πŸ”

SOA-C02 β€” questions

Page 23 of 24 Β· 477 total questions.

SOA-C02 Question 441

Single page β†’
Topic 1 Β· Question 441

A SysOps administrator created an AWS CloudFormation template that provisions an Amazon EventBridge rule that invokes an AWS Lambda function. The Lambda function is designed to write event details to an Amazon CloudWatch log group. The function has permissions to write events to Amazon CloudWatch Logs. However, the SysOps administrator discovered that the Lambda function is not running. How should the SysOps administrator resolve the problem?

  • AUpdate the CloudFormation stack to include an AWS::IAM::Role resource with the required IAM permissions for EventBridge to invoke the function. Assign the role to the EventBridge rule.
  • BUpdate the CloudFormation stack to include an AWS::IAM::Role resource with the required IAM permissions for the function. Assign the role as the function execution role.
  • CUpdate the CloudFormation stack with an AWS::Lambda::Permission resource to ensure events.amazonaws.com has permissions to invoke the function. (correct answer)
  • DUpdate the CloudFormation stack with an AWS::Lambda::Permission resource to ensure lambda.amazonaws.com has permissions to invoke the function.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Update the CloudFormation stack with an AWS::Lambda::Permission resource to ensure events.amazonaws.com has permissions to invoke the function.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. AWS CloudFormation provisions infrastructure as code repeatably.

SOA-C02 Question 442

Single page β†’
Topic 1 Β· Question 442

A company has an Amazon EC2 instance that has high CPU utilization. The EC2 instance is a t3.large instance and is running a test web application. The company discovers that the web application would operate better on a compute optimized large instance. What should a SysOps administrator do to make this change?

  • AMigrate the EC2 instance to a compute optimized instance by using AWS VM Import/Export.
  • BEnable hibernation on the EC2 instance. Change the instance type to a compute optimized instance. Disable hibernation on the EC2 instance.
  • CStop the EC2 instance. Change the instance type to a compute optimized instance. Start the EC2 instance. (correct answer)
  • DChange the instance type to a compute optimized instance while the EC2 instance is running.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Stop the EC2 instance. Change the instance type to a compute optimized instance. Start the EC2 instance.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

SOA-C02 Question 443

Single page β†’
Topic 1 Β· Question 443

A development team created and deployed a new AWS Lambda function 15 minutes ago. Although the function was invoked many times, Amazon CloudWatch Logs are not showing any log messages. What is one cause of this?

  • AThe developers did not enable log messages for this Lambda function.
  • BThe Lambda function's role does not include permissions to create CloudWatch Logs items. (correct answer)
  • CThe Lambda function raises an exception before the first log statement has been reached.
  • DThe Lambda functions creates local log files that have to be shipped to CloudWatch Logs first before becoming visible.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: The Lambda function's role does not include permissions to create CloudWatch Logs items.

Explanation

AWS Lambda runs code without provisioning servers and scales automatically, which minimizes operational overhead. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

SOA-C02 Question 444

Single page β†’
Topic 1 Β· Question 444

A company observes that a newly created Amazon CloudWatch alarm is not transitioning out of the INSUFFICIENT_DATA state. The alarm was created to track the mem_used_percent metric from an Amazon EC2 instance that is deployed in a public subnet. A review of the EC2 instance shows that the unified CloudWatch agent is installed and is running. However, the metric is not available in CloudWatch. A SysOps administrator needs to implement a solution to resolve this problem. Which solution will meet these requirements?

  • AEnable CloudWatch detailed monitoring for the EC2 instance
  • BCreate an IAM instance profile that contains CloudWatch permissions. Add the instance profile to the EC2 instance (correct answer)
  • CMigrate the EC2 instance into a private subnet
  • DCreate an IAM user that has an access key ID and a secret access key. Update the unified CloudWatch agent configuration file to use those credentials
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create an IAM instance profile that contains CloudWatch permissions. Add the instance profile to the EC2 instance

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

SOA-C02 Question 445

Single page β†’
Topic 1 Β· Question 445

A company is uploading important files as objects to Amazon S3. The company needs to be informed if an object is corrupted during the upload. What should a SysOps administrator do to meet this requirement?

