🔍

SOA-C02 — questions

Page 24 of 24 · 477 total questions.

SOA-C02 Question 461

Single page →
Topic 1 · Question 461

A SysOps administrator is troubleshooting an AWS CloudFormation stack creation that failed. Before the SysOps administrator can identify the problem, the stack and its resources are deleted. For future deployments, the SysOps administrator must preserve any resources that CloudFormation successfully created. What should the SysOps administrator do to meet this requirement?

  • ASet the value of the DisableRollback parameter to False during stack creation
  • BSet the value of the OnFailure parameter to DO_NOTHING during stack creation (correct answer)
  • CSpecify a rollback configuration that has a rollback trigger of DO_NOTHING during stack creation
  • DSet the value of the OnFailure parameter to ROLLBACK during stack creation
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Set the value of the OnFailure parameter to DO_NOTHING during stack creation.

SOA-C02 Question 462

Single page →
Topic 1 · Question 462

A company needs to implement a solution to install specific software on Amazon EC2 instances when the instances launch. Which solution will meet this requirement?

  • AConfigure AWS Systems Manager State Manager associations to bootstrap the EC2 instances with the required software at launch. (correct answer)
  • BUse the Amazon CloudWatch agent to detect EC2 InstanceStart events and to inject the required software. Modify the InstanceRole IAM role to add permissions for the StartTask API operation.
  • CUse Amazon Inspector to detect EC2 launch events. Configure Amazon Inspector to install the required software as part of lifecycle hooks for theEC2launch events.
  • DUse AWS Security Hub remediation actions to install the required software at launch.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Configure AWS Systems Manager State Manager associations to bootstrap the EC2 instances with the required software at launch.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Config tracks resource configuration changes and evaluates compliance. AWS Systems Manager operates and automates management of fleets of resources.

SOA-C02 Question 463

Single page →
Topic 1 · Question 463

A company is using Amazon CloudWatch alarms to monitor Amazon Elastic Kubernetes Service (Amazon EKS) workloads. The alarms are initiated through a threshold definition and are not helping the EKS cluster operate more efficiently. A SysOps administrator must implement a solution that identifies anomalies and generates recommendations for how to address the anomalies. Which solution will meet these requirements?

  • AUse CloudWatch anomaly detection to identify anomalies and provide recommendations
  • BUse CloudWatch Container Insights with Amazon DevOps Guru to identify anomalies and provide recommendations. (correct answer)
  • CUse CloudWatch Container Insights to identify anomalies and provide recommendations
  • DUse CloudWatch anomaly detection with CloudWatch Container Insights to identify anomalies and provide recommendations
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Use CloudWatch Container Insights with Amazon DevOps Guru to identify anomalies and provide recommendations.

Explanation

Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

SOA-C02 Question 464

Single page →
Topic 1 · Question 464 · Select all that apply

A company has an application that uses Amazon DynamoDB tables. The tables are spread across AWS accounts and AWS Regions. The company uses AWS CloudFormation to deploy AWS resources. A new team at the company is deleting unused AWS resources. The team accidentally deletes several production DynamoDB tables by running an AWS Lambda function that makes a DynamoDB DeleteTable API call. The table deletions cause an application outage. A SysOps administrator must implement a solution that minimizes the chance of accidental deletions of tables. The solution also must minimize data loss that results from accidental deletions. Which combination of steps will meet these requirements? (Choose two.)

  • AEnable termination protection for the CloudFormation stacks that deploy the DynamoDB tables.
  • BEnable deletion protection for the DynamoDB tables. (correct answer)
  • CEnable point-in-time recovery for the DynamoDB tables. Restore the tables if they are accidentally deleted. (correct answer)
  • DSchedule daily backups of the DynamoDB tables. Restore the tables if they are accidentally deleted.
  • EExport the DynamoDB tables to Amazon S3 every day. Use Import from Amazon S3 to restore data for tables that are accidentally deleted.
Reveal answer & explanation
Correct answer: B, C

The correct answer is B, C. Option B: Enable deletion protection for the DynamoDB tables. Option C: Enable point-in-time recovery for the DynamoDB tables. Restore the tables if they are accidentally deleted.

Explanation

Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond latency and automatic scaling.

SOA-C02 Question 465

Single page →
Topic 1 · Question 465

A company has created an AWS CloudFormation template that consists of the AWS::EC2::Instance resource and a custom CloudFormation resource. The custom CloudFormation resource is an AWS Lambda function that attempts to run automation on the Amazon EC2 instance. During testing, the Lambda function fails because the Lambda function tries to run before the EC2 instance is launched. Which solution will resolve this issue?

