to store and process customer data. A SysOps administrator must prevent the provisioning of Amazon EC2 instances in unauthorized Regions by anyone in the company. What is the MOST operationally efficient solution that meets these requirements?

  • AConfigure AWS CloudTrail in all Regions to record all API activity. Create an Amazon EventBridge (Amazon CloudWatch Events) rule in all unauthorized Regions for ec2:RunInstances events. Use AWS Lambda to terminate the launched EC2 instances.
  • BIn each AWS account, create a managed IAM policy that uses a Region condition to deny the ec2:RunInstances action in all unauthorized Regions. Attach this policy to all IAM groups in each AWS account.
  • CIn each AWS account, create an IAM permissions boundary policy that uses a Region condition to deny the ec2:RunInstances action in all unauthorized Regions. Attach the permissions boundary policy to all IAM users in each AWS account.
  • DCreate a service control policy (SCP) in AWS Organizations to deny the ec2:RunInstances action in all unauthorized Regions. Attach this policy to the root level of the organization. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create a service control policy (SCP) in AWS Organizations to deny the ec2:RunInstances action in all unauthorized Regions. Attach this policy to the root level of the organization.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Organizations centrally governs and secures multiple AWS accounts. Service Control Policies set guardrails on what accounts in an organization can do.

SOA-C02 Question 35

Single page →
Topic 1 · Question 35

A company's public website is hosted in an Amazon S3 bucket in the us-east-1 Region behind an Amazon CloudFront distribution. The company wants to ensure that the website is protected from DDoS attacks. A SysOps administrator needs to deploy a solution that gives the company the ability to maintain control over the rate limit at which DDoS protections are applied. Which solution will meet these requirements?

  • ADeploy a global-scoped AWS WAF web ACL with an allow default action. Configure an AWS WAF rate-based rule to block matching traffic. Associate the web ACL with the CloudFront distribution. (correct answer)
  • BDeploy an AWS WAF web ACL with an allow default action in us-east-1. Configure an AWS WAF rate-based rule to block matching traffic. Associate the web ACL with the S3 bucket.
  • CDeploy a global-scoped AWS WAF web ACL with a block default action. Configure an AWS WAF rate-based rule to allow matching traffic. Associate the web ACL with the CloudFront distribution.
  • DDeploy an AWS WAF web ACL with a block default action in us-east-1. Configure an AWS WAF rate-based rule to allow matching traffic. Associate the web ACL with the S3 bucket.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Deploy a global-scoped AWS WAF web ACL with an allow default action. Configure an AWS WAF rate-based rule to block matching traffic. Associate the web ACL with the CloudFront distribution.

Explanation

Amazon CloudFront caches content at edge locations to reduce latency and offload origins. AWS WAF protects web applications from common exploits and malicious requests. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 36

Single page →
Topic 1 · Question 36

A SysOps administrator developed a Python script that uses the AWS SDK to conduct several maintenance tasks. The script needs to run automatically every night. What is the MOST operationally efficient solution that meets this requirement?

  • AConvert the Python script to an AWS Lambda function. Use an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke the function every night. (correct answer)
  • BConvert the Python script to an AWS Lambda function. Use AWS CloudTrail to invoke the function every night.
  • CDeploy the Python script to an Amazon EC2 instance. Use Amazon EventBride (Amazon CloudWatch Events) to schedule the instance to start and stop every night.
  • DDeploy the Python script to an Amazon EC2 instance. Use AWS Systems Manager to schedule the instance to start and stop every night.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Convert the Python script to an AWS Lambda function. Use an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke the function every night.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

SOA-C02 Question 37

Single page →
Topic 1 · Question 37

A SysOps administrator must create a solution that immediately notifies software developers if an AWS Lambda function experiences an error. Which solution will meet this requirement?