  • APass the Content-Disposition value as a request body during the object upload
  • BPass the Content-MD5 value as a request header during the object upload (correct answer)
  • CPass x-amz-object-lock-mode as a request header during the object upload
  • DPass x-amz-server-side-encryption-customer-algorithm as a request body during the object upload
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Pass the Content-MD5 value as a request header during the object upload.

SOA-C02 Question 446

Single page β†’
Topic 1 Β· Question 446 Β· Select all that apply

A SysOps administrator needs to create a report that shows how many bytes are sent to and received from each target group member for an Application Load Balancer (ALB). Which combination of steps should the SysOps administrator take to meet these requirements? (Choose two.)

  • AEnable access logging for the ALB. Save the logs to an Amazon S3 bucket. (correct answer)
  • BInstall the Amazon CloudWatch agent on the instances in the target group.
  • CUse Amazon Athena to query the ALB logs. Query the table. Use the received_bytes and sent_bytes fields to calculate the total bytes grouped by the target port field. (correct answer)
  • DUse Amazon Athena to query the ALB logs. Query the table. Use the received_bytes and sent_bytes fields to calculate the total bytes grouped by the client port field.
  • ECreate an Amazon CloudWatch dashboard that shows the Sum statistic of the ProcessedBytes metric for the ALB.
Reveal answer & explanation
Correct answer: A, C

The correct answer is A, C. Option A: Enable access logging for the ALB. Save the logs to an Amazon S3 bucket. Option C: Use Amazon Athena to query the ALB logs. Query the table. Use the received_bytes and sent_bytes fields to calculate the total bytes grouped by the target port field.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. Amazon Athena runs serverless SQL queries directly on data in Amazon S3 with no infrastructure to manage.

SOA-C02 Question 447

Single page β†’
Topic 1 Β· Question 447

A company runs thousands of Amazon EC2 instances that are based on the Amazon Linux 2 Amazon Machine Image (AMI). A SysOps administrator must implement a solution to record commands and output from any user that needs an interactive session on one of the EC2 instances. The solution must log the data to a durable storage location. The solution also must provide automated notifications and alarms that are based on the log data. Which solution will meet these requirements with the MOST operational efficiency?

  • AConfigure command session logging on each EC2 instance. Configure the unified Amazon CloudWatch agent to send session logs to Amazon CloudWatch Logs. Set up query filters and alerts by using Amazon Athena.
  • BRequire all users to use a central bastion host when they need command line access to an EC2 instance. Configure the unified Amazon CloudWatch agent on the bastion host to send session logs to Amazon CloudWatch Logs. Set up a metric filter and a metric alarm for relevant security findings in CloudWatch Logs.
  • CRequire all users to use AWS Systems Manager Session Manager when they need command line access to an EC2 instance. Configure Session Manager to stream session logs to Amazon CloudWatch Logs. Set up a metric filter and a metric alarm for relevant security findings in CloudWatch Logs. (correct answer)
  • DConfigure command session logging on each EC2 instance. Require all users to use AWS Systems Manager Run Command documents when they need command line access to an EC2 instance. Configure the unified Amazon CloudWatch agent to send session logs to Amazon CloudWatch Logs. Set up CloudWatch alarms that are based on Amazon Athena query results.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Require all users to use AWS Systems Manager Session Manager when they need command line access to an EC2 instance. Configure Session Manager to stream session logs to Amazon CloudWatch Logs. Set up a metric filter an...

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 448

Single page β†’
Topic 1 Β· Question 448 Β· Select all that apply

A company that uses AWS Organizations recently implemented AWS Control Towerю The company now needs to centralize identity management. A SysOps administrator must federate AWS ШAM Identity Center with an external SAML 2.0 identity provider (IdP) to centrally manage access to all the company's accounts and cloud applications. Which prerequisites must the SysOps administrator have so that the SysOps administrator can connect to the external IdP? (Choose two.)

  • AA copy of the IAM identity Center SAML metadata (correct answer)
  • BThe IdP metadata including the public X 509 certificate (correct answer)
  • CThe IP address of the IdP
  • DRoot access to the management account
  • EAdministrative permissions to the member accounts of the organization
Reveal answer & explanation
Correct answer: A, B

The correct answer is A, B. Option A: A copy of the IAM identity Center SAML metadata Option B: The IdP metadata including the public X 509 certificate

Explanation

AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. AWS IAM Identity Center (SSO) centrally manages workforce access to multiple accounts and apps.

SOA-C02 Question 449

Single page β†’
Topic 1 Β· Question 449

A company recently moved its server infrastructure to Amazon EC2 instances. The company wants to use Amazon CloudWatch Logs to track the instance logs. What should a SysOps administrator do to meet this requirement in compliance with AWS best practices?

  • AConfigure CloudWatch from the AWS Management Console for the instances. Wait for AWS to automatically install and configure the agents for the instances
  • BInstall and configure the CloudWatch agent on the instances. Attach an IAM role to allow the instances to write logs to CloudWatch (correct answer)
  • CInstall and configure the CloudWatch agent on the instances. Attach an IAM user to allow the instances to write logs to CloudWatch
  • DInstall and configure the CloudWatch agent on the instances. Attach the necessary security groups to allow the instances to write logs to CloudWatch
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Install and configure the CloudWatch agent on the instances. Attach an IAM role to allow the instances to write logs to CloudWatch

Explanation

An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

SOA-C02 Question 450

Single page β†’
Topic 1 Β· Question 450

A company uses AWS CloudFormation to deploy its infrastructure. The company recently retired an application. A cloud operations engineer initiates CloudFormation stack deletion, and the stack gets stuck in DELETE_FAILED status. A SysOps administrator discovers that the stack had deployed a security group. The security group is referenced by other security groups in the environment. The SysOps administrator needs to delete the stack without affecting other applications. Which solution will meet these requirements in the MOST operationally efficient manner?

  • ACreate a new security group that has a different name. Apply identical rules to the new security group. Replace all other security groups that reference the new security group Delete the stack.
  • BCreate a CloudFormation change set to delete the security group. Deploy the change set.
  • CDelete the stack again. Specify that the security group be retained. (correct answer)
  • DPerform CloudFormation drift detection. Delete the stack.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Delete the stack again. Specify that the security group be retained.

SOA-C02 Question 451

Single page β†’
Topic 1 Β· Question 451

A company needs to monitor its website’s availability to end users. The company needs a solution to provide an Amazon Simple Notification Service (Amazon SNS) notification if the website's uptime decreases to less than 99%. The monitoring must provide an accurate view of the user experience on the website. Which solution will meet these requirements?

  • ACreate an Amazon CloudWatch alarm that is based on the website's logs that are published to a CloudWatch Logs log group. Configure the alarm to publish an SNS notification if the number of HTTP 4xx errors and 5xx errors exceeds a specified threshold.
  • BCreate an Amazon CloudWatch alarm that is based on the website's published metrics in CloudWatch. Configure the alarm to publish an SNS notification that is based on anomaly detection.
  • CCreate an Amazon CloudWatch Synthetics heartbeat monitoring canary. Associate the canary with the website's URL for end users. Create a CloudWatch alarm for the canary. Configure the alarm to publish an SNS notification if the value of the SuccessPercent metric is less than 99%. (correct answer)
  • DCreate an Amazon CloudWatch Synthetics broken link checker monitoring canary. Associate the canary with the website's URL for end users. Create a CloudWatch alarm for the canary. Configure the alarm to publish an SNS notification if the value of the SuccessPercent metric is less than 99%.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an Amazon CloudWatch Synthetics heartbeat monitoring canary. Associate the canary with the website's URL for end users. Create a CloudWatch alarm for the canary. Configure the alarm to publish an SNS notificati...

Explanation

Amazon EBS provides block storage attached to a single EC2 instance. Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

SOA-C02 Question 452

Single page β†’
Topic 1 Β· Question 452

A company needs to track spending in its AWS account. The company must receive a notification when current costs and forecasted costs exceed specific thresholds. Which solution will meet these requirements with the LEAST operational overhead?

  • ACreate a new IAM role. Attach the AWSPurchaseOrdersServiceRolePolicy AWS managed policy to the role. Check AWS Cost Explorer on a regular basis to monitor current costs and forecasted costs.
  • BCreate an AWS Cost and Usage Report. Create an AWS Step Functions state machine that runs when a new usage file is generated. Configure the state machine to pass the data to Amazon Forecast and to invoke an AWS Lambda function. Configure the Lambda function to parse the data and to send a notification to an Amazon Simple Notification Service (Amazon SNS) topic if costs exceed the thresholds.
  • CCreate an AWS Cost and Usage Report. Separate the current costs and forecasted costs by service. Schedule the report to be sent to an Amazon Simple Notification Service (Amazon SNS) topic each month.
  • DCreate a recurring cost budget in AWS Budgets. Create an alert for the actual cost. Create a second alert for the forecasted costs. Configure an Amazon Simple Notification Service (Amazon SNS) topic to receive the alerts. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create a recurring cost budget in AWS Budgets. Create an alert for the actual cost. Create a second alert for the forecasted costs. Configure an Amazon Simple Notification Service (Amazon SNS) topic to receive the ale...

Explanation

Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. Amazon Forecast produces time-series forecasts using machine learning. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 453

Single page β†’
Topic 1 Β· Question 453

A company uses a multi-account structure in the AWS Cloud. The company's environment includes a shared account for common resources. The environment also includes a development account for new application development. The company uses Amazon Route 53 for DNS management. The company manages all its Route 53 hosted zones from the shared account. A SysOps administrator needs to obtain a new SSL/TLS certificate for an application that is deployed in the development account. What must the SysOps administrator do to meet this requirement?

  • ACreate a new AWS Key Management Service (AWS KMS) key in the shared account. Configure the key policy to give read access to the development account's root principal.
  • BRequest a new certificate by using AWS Certificate Manager (ACM) from the shared account. Use Route 53 from the shared account to create validation record sets in the relevant hosted zone.
  • CRequest a new certificate by using AWS Certificate Manager (ACM) from the development account. Use Route 53 from the shared account to create validation record sets in the relevant hosted zone. (correct answer)
  • DCreate a new AWS Key Management Service (AWS KMS) key in the development account. Configure the key policy to give read access to the shared account’s root principal. Use Route 53 from the shared account to create a validation record set that references the Amazon Resource Name (ARN) of the KMS key.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Request a new certificate by using AWS Certificate Manager (ACM) from the development account. Use Route 53 from the shared account to create validation record sets in the relevant hosted zone.

Explanation

Amazon Route 53 provides DNS with health checks and routing policies for availability and latency. AWS Certificate Manager provisions and renews TLS certificates automatically.

SOA-C02 Question 454

Single page β†’
Topic 1 Β· Question 454

A company's SysOps administrator is troubleshooting communication between the components of an application. The company configured VPC flow logs to be published to Amazon CloudWatch Logs. However, there are no logs in CloudWatch Logs. What could be blocking the VPC flow logs from being published to CloudWatch Logs?

  • AThe IAM policy that is attached to the IAM role for the flow log is missing the logs CreateLogGroup permission (correct answer)
  • BThe IAM policy that is attached to the IAM role for the flow log is missing the logs CreateExportTask permission
  • CThe VPC is configured for IPv6 addresses
  • DThe VPC is peered with another VPC in the AWS account
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: The IAM policy that is attached to the IAM role for the flow log is missing the logs CreateLogGroup permission

Explanation

An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

SOA-C02 Question 455

Single page β†’
Topic 1 Β· Question 455

A company deploys a new application on three Amazon EC2 instances across three Availability Zones. The company uses a Network Load Balancer (NLB) to route traffic to the EC2 instances. A SysOps administrator must implement a solution so that the EC2 instances allow traffic from only the NLB. What should the SysOps administrator do to meet these requirements with the LEAST operational overhead?

