SOA-C02 Practice Test Questions

486 Questions


Topic 1: Mix Questions

A company is planning to host an application on a set of Amazon EC2 instances that are distributed across multiple Availability Zones. The application must be able to scale to millions of requests each second. A SysOps administrator must design a solution to distribute the traffic to the EC2 instances. The solution must be optimized to handle sudden and volatile traffic patterns while using a single static IP address for each Availability Zone. Which solution will meet these requirements?


A. Amazon Simple Queue Service (Amazon SQS) queue


B. Application Load Balancer


C. AWS Global Accelerator


D. Network Load Balancer





D.
  Network Load Balancer

For an application that must scale to millions of requests per second and requires a single static IP address for each Availability Zone, a Network Load Balancer (NLB) is the most suitable option. NLBs are designed for high-performance, low-latency networking, and they support static IP addresses for each Availability Zone, making it ideal for volatile traffic patterns. Option D is the correct choice. AWS provides extensive documentation on NLB capabilities and configurations that suit these requirements AWS Network Load Balancer.

A company uses AWS Cloud Formation templates to deploy cloud infrastructure. An analysis of all the company's templates shows that the company has declared the same components in multiple templates. A SysOps administrator needs to create dedicated templates that have their own parameters and conditions for these common components. Which solution will meet this requirement?


A. Develop a CloudFormaiion change set.


B. Develop CloudFormation macros.


C. Develop CloudFormation nested stacks.


D. Develop CloudFormation stack sets.





C.
  Develop CloudFormation nested stacks.

An AWS Cloud Formation template creates an Amazon RDS instance This template is used to build up development environments as needed and then delete the stack when the environment is no longer required. The RDS-persisted data must be retained for further use. even after the Cloud Format ton stack is deleted How can this be achieved in a reliable and efficient way?


A. Write a script to continue backing up the RDS instance every live minutes.


B. Create an AWS Lambda function to take a snapshot of the RDS instance, and manually invoke the function before deleting the stack.


C. Use the Snapshot Deletion Policy in the Cloud Formation template definition of the RDS instance.


D. Create a new CloudFormallon template to perform backups of the RDS instance, and run this template before deleting the stack.





C.
  Use the Snapshot Deletion Policy in the Cloud Formation template definition of the RDS instance.

A company uses an Amazon S3 bucket to store data files. The S3 bucket contains hundreds of objects. The company needs to replace a tag on all the objects in the S3 bucket with another tag. What is the MOST operationally efficient way to meet this requirement?


A. Use S3 Batch Operations. Specify the operation to replace all object tags.


B. Use the AWS CLI to get the tags for each object. Save the tags in a list. Use S3 Batch Operations. Specify the operation to delete all object tags. Use the AWS CLI and the list to retag the objects.


C. Use the AWS CLI to get the tags for each object. Save the tags in a list. Use the AWS CLI and the list to remove the object tags. Use the AWS CLI and the list to retag the objects.


D. Use the AWS CLI to copy the objects to another S3 bucket. Add the new tag to the copied objects. Delete the original objects.





A.
  Use S3 Batch Operations. Specify the operation to replace all object tags.

Amazon S3 Batch Operations is a feature that lets you perform large-scale batch operations on S3 objects. It is the most operationally efficient way to replace a tag on all objects in an S3 bucket.

A Sysops administrator launches an Amazon EC2 instance from a Windows Amazon Machine Image (AMI). The EC2 instance includes additional Amazon Elastic Block Store (Amazon EBS) volumes. When the instance is launched, none of the additional Amazon Elastic Block Store (Amazon EBS) volumes are initialized and ready for use through a drive letter. The SysOps administrator needs to automate the EBS volume initialization. Which solution will meet these requirements in the MOST operationally efficient way?


A. Create an Amazon EventBridge rule. Configure an AWS Systems Manager Automation runbook as a target of the EventBridge rule to initialize the disks after an EC2 instance launch event.


B. Create an AmazolkventBridge rule. Configure an AWS Lambda function as a target of the EventBridge rule to initialize the drives after the AMI is launched.