  • AAdd a DependsOn attribute to the custom resource. Specify the EC2 instance in the DependsOn attribute. (correct answer)
  • BUpdate the custom resource's service token to point to a valid Lambda function.
  • CUpdate the Lambda function to use the cfn-response module to send a response to the custom resource.
  • DUse the Fn::If intrinsic function to check for the EC2 instance before the custom resource runs.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Add a DependsOn attribute to the custom resource. Specify the EC2 instance in the DependsOn attribute.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

SOA-C02 Question 466

Single page →
Topic 1 · Question 466

A SysOps administrator needs to ensure that an Amazon RDS for PostgreSQL DB instance has available backups. The DB instance has automated backups turned on with a backup retention period of 7 days. However, no automated backups for the DB instance have been created in the past month. What could be the cause of the lack of automated backups?

  • AThe Amazon S3 bucket that stores the backups is full.
  • BThe DB instance is in the STORAGE_FULL state. (correct answer)
  • CThe DB instance is not configured for Multi-AZ.
  • DThe backup retention period must be 30 days.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: The DB instance is in the STORAGE_FULL state.

SOA-C02 Question 467

Single page →
Topic 1 · Question 467

A company has a list of pre-approved Amazon Machine Images (AMIs) for developers to use to launch Amazon EC2 instances. However, developers are still launching EC2 instances from unapproved AMIs. A SysOps administrator must implement a solution that automatically terminates any instances that are launched from unapproved AMIs. Which solution will meet this requirement?

  • ASet up an AWS Config managed rule to check if instances are running from AMIs that are on the list of pre-approved AMIs. Configure an automatic remediation action so that an AWS Systems Manager Automation runbook terminates any instances that are noncompliant with the rule. (correct answer)
  • BStore the list of pre-approved AMIs in an Amazon DynamoDB global table that is replicated to all AWS Regions that the developers use. Create Regional EC2 launch templates. Configure the launch templates to check AMIs against the list and to terminate any instances that are not on the list.
  • CSelect the Amazon CloudWatch metric that shows all running instances and the AMIs that the instances were launched from. Create a CloudWatch alarm that terminates an instance if the metric shows the use of an unapproved AMI.
  • DCreate a custom Amazon Inspector finding to compare a running instance's AMI against the list of pre-approved AMIs. Create an AWS Lambda function that terminates instances. Configure Amazon Inspector to report findings of unapproved AMIs to an Amazon Simple Queue Service (Amazon SQS) queue to invoke the Lambda function.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Set up an AWS Config managed rule to check if instances are running from AMIs that are on the list of pre-approved AMIs. Configure an automatic remediation action so that an AWS Systems Manager Automation runbook term...

Explanation

AWS Config tracks resource configuration changes and evaluates compliance. AWS Systems Manager operates and automates management of fleets of resources.

SOA-C02 Question 468

Single page →
Topic 1 · Question 468

Users of a company's internal web application recently experienced application performance issues for a brief period. The application includes frontend web servers that run in an Amazon Elastic Kubernetes Service (Amazon EKS) cluster. The application also includes a backend Amazon Aurora PostgreSQL DB cluster that includes one DB instance. A SysOps administrator determines that the source of the performance issues was high utilization of the DB cluster. The single writer instance experienced more than 90% utilization for 11 minutes. The cause of the high utilization was an automated report that is scheduled to run one time each week. What should the SysOps administrator do to ensure that users do not experience performance issues each week when the report runs?

  • AIncrease the size of the DB instance. Monitor the performance during the next scheduled run of the report.
  • BAdd a reader instance. Change the database connection string of the report application to use the newly created reader instance. (correct answer)
  • CAdd another writer instance. Change the database connection string of the report application to use the newly created writer instance.
  • DConfigure auto scaling for the DB cluster. Set the minimum capacity units, maximum capacity units, and target utilization.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Add a reader instance. Change the database connection string of the report application to use the newly created reader instance.

SOA-C02 Question 469

Single page →
Topic 1 · Question 469

A company is using AWS to deploy a critical application on a fleet of Amazon EC2 instances. The company is rewriting the application because the application failed a security review. The application will take 12 months to rewrite. While this rewrite happens, the company needs to rotate IAM access keys that the application uses. A SysOps administrator must implement an automated solution that finds and rotates IAM access keys that are at least 30 days old. The solution must then continue to rotate the IAM access keys every 30 days. Which solution will meet this requirement with the MOST operational efficiency?

  • AUse an AWS Config rule to identify IAM access keys that are at least 30 days old. Configure AWS Config to invoke an AWS Systems Manager Automation runbook to rotate the identified IAM access keys. (correct answer)
  • BUse AWS Trusted Advisor to identify IAM access keys that are at least 30 days old. Configure Trusted Advisor to invoke an AWS Systems Manager Automation runbook to rotate the identified IAM access keys.
  • CCreate a script that checks the age of IAM access keys and rotates them if they are at least 30 days old. Launch an EC2 instance. Schedule the script to run as a cron expression on the EC2 instance every day.
  • DCreate an AWS Lambda function that checks the age of IAM access keys and rotates them if they are at least 30 days old. Use an Amazon EventBridge rule to invoke the Lambda function every time a new IAM access key is created.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use an AWS Config rule to identify IAM access keys that are at least 30 days old. Configure AWS Config to invoke an AWS Systems Manager Automation runbook to rotate the identified IAM access keys.

Explanation

AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. AWS Config tracks resource configuration changes and evaluates compliance. AWS Systems Manager operates and automates management of fleets of resources.

SOA-C02 Question 470

Single page →
Topic 1 · Question 470

A company receives an alert from an Amazon CloudWatch alarm. The alarm indicates that a web application that is running on Amazon EC2 instances is not responding to requests. The EC2 instances have a Red Hat Enterprise Linux operating system and are in an Auto Scaling group. The Auto Scaling group has a minimum capacity of 2 and a maximum capacity of 5. An investigation reveals that the web application is experiencing out-of-memory errors. The company adds memory to the web application and wants to track operating system memory utilization. A CloudWatch memory metric does not currently exist for the EC2 instances in the Auto Scaling group. What should a SysOps administrator do to provide a CloudWatch memory metric for the EC2 instances?

  • AUse an Amazon Machine Image (AMI) that includes the CloudWatch agent. (correct answer)
  • BTurn on CloudWatch detailed monitoring.
  • CTurn on Instance Metadata Service Version 2 (IMDSv2).
  • DUse an Amazon Machine Image (AMI) that is based on Amazon Linux.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use an Amazon Machine Image (AMI) that includes the CloudWatch agent.

Explanation

Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

SOA-C02 Question 471

Single page →
Topic 1 · Question 471

A company is using an Amazon CloudWatch alarm to monitor the FreeLocalStorage metric for an Amazon Aurora PostgreSQL production database. The alarm goes into ALARM state and indicates that the database is running low on temporary storage. A SysOps administrator discovers that a weekly report is using most of the temporary storage that is currently allocated. What should the SysOps administrator do to solve this problem?

  • ATurn on Aurora PostgreSQL query plan management.
  • BModify the configuration of the DB cluster to turn on storage auto scaling.
  • CAdd an Aurora read replica to the DB cluster. Modify the report to use the new read replica. (correct answer)
  • DModify the DB instance class for each DB instance in the DB cluster to increase the instance size.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Add an Aurora read replica to the DB cluster. Modify the report to use the new read replica.

Explanation

Amazon Aurora is a high-performance managed relational database with built-in replication and failover.

SOA-C02 Question 472

Single page →
Topic 1 · Question 472

A company is running a development application on an Amazon EC2 instance. The application uploads 500,000 files that are 1 GB in size into a target Amazon S3 bucket that has default encryption enabled. The EC2 instance is in the same AWS Region where the S3 bucket is deployed. The company uses performance logging that is built into the application software. The logs show that the application is constantly waiting for the files to be written to the S3 bucket. A SysOps administrator needs to improve the application's throughput performance. The SysOps administrator validates that the networking on the EC2 instance is not constrained. What should the SysOps administrator do to improve the S3 upload performance?

  • AEnable S3 Transfer Acceleration on the S3 bucket.
  • BSplit the S3 write operations to use multiple bucket prefixes to write items in parallel. (correct answer)
  • CConfigure AWS PrivateLink for Amazon S3. Turn off encryption on the S3 bucket.
  • DConfigure AWS Global Accelerator in the Region. Turn off encryption on the S3 bucket.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Split the S3 write operations to use multiple bucket prefixes to write items in parallel.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed.

SOA-C02 Question 473

Single page →
Topic 1 · Question 473

A company is using an Amazon EC2 Auto Scaling group to support a workload. A SysOps administrator finds that the Auto Scaling group is configured with two similar scaling policies. One scaling policy adds 5 instances when CPU utilization reaches 80%. The other scaling policy adds 10 instances when CPU utilization reaches 80%. What will happen when CPU utilization reaches the 80% threshold?