  • AConfigure the security group that is associated with the EC2 instances to allow traffic from only the security group that is associated with the NLB (correct answer)
  • BConfigure the security group that is associated with the EC2 instances to allow traffic from only the elastic network interfaces that are associated with the NLB
  • CCreate a network ACL Associate the network ACL with the application subnets. Configure the network ACL to allow inbound traffic from only the CIDR ranges of the NLB
  • DUse a third-party firewall solution that is installed on a separate EC2 instance. Configure a firewall rule that allows traffic to the application's EC2 instances from only the subnets where the NLB is deployed.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure the security group that is associated with the EC2 instances to allow traffic from only the security group that is associated with the NLB

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 456

Single page β†’
Topic 1 Β· Question 456

A company that uses ServiceNow has an AWS account where a sensitive workload runs. The necessary security groups are in place. The company needs to implement a solution to create an incident in ServiceNow every time the rules change in any security group. Which solution will meet this requirement with the LEAST operational effort?

  • ACreate an Amazon CloudWatch alarm that enters ALARM state when security groups change. Configure the alarm to invoke an AWS Lambda function that connects to ServiceNow to create an incident.
  • BEnable AWS Security Hub. Create an AWS Lambda function that connects to ServiceNow to create an incident. Create an Amazon EventBridge rule to detect security group changes. Configure the event type as Security Hub Findings - Custom Action. Configure the EventBridge rule to invoke the Lambda function.
  • CCreate an Amazon EventBridge rule to detect security group changes. Configure the event type as AWS API Call via CloudTrail. Configure the EventBridge rule to run the AWS-CreateServiceNowIncidentAWS Systems Manager Automation runbook to create an incident in ServiceNow. (correct answer)
  • DLaunch an Amazon EC2 instance that has a persistent connection to ServiceNow to detect security group changes. Export AWS CloudTrail logs to the EC2 instance. Write a bash script to run a scheduled cron job every 30 minutes to search the CloudTrail logs for security groups changes. Configure the EC2 instance to create an incident in ServiceNow when a change is detected.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an Amazon EventBridge rule to detect security group changes. Configure the event type as AWS API Call via CloudTrail. Configure the EventBridge rule to run the AWS-CreateServiceNowIncidentAWS Systems Manager Au...

Explanation

Amazon EventBridge routes events between services with rules, enabling event-driven, decoupled architectures. AWS CloudTrail records API activity for auditing and governance. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 457

Single page β†’
Topic 1 Β· Question 457

A company needs to enforce tagging requirements for Amazon DynamoDB tables in its AWS accounts. A SysOps administrator must implement a solution to identify and remediate all DynamoDB tables that do not have the appropriate tags. Which solution will meet these requirements with the LEAST operational overhead?

  • ACreate a custom AWS Lambda function to evaluate and remediate all DynamoDB tables. Create an Amazon EventBridge scheduled rule to invoke the Lambda function.
  • BCreate a custom AWS Lambda function to evaluate and remediate ail DynamoDB tables. Create an AWS Config custom rule to invoke the Lambda function.
  • CUse the required-tags AWS Config managed rule to evaluate all DynamoDB tables for the appropriate tags. Configure an automatic remediation action that uses an AWS Systems Manager Automation custom runbook. (correct answer)
  • DCreate an Amazon EventBridge managed rule to evaluate all DynamoDB tables for the appropriate tags. Configure the EventBridge rule to run an AWS Systems Manager Automation custom runbook for remediation.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Use the required-tags AWS Config managed rule to evaluate all DynamoDB tables for the appropriate tags. Configure an automatic remediation action that uses an AWS Systems Manager Automation custom runbook.

Explanation

Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling. AWS Config tracks resource configuration changes and evaluates compliance. AWS Systems Manager operates and automates management of fleets of resources.

SOA-C02 Question 458

Single page β†’
Topic 1 Β· Question 458

A company is preparing for a marketing campaign that will increase traffic to a new web application. The application uses Amazon API Gateway and AWS Lambda for the application logic. The application stores relevant user data in an Amazon Aurora MySQL DB cluster that has one Aurora Replica. Database queries for the application are 5% write and 95% read. What should a SysOps administrator do to scale the database when traffic increases?

  • AConfigure Aurora Auto Scaling to add or remove Aurora Replicas in the cluster based on the average CPU utilization of the Aurora Replicas. (correct answer)
  • BConfigure Aurora Auto Scaling to increase or decrease the size of the Aurora Replicas based on the average CPU utilization of the Aurora Replicas.
  • CConfigure AWS Auto Scaling to monitor the Aurora cluster. Configure AWS Auto Scaling to add or remove Aurora Replicas in the cluster based on the average CPU utilization of the primary instance.
  • DConfigure AWS Auto Scaling to monitor the Aurora cluster. Configure AWS Auto Scaling to add or remove Aurora Replicas in the cluster based on the average CPU utilization of the existing Aurora Replica.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure Aurora Auto Scaling to add or remove Aurora Replicas in the cluster based on the average CPU utilization of the Aurora Replicas.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon Aurora is a high-performance managed relational database with built-in replication and failover. AWS Config tracks resource configuration changes and evaluates compliance.

SOA-C02 Question 459

Single page β†’
Topic 1 Β· Question 459

A company is using Amazon S3 to set up a temporary static website that is public. A SysOps administrator creates an S3 bucket by using the default settings. The SysOps administrator updates the S3 bucket properties to configure static website hosting. The SysOps administrator then uploads objects that contain content for index html and error html. When the SysOps administrator navigates to the website URL the SysOps administrator receives an HTTP Status Code 403: Forbidden (Access Denied) error. What should the SysOps administrator do to resolve this error?

  • ACreate an Amazon Route 53 DNS entry Point the entry to the S3 bucket.
  • BEdit the S3 bucket permissions by turning off Block Public Access settings. Create a bucket policy to allow GetObject access on the S3 bucket. (correct answer)
  • CEdit the permissions on the index html and error html files for read access.
  • DEdit the S3 bucket permissions by turning off Block Public Access settings. Create a bucket policy to allow PutObject access on the S3 bucket.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Edit the S3 bucket permissions by turning off Block Public Access settings. Create a bucket policy to allow GetObject access on the S3 bucket.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed.

SOA-C02 Question 460

Single page β†’
Topic 1 Β· Question 460

A company has internal hybrid applications that have resources in the AWS Cloud and on premises. Users report that the applications sometimes are not available. The company has configured an Amazon CloudWatch alarm to monitor the tunnel status of its AWS Site-to-Site VPN connection. A SysOps administrator must implement a solution that creates a high-priority ticket in an internal ticketing tool when the VPN tunnel is down. Which solution will meet this requirement?

  • ACreate an Amazon Simple Notification Service (Amazon SNS) topic for the CloudWatch alarm. Subscribe the ticketing tool's endpoint to the SNS topic. (correct answer)
  • BCreate an Amazon Simple Queue Service (Amazon SQS) queue as the target for the CloudWatch alarm. Configure the queue to transform messages into tickets and to post the tickets to the ticketing tool’s endpoint.
  • CCreate an AWS Lambda function. Configure the CloudWatch alarm to directly invoke the Lambda function to create individual tickets in the ticketing tool.
  • DCreate an Amazon EventBridge rule that monitors the VPN tunnel directly. Configure the ticketing tool’s endpoint as the target of the rule.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create an Amazon Simple Notification Service (Amazon SNS) topic for the CloudWatch alarm. Subscribe the ticketing tool's endpoint to the SNS topic.

Explanation

Amazon SNS is a managed pub/sub service for fan-out notifications to many subscribers. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

Showing questions 441–460 of 477 Β· Page 23 of 24