C. Create an AWS Config rule to automatically initialize the EBS volumes on Windows EC2 instances.


D. Add the secondary volume configuration to the DriveLetterMappingConfig.json file. Configure the InitializeDisks.ps1 Windows PowerShell script to run at launch. Create a new AMI from the running EC2 instance.





D.
  Add the secondary volume configuration to the DriveLetterMappingConfig.json file. Configure the InitializeDisks.ps1 Windows PowerShell script to run at launch. Create a new AMI from the running EC2 instance.

Explanation:
To automate the initialization of additional EBS volumes on Windows EC2 instances, the most effective approach is to integrate initialization scripts within the instance so that they execute upon startup:

  • Configure Initialization Script: Use a Windows PowerShell script (InitializeDisks.ps1) to initialize and format the additional EBS volumes. The script can assign drive letters based on configurations specified in DriveLetterMappingConfig.json.
  • Automate at Launch: Ensure that the PowerShell script runs automatically upon instance startup. This can be configured through Windows Task Scheduler or by setting it up in the startup folder.
  • Create a Custom AMI: Once the instance is configured with the script and successfully initializes the disks on startup, create a new AMI from this setup. This AMI can then be used to launch new instances that will automatically initialize their additional EBS volumes with no manual intervention required.
This method leverages native Windows tools and AWS capabilities to automate EBS volume initialization, enhancing operational efficiency without additional external dependencies.

A company has a critical serverless application that uses multiple AWS Lambda functions. Each Lambda function generates 1 GB of log data daily in tts own Amazon CloudWatch Logs log group. The company's security team asks for a count of application errors, grouped by type, across all of the log groups. What should a SysOps administrator do to meet this requirement?


A. Perform a CloudWatch Logs Insights query that uses the stats command and count function.


B. Perform a CloudWatch Logs search that uses the groupby keyword and count function.


C. Perform an Amazon Athena query that uses the SELECT and GROUP BY keywords.


D. Perform an Amazon RDS query that uses the SELECT and GROUP BY keywords.





A.
  Perform a CloudWatch Logs Insights query that uses the stats command and count function.

A company needs to view a list of security groups that are open to the internet on port 3389. What should a SysOps administrator do to meet this requirement?


A. Configure Amazon GuardDuly to scan security groups and report unrestricted access on port 3389.


B. Configure a service control policy (SCP) to identify security groups that allow unrestricted access on port 3389


C. Use AWS Identity and Access Management Access Analyzer to find any instances that have unrestricted access on port 3389.


D. Use AWS Trusted Advisor to find security groups that allow unrestricted access on port 3389.





D.
  Use AWS Trusted Advisor to find security groups that allow unrestricted access on port 3389.

A SysOps administrator is preparing to deploy an application to Amazon EC2 instances that are in an Auto Scaling group. The application requires dependencies to be installed. Application updates are Issued weekly. The SysOps administrator needs to implement a solution to incorporate the application updates on a regular basis. The solution also must conduct a vulnerability scan during Amazon Machine Image (AMI) creation. What is the MOST operationally efficient solution that meets these requirements?


A. Create a script that uses Packer. Schedule a cron job to run the script.


B. Install the application and its dependencies on an EC2 instance. Create an AMI of the H£2 instance.


C. Use EC2 Image Builder with a custom recipe to install the application and its dependencies.


D. Invoke the EC2 Createlmage API operation by using an Amazon EventBridge scheduled rule.





C.
  Use EC2 Image Builder with a custom recipe to install the application and its dependencies.

Explanation:
To efficiently manage application deployments and updates on Amazon EC2 instances within an Auto Scaling group, along with ensuring security through vulnerability scans:

  • EC2 Image Builder: This AWS service automates the creation, management, and deployment of customized, secure, and up-to-date "golden" server images. By using EC2 Image Builder, you can automate the installation of software, patches, and security configurations.
  • Custom Recipes: Define a custom recipe in EC2 Image Builder that includes steps to install the application and its dependencies. Additionally, configure the recipe to perform vulnerability scans as part of the image creation process.
  • Automated Pipeline: Set up an Image Builder pipeline that triggers on a regular schedule (e.g., weekly) to incorporate the latest application updates and security patches into the AMI. The new AMIs can then be automatically used by the Auto Scaling group to launch updated and secure instances.
This solution not only streamlines the management of application deployments and updates but also ensures that all instances launched by the Auto Scaling group meet the latest security and compliance standards, minimizing operational overhead and enhancing security.

A company hosts an application on Amazon EC2 instances behind an Application Load Balancer (ALB). One of the company's vendors needs a static IP address. The vendor will add this static IP address to its outbound allow list so that the vendor can access the application on the EC2 instances. Which solution will provide the static IP address?


A. Associate an Elastic IP address with the ALB.


B. Associate an AWS WAF web ACL that has an IP match condition rule with the ALB.


C. Create a VPC endpoint. Associate the VPC endpoint with the ALB.


D. Replace the ALB with a Network Load Balancer.





D.
  Replace the ALB with a Network Load Balancer.

A company's customers are reporting increased latency while accessing static web content from Amazon S3 A SysOps administrator observed a very high rate of read operations on a particular S3 bucket What will minimize latency by reducing load on the S3 bucket?


A. Migrate the S3 bucket to a region that is closer to end users' geographic locations


B. Use cross-region replication to replicate all of the data to another region


C. Create an Amazon CloudFront distribution with the S3 bucket as the origin.


D. Use Amazon ElastiCache to cache data being served from Amazon S3





C.
  Create an Amazon CloudFront distribution with the S3 bucket as the origin.

Explanation: To minimize latency and reduce the load on an Amazon S3 bucket serving static web content, creating an Amazon CloudFront distribution with the S3 bucket as the origin is the most effective solution.

Accompany wants to monitor the number of Amazon EC2 instances that it is running. The company also wants to automate a service quota increase when the number of instances reaches a specific threshold. Which solution meets these requirements?


A. Create an Amazon CloudWatch alarm to monitor Service Quotas. Configure the alarm to invoke an AWS Lambda function to request a quota increase when the alarm reaches the threshold


B. Create an AWS Config rule to monitor Service Quotas. Call an AWS Lambda function to remediate the action and increase the quota.


C. Create an Amazon CloudWateh alarm to monitor the AWS Health Dashboard. Configure the alarm to invoke an AWS Lambda function to request a quota increase when the alarm reaches the threshold.


D. Create an Amazon CloudWatch alarm to monitor AWS Trusted Advisor service quotas. Configure the alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to increase the quota.





A.
  Create an Amazon CloudWatch alarm to monitor Service Quotas. Configure the alarm to invoke an AWS Lambda function to request a quota increase when the alarm reaches the threshold

Explanation:
This approach uses CloudWatch for monitoring and Lambda for automation, allowing for quick and efficient quota management:

  • Setup CloudWatch Alarm: Monitor the usage of EC2 instances against the service quota using CloudWatch.
  • Lambda Function: Write a Lambda function that triggers a quota increase request via the Service Quotas API when the threshold is met.
  • Integration: Configure the CloudWatch alarm to trigger this Lambda function when the instance count approaches the service quota.

A company runs several workloads on AWS. The company identifies five AWS Trusted Advisor service quota metrics to monitor in a specific AWS Region. The company wants to receive email notification each time resource usage exceeds 60% of one of the service quotas. Which solution will meet these requirements?


A. Create five Amazon CloudWatch alarms, one for each Trusted Advisor service quota metric. Configure an Amazon Simple Notification Service (Amazon SNS) topic for email notification each time that usage exceeds 60% of one of the service quotas.


B. Create five Amazon CloudWatch alarms, one for each Trusted Advisor service quota metric. Configure an Amazon Simple Queue Service (Amazon SQS) queue for email notification each time that usage exceeds 60% of one of the service quotas.


C. Use the AWS Service Health Dashboard to monitor each Trusted Advisor service quota metric. Configure an Amazon Simple Queue Service (Amazon SQS) queue for email notification each time that usage exceeds 60% of one of the service quotas.


D. Use the AWS Service Health Dashboard to monitor each Trusted Advