🔍

SOA-C02 — questions

Page 5 of 24 · 477 total questions.

SOA-C02 Question 81

Single page →
Topic 1 · Question 81

A company uploaded its website files to an Amazon S3 bucket that has S3 Versioning enabled. The company uses an Amazon CloudFront distribution with the S3 bucket as the origin. The company recently modified the files, but the object names remained the same. Users report that old content is still appearing on the website. How should a SysOps administrator remediate this issue?

  • ACreate a CloudFront invalidation, and add the path of the updated files. (correct answer)
  • BCreate a CloudFront signed URL to update each object immediately.
  • CConfigure an S3 origin access identity (OAI) to display only the updated files to users.
  • DDisable S3 Versioning on the S3 bucket so that the updated files can replace the old files.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create a CloudFront invalidation, and add the path of the updated files.

Explanation

Amazon CloudFront caches content at edge locations to reduce latency and offload origins.

SOA-C02 Question 82

Single page →
Topic 1 · Question 82 · Select all that apply

A company has two VPC networks named VPC A and VPC B. The VPC A CIDR block is 10.0.0.0/16 and the VPC B CIDR block is 172.31.0.0/16. The company wants to establish a VPC peering connection named pcx-12345 between both VPCs. Which rules should appear in the route table of VPC A after configuration? (Choose two.)

  • ADestination: 10.0.0.0/16, Target: Local (correct answer)
  • BDestination: 172.31.0.0/16, Target: Local
  • CDestination: 10.0.0.0/16, Target: pcx-12345
  • DDestination: 172.31.0.0/16, Target: pcx-12345 (correct answer)
  • EDestination: 10.0.0.0/16, Target: 172.31.0.0/16
Reveal answer & explanation
Correct answer: A, D

The correct answer is A, D. Option A: Destination: 10.0.0.0/16, Target: Local Option D: Destination: 172.31.0.0/16, Target: pcx-12345.

SOA-C02 Question 83

Single page →
Topic 1 · Question 83

A company analyzes sales data for its customers. Customers upload files to one of the company's Amazon S3 buckets, and a message is posted to an Amazon Simple Queue Service (Amazon SQS) queue that contains the object Amazon Resource Name (ARN). An application that runs on an Amazon EC2 instance polls the queue and processes the messages. The processing time depends on the size of the file. Customers are reporting delays in the processing of their files. A SysOps administrator decides to configure Amazon EC2 Auto Scaling as the first step. The SysOps administrator creates an Amazon Machine Image (AMI) that is based on the existing EC2 instance. The SysOps administrator also creates a launch template that references the AMI. How should the SysOps administrator configure the Auto Scaling policy to improve the response time?

  • AAdd several different instance sizes in the launch template. Create an Auto Scaling policy based on the ApproximateNumberOfMessagesVisible metric to select the size of the instance based on the number of messages in the queue.
  • BCreate an Auto Scaling policy based on the ApproximateNumberOfMessagesDelayed metric to scale the number of instances based on the number of messages in the queue that have been delayed.
  • CCreate a custom metric based on the ASGAverageCPUUtilization metric and the GroupPendingInstances metric from the Auto Scaling group. Modify the application to calculate the metric and post the metric to Amazon CloudWatch once each minute. Create an Auto Scaling policy based on this metric to scale the number of instances.
  • DCreate a custom metric based on the ApproximateNumberOfMessagesVisible metric and the number of instances in the InService state in the Auto Scaling group. Modify the application to calculate the metric and post the metric to Amazon CloudWatch once each minute. Create an Auto Scaling policy based on this metric to scale the number of instances. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create a custom metric based on the ApproximateNumberOfMessagesVisible metric and the number of instances in the InService state in the Auto Scaling group. Modify the application to calculate the metric and post the m...

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

SOA-C02 Question 84

Single page →
Topic 1 · Question 84

A company runs a multi-tier web application with two Amazon EC2 instances in one Availability Zone in the us-east-1 Region. A SysOps administrator must migrate one of the EC2 instances to a new Availability Zone. Which solution will accomplish this?

  • ACopy the EC2 instance to a different Availability Zone. Terminate the original instance.
  • BCreate an Amazon Machine Image (AMI) from the EC2 instance and launch it in a different Availability Zone. Terminate the original instance. (correct answer)
  • CMove the EC2 instance to a different Availability Zone using the AWS CLI.
  • DStop the EC2 instance, modify the Availability Zone, and start the instance.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create an Amazon Machine Image (AMI) from the EC2 instance and launch it in a different Availability Zone. Terminate the original instance.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

SOA-C02 Question 85

Single page →
Topic 1 · Question 85

A company is expanding its fleet of Amazon EC2 instances before an expected increase of traffic. When a SysOps administrator attempts to add more instances, an InstanceLimitExceeded error is returned. What should the SysOps administrator do to resolve this error?

  • AAdd an additional CIDR block to the VPC.
  • BLaunch the EC2 instances in a different Availability Zone.
  • CLaunch new EC2 instances in another VPC.
  • DUse Service Quotas to request an EC2 quota increase. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use Service Quotas to request an EC2 quota increase.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system.

SOA-C02 Question 86

Single page →
Topic 1 · Question 86

A company wants to prohibit its developers from using a particular family of Amazon EC2 instances. The company uses AWS Organizations and wants to apply the restriction across multiple accounts. What is the MOST operationally efficient way for the company to apply service control policies (SCPs) to meet these requirements?

  • AAdd the accounts to an organizational unit (OU). Apply the SCPs to the OU. (correct answer)
  • BAdd the accounts to resource groups in AWS Resource Groups. Apply the SCPs to the resource groups.
  • CApply the SCPs to each developer account
  • DEnroll the accounts with AWS Control Tower. Apply the SCPs to the AWS Control Tower management account.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Add the accounts to an organizational unit (OU). Apply the SCPs to the OU.

Explanation

Service Control Policies set guardrails on what accounts in an organization can do.

SOA-C02 Question 87

Single page →
Topic 1 · Question 87

An application is running on an Amazon EC2 instance in a VPC with the default DHCP option set. The application connects to an on-premises Microsoft SQL Server database with the DNS name mssql.example.com. The application is unable to resolve the database DNS name. Which solution will fix this problem?

  • ACreate an Amazon Route 53 Resolver inbound endpoint. Add a forwarding rule for the domain example.com. Associate the forwarding rule with the VPC.
  • BCreate an Amazon Route 53 Resolver inbound endpoint. Add a system rule for the domain example.com. Associate the system rule with the VPC.
  • CCreate an Amazon Route 53 Resolver outbound endpoint. Add a forwarding rule for the domain example.com. Associate the forwarding rule with the VPC. (correct answer)
  • DCreate an Amazon Route 53 Resolver outbound endpoint. Add a system rule for the domain example.com. Associate the system rule with the VPC.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an Amazon Route 53 Resolver outbound endpoint. Add a forwarding rule for the domain example.com. Associate the forwarding rule with the VPC.

Explanation

Amazon Route 53 provides DNS with health checks and routing policies for availability and latency.

SOA-C02 Question 88

Single page →
Topic 1 · Question 88

A company's application is hosted by an internet provider at app.example.com. The company wants to access the application by using www.company.com, which the company owns and manages with Amazon Route 53. Which Route 53 record should be created to address this?

  • AA record
  • BAlias record
  • CCNAME record (correct answer)
  • DPointer (PTR) record
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: CNAME record.

SOA-C02 Question 89

Single page →
Topic 1 · Question 89

A company expanded its web application to serve a worldwide audience. A SysOps administrator has implemented a multi-Region AWS deployment for all production infrastructure. The SysOps administrator must route traffic based on the location of resources. Which Amazon Route 53 routing policy should the SysOps administrator use to meet this requirement?

  • AGeolocation routing policy
  • BGeoproximity routing policy (correct answer)
  • CLatency-based routing policy
  • DMultivalue answer routing policy
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Geoproximity routing policy.

SOA-C02 Question 90

Single page →
Topic 1 · Question 90

A SysOps administrator wants to upload a file that is 1 TB in size from on-premises to an Amazon S3 bucket using multipart uploads. What should the SysOps administrator do to meet this requirement?

  • AUpload the file using the S3 console.
  • BUse the s3api copy-object command.
  • CUse the s3api put-object command.
  • DUse the s3 cp command (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use the s3 cp command

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed.

SOA-C02 Question 91

Single page →
Topic 1 · Question 91

An application team is working with a SysOps administrator to define Amazon CloudWatch alarms for an application. The application team does not know the application's expected usage or expected growth. Which solution should the SysOps administrator recommend?

  • ACreate CloudWatch alarms that are based on anomaly detection. (correct answer)
  • BCreate CloudWatch alarms by using a set of composite alarms.
  • CCreate CloudWatch alarms by using static thresholds.
  • DCreate CloudWatch alarms that treat missing data as breaching.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create CloudWatch alarms that are based on anomaly detection.

Explanation

Amazon CloudWatch collects metrics, logs and alarms to monitor and react to operational health.

SOA-C02 Question 92

Single page →
Topic 1 · Question 92

A company runs a stateless application that is hosted on an Amazon EC2 instance. Users are reporting performance issues. A SysOps administrator reviews the Amazon CloudWatch metrics for the application and notices that the instance's CPU utilization frequently reaches 90% during business hours. What is the MOST operationally efficient solution that will improve the application's responsiveness?

  • AConfigure CloudWatch logging on the EC2 instance. Configure a CloudWatch alarm for CPU utilization to alert the SysOps administrator when CPU utilization goes above 90%.
  • BConfigure an AWS Client VPN connection to allow the application users to connect directly to the EC2 instance private IP address to reduce latency.
  • CCreate an Auto Scaling group, and assign it to an Application Load Balancer. Configure a target tracking scaling policy that is based on the average CPU utilization of the Auto Scaling group. (correct answer)
  • DCreate a CloudWatch alarm that activates when the EC2 instance's CPU utilization goes above 80%. Configure the alarm to invoke an AWS Lambda function that vertically scales the instance.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Create an Auto Scaling group, and assign it to an Application Load Balancer. Configure a target tracking scaling policy that is based on the average CPU utilization of the Auto Scaling group.

Explanation

Auto Scaling adjusts capacity automatically to match demand, improving availability and cost efficiency. An Application Load Balancer distributes HTTP/HTTPS traffic and supports path/host routing. A load balancer distributes traffic across targets in multiple AZs for availability and scale.

SOA-C02 Question 93

Single page →
Topic 1 · Question 93 · Select all that apply

An ecommerce company uses an Amazon ElastiCache for Memcached cluster for in-memory caching of popular product queries on the shopping site. When viewing recent Amazon CloudWatch metrics data for the ElastiCache cluster, the SysOps administrator notices a large number of evictions. Which of the following actions will reduce these evictions? (Choose two.)

  • AAdd an additional node to the ElastiCache cluster. (correct answer)
  • BIncrease the ElastiCache time to live (TTL).
  • CIncrease the individual node size inside the ElastiCache cluster. (correct answer)
  • DPut an Elastic Load Balancer in front of the ElastiCache cluster.
  • EUse Amazon Simple Queue Service (Amazon SQS) to decouple the ElastiCache cluster.
Reveal answer & explanation
Correct answer: A, C

The correct answer is A, C. Option A: Add an additional node to the ElastiCache cluster. Option C: Increase the individual node size inside the ElastiCache cluster.

Explanation

Amazon ElastiCache provides in-memory caching (Redis/Memcached) to reduce latency and offload the database.

SOA-C02 Question 94

Single page →
Topic 1 · Question 94 · Select all that apply

A SysOps administrator wants to provide access to AWS services by attaching an IAM policy to multiple IAM users. The SysOps administrator also wants to be able to change the policy and create new versions. Which combination of actions will meet these requirements? (Choose two.)

  • AAdd the users to an IAM service-linked role. Attach the policy to the role.
  • BAdd the users to an IAM user group. Attach the policy to the group. (correct answer)
  • CCreate an AWS managed policy.
  • DCreate a customer managed policy. (correct answer)
  • ECreate an inline policy.
Reveal answer & explanation
Correct answer: B, D

The correct answer is B, D. Option B: Add the users to an IAM user group. Attach the policy to the group. Option D: Create a customer managed policy.

Explanation

AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies.

SOA-C02 Question 95

Single page →
Topic 1 · Question 95

A company stores critical data in Amazon S3 buckets. A SysOps administrator must build a solution to record all S3 API activity. Which action will meet this requirement?

  • AConfigure S3 bucket metrics to record object access logs.
  • BCreate an AWS CloudTrail trail to log data events for all S3 objects. (correct answer)
  • CEnable S3 server access logging for each S3 bucket.
  • DUse AWS IAM Access Analyzer for Amazon S3 to store object access logs.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Create an AWS CloudTrail trail to log data events for all S3 objects.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed. AWS CloudTrail records API activity for auditing and governance.

SOA-C02 Question 96

Single page →
Topic 1 · Question 96

A company runs an application that uses a MySQL database on an Amazon EC2 instance. The EC2 instance has a General Purpose SSD Amazon Elastic Block Store (Amazon EBS) volume. The company made changes to the application code and now wants to perform load testing to evaluate the impact of the code changes. A SysOps administrator must create a new MySQL instance from a snapshot of the existing production instance. This new instance needs to perform as similarly as possible to the production instance. Which restore option meets these requirements?

  • AUse EBS fast snapshot restore to create a new General Purpose SSD EBS volume from the production snapshot. (correct answer)
  • BUse EBS fast snapshot restore to create a new Provisioned IOPS SSD EBS volume from the production snapshot.
  • CUse EBS snapshot restore to create a new General Purpose SSD EBS volume from the production snapshot.
  • DUse EBS snapshot restore to create a new Provisioned IOPS SSD EBS volume from the production snapshot.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Use EBS fast snapshot restore to create a new General Purpose SSD EBS volume from the production snapshot.

Explanation

Amazon EBS provides block storage attached to a single EC2 instance.

SOA-C02 Question 97

Single page →
Topic 1 · Question 97

A team of on-call engineers frequently needs to connect to Amazon EC2 instances in a private subnet to troubleshoot and run commands. The instances use either the latest AWS-provided Windows Amazon Machine Images (AMIs) or Amazon Linux AMIs. The team has an existing 1AM role for authorization. A SysOps administrator must provide the team with access to the instances by granting IAM permissions to this role. Which solution will meet this requirement?

  • AAdd a statement to the 1AM role policy to allow the ssm:StartSession action on the instances. Instruct the team to use AWS Systems Manager Session Manager to connect to the instances by using the assumed IAM role. (correct answer)
  • BAssociate an Elastic IP address and a security group with each instance. Add the engineers' IP addresses to the security group inbound rules. Add a statement to the IAM role policy to allow the ec2:AuthorizeSecurityGrouplngress action so that the team can connect to the instances.
  • CCreate a bastion host with an EC2 instance, and associate the bastion host with the VPC. Add a statement to the 1AM role policy to allow the ec2:CreateVpnConnection action on the bastion host. Instruct the team to use the bastion host endpoint to connect to the instances.
  • DCreate an internet-facing Network Load Balancer. Use two listeners. Forward port 22 to a target group of Linux instances. Forward port 3389 to a target group of Windows instances. Add a statement to the IAM role policy to allow the ec2:CreateRoute action so that the team can connect to the instances.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Add a statement to the 1AM role policy to allow the ssm:StartSession action on the instances. Instruct the team to use AWS Systems Manager Session Manager to connect to the instances by using the assumed IAM role.

Explanation

An IAM role grants temporary, least-privilege permissions to AWS resources without long-term credentials. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. AWS Systems Manager operates and automates management of fleets of resources.

SOA-C02 Question 98

Single page →
Topic 1 · Question 98

A company needs to ensure strict adherence to a budget for 25 applications deployed on AWS. Separate teams are responsible for storage, compute, and database costs. A SysOps administrator must implement an automated solution to alert each team when their projected spend will exceed a quarterly amount that has been set by the finance department. The solution cannot incur additional compute, storage, or database costs. Which solution will meet these requirements?

  • AConfigure AWS Cost and Usage Reports to send a daily report to an Amazon S3 bucket. Create an AWS Lambda function that will evaluate spend by service and notify each team by using Amazon Simple Notification Service (Amazon SNS) notifications. Invoke the Lambda function when a report is placed in the S3 bucket.
  • BConfigure AWS Cost and Usage Reports to send a daily report to an Amazon S3 bucket. Create a rule in Amazon EventBridge (Amazon CloudWatch Events) to evaluate the spend by service and notify each team by using Amazon Simple Queue Service (Amazon SQS) when the cost threshold is exceeded.
  • CUse AWS Budgets to create one cost budget and select each of the services in use. Specify the budget amount defined by the finance department along with the forecasted cost threshold. Enter the appropriate email recipients for the budget.
  • DUse AWS Budgets to create a cost budget for each team, filtering by the services they own. Specify the budget amount defined by the finance department along with a forecasted cost threshold. Enter the appropriate email recipients for each budget. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Use AWS Budgets to create a cost budget for each team, filtering by the services they own. Specify the budget amount defined by the finance department along with a forecasted cost threshold. Enter the appropriate emai...

Explanation

Amazon Forecast produces time-series forecasts using machine learning. AWS Budgets alerts on cost and usage thresholds.

SOA-C02 Question 99

Single page →
Topic 1 · Question 99

A company hosts a static website on Amazon S3. An Amazon CloudFront distribution presents this site to global users. The company uses the Managed- CachingDisabled CloudFront cache policy. The company's developers confirm that they frequently update a file in Amazon S3 with new information. Users report that the website presents correct information when the website first loads the file. However, the users' browsers do not retrieve the updated file after a refresh. What should a SysOps administrator recommend to fix this issue?

  • AAdd a Cache-Control header field with max-age=0 to the S3 object. (correct answer)
  • BChange the CloudFront cache policy to Managed-CachingOptimized.
  • CDisable bucket versioning in the S3 bucket configuration.
  • DEnable content compression in the CloudFront configuration.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Add a Cache-Control header field with max-age=0 to the S3 object.

Explanation

Amazon S3 provides durable, scalable object storage that is fully managed.

SOA-C02 Question 100

Single page →
Topic 1 · Question 100

A company has a policy that requires all Amazon EC2 instances to have a specific set of tags. If an EC2 instance does not have the required tags, the noncompliant instance should be terminated. What is the MOST operationally efficient solution that meets these requirement?

  • ACreate an Amazon EventBridge (Amazon CloudWatch Events) rule to send all EC2 instance state changes to an AWS Lambda function to determine if each instance is compliant. Terminate any noncompliant instances.
  • BCreate an IAM policy that enforces all EC2 instance tag requirements. If the required tags are not in place for an instance, the policy will terminate noncompliant instance.
  • CCreate an AWS Lambda function to determine if each EC2 instance is compliant and terminate an instance if it is noncompliant. Schedule the Lambda function to invoke every 5 minutes.
  • DCreate an AWS Config rule to check if the required tags are present. If an EC2 instance is noncompliant, invoke an AWS Systems Manager Automation document to terminate the instance. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Create an AWS Config rule to check if the required tags are present. If an EC2 instance is noncompliant, invoke an AWS Systems Manager Automation document to terminate the instance.

Explanation

Amazon EC2 provides resizable virtual servers when you need full control of the operating system. AWS Config tracks resource configuration changes and evaluates compliance. AWS Systems Manager operates and automates management of fleets of resources.

Showing questions 81–100 of 477 · Page 5 of 24