  • AAmazon EC2 Auto Scaling will add 5 instances.
  • BAmazon EC2 Auto Scaling will add 10 instances. (correct answer)
  • CAmazon EC2 Auto Scaling will add 15 instances.
  • DThe Auto Scaling group will not scale because of conflicting policies.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Amazon EC2 Auto Scaling will add 10 instances.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

SOA-C02 Question 474

Single page →
Topic 1 · Question 474

An application uses an Amazon Aurora MySQL DB cluster that includes one Aurora Replica. The application's read performance degrades when there are more than 200 user connections. The number of user connections is approximately 180 on a consistent basis. Occasionally, the number of user connections increases rapidly to more than 200. A SysOps administrator must implement a solution that will scale the application automatically as user demand increases or decreases. Which solution will meet these requirements?

  • AModify the DB cluster by increasing the Aurora Replica instance size.
  • BModify the DB cluster by changing to serverless mode whenever the number of user connections exceeds 200.
  • CMigrate to a new Aurora DB cluster that has multiple writer instances. Modify the application's database connection string.
  • DCreate an auto scaling policy that has a target value of 195 for the DatabaseConnections metric. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create an auto scaling policy that has a target value of 195 for the DatabaseConnections metric.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency.

SOA-C02 Question 475

Single page →
Topic 1 · Question 475

A company runs a single-page web application on AWS. The application uses Amazon CloudFront to deliver static content from an Amazon S3 bucket origin. The application also uses an Amazon Elastic Kubernetes Service (Amazon EKS) cluster to serve API calls. Users sometimes report that the website is not operational, even when monitoring shows that the index page is reachable and that the EKS cluster is healthy. A SysOps administrator must implement additional monitoring that can detect when the website is not operational before users report the problem. Which solution will meet these requirements?

  • ACreate an Amazon CloudWatch Synthetics heartbeat monitor canary that points to the fully qualified domain name (FQDN) of the website. (correct answer)
  • BCreate an Amazon CloudWatch Synthetics API canary that monitors the availability of API endpoints from the EKS cluster.
  • CCreate an Amazon CloudWatch RUM app monitor that points to the fully qualified domain name (FQDN) of the website. Configure the app monitor to collect performance telemetry and JavaScript errors.
  • DCreate an Amazon CloudWatch RUM app monitor that uses the API endpoints from the EKS cluster.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create an Amazon CloudWatch Synthetics heartbeat monitor canary that points to the fully qualified domain name (FQDN) of the website.

Explanation

Amazon EBS provides block storage attached to a single EC2 instance. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

SOA-C02 Question 476

Single page →
Topic 1 · Question 476

A company hosts an application on Amazon EC2 instances. The instances are in an Amazon EC2 Auto Scaling group that uses a launch template. The amount of application traffic changes throughout the day. Scaling events happen frequently. A SysOps administrator needs to help developers troubleshoot the application. When a scaling event removes an instance, EC2 Auto Scaling terminates the instance before the developers can log in to the instance to diagnose issues. Which solution will prevent termination of the instance so that the developers can log in to the instance?

  • AEnsure that the Delete on termination setting is turned off in the UserData section of the launch template.
  • BUpdate the Auto Scaling group by enabling instance scale-in protection for newly launched instances. (correct answer)
  • CUse Amazon Inspector to configure a rules package to protect the instances from termination.
  • DUse Amazon GuardDuty to configure rules to protect the instances from termination.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Update the Auto Scaling group by enabling instance scale-in protection for newly launched instances.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency.

SOA-C02 Question 477

Single page →
Topic 1 · Question 477

A SysOps administrator must ensure that all of a company's current and future Amazon S3 buckets have logging enabled. If an S3 bucket does not have logging enabled, an automated process must enable logging for the S3 bucket. Which solution will meet these requirements?

  • AUse AWS Trusted Advisor to perform a check for S3 buckets that do not have logging enabled. Configure the check to enable logging for S3 buckets that do not have logging enabled.
  • BConfigure an S3 bucket policy that requires all current and future S3 buckets to have logging enabled.
  • CUse the s3-bucket-logging-enabled AWS Config managed rule. Add a remediation action that uses an AWS Lambda function to enable logging.
  • DUse the s3-bucket-logging-enabled AWS Config managed rule. Add a remediation action that uses the AWS-ConfigureS3BucketLogging AWS Systems Manager Automation runbook to enable logging. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use the s3-bucket-logging-enabled AWS Config managed rule. Add a remediation action that uses the AWS-ConfigureS3BucketLogging AWS Systems Manager Automation runbook to enable logging.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS Config tracks resource configuration changes and evaluates compliance. AWS Systems Manager operates and automates management of fleets of resources.

Showing questions 461–477 of 477 · Page 24 of 24