  • ACreate an Amazon Simple Notification Service (Amazon SNS) topic with an email subscription for each developer. Create an Amazon CloudWatch alarm by using the Errors metric and the Lambda function name as a dimension. Configure the alarm to send a notification to the SNS topic when the alarm state reaches ALARM. (correct answer)
  • BCreate an Amazon Simple Notification Service (Amazon SNS) topic with a mobile subscription for each developer. Create an Amazon EventBridge (Amazon CloudWatch Events) alarm by using the LambdaError as the event pattern and the SNS topic name as a resource. Configure the alarm to send a notification to the SNS topic when the alarm state reaches ALARM.
  • CVerify each developer email address in Amazon Simple Email Service (Amazon SES). Create an Amazon CloudWatch rule by using the LambdaError metric and developer email addresses as dimensions. Configure the rule to send an email through Amazon SES when the rule state reaches ALARM.
  • DVerify each developer mobile phone in Amazon Simple Email Service (Amazon SES). Create an Amazon EventBridge (Amazon CloudWatch Events) rule by using Error as the event pattern and the Lambda function name as a resource. Configure the rule to send a push notification through Amazon SES when the rule state reaches ALARM.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create an Amazon Simple Notification Service (Amazon SNS) topic with an email subscription for each developer. Create an Amazon CloudWatch alarm by using the Errors metric and the Lambda function name as a dimension....

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

SOA-C02 Question 38

Single page →
Topic 1 · Question 38

A company has a private Amazon S3 bucket that contains sensitive information. A SysOps administrator needs to keep logs of the IP addresses from authentication failures that result from attempts to access objects in the bucket. The logs must be stored so that they cannot be overwritten or deleted for 90 days. Which solution will meet these requirements?

  • ACreate an AWS CloudTrail trail. Configure the log files to be saved to Amazon CloudWatch Logs. Configure the log group with a retention period of 90 days.
  • BCreate an AWS CloudTrail trail. Configure the log files to be saved to a different S3 bucket. Turn on CloudTrail log file integrity validation for 90 days.
  • CTurn on access logging for the S3 bucket. Configure the access logs to be saved to Amazon CloudWatch Logs. Configure the log group with a retention period of 90 days.
  • DTurn on access logging for the S3 bucket. Configure the access logs to be saved in a second S3 bucket. Turn on S3 Object Lock on the second S3 bucket, and configure a default retention period of 90 days. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Turn on access logging for the S3 bucket. Configure the access logs to be saved in a second S3 bucket. Turn on S3 Object Lock on the second S3 bucket, and configure a default retention period of 90 days.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 39

Single page →
Topic 1 · Question 39 · Select all that apply

A SysOps administrator migrates NAT instances to NAT gateways. After the migration, an application that is hosted on Amazon EC2 instances in a private subnet cannot access the internet. Which of the following are possible reasons for this problem? (Choose two.)

  • AThe application is using a protocol that the NAT gateway does not support. (correct answer)
  • BThe NAT gateway is not in a security group.
  • CThe NAT gateway is in an unsupported Availability Zone.
  • DThe NAT gateway is not in the Available state. (correct answer)
  • EThe port forwarding settings do not allow access to internal services from the internet.
Reveal answer & explanation
Correct answer: A, D

The correct answer is A, D. Option A: The application is using a protocol that the NAT gateway does not support. Option D: The NAT gateway is not in the Available state.

Explanation

A NAT gateway lets private subnet resources reach the internet for outbound traffic only.

SOA-C02 Question 40

Single page →
Topic 1 · Question 40

A company runs an application on an Amazon EC2 instance. A SysOps administrator creates an Auto Scaling group and an Application Load Balancer (ALB) to handle an increase in demand. However, the EC2 instances are failing the health check. What should the SysOps administrator do to troubleshoot this issue?

  • AVerify that the Auto Scaling group is configured to use all AWS Regions.
  • BVerify that the application is running on the protocol and the port that the listener is expecting. (correct answer)
  • CVerify the listener priority in the ALB. Change the priority if necessary.
  • DVerify the maximum number of instances in the Auto Scaling group. Change the number if necessary.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Verify that the application is running on the protocol and the port that the listener is expecting.

Showing questions 21–40 of 477 · Page 2 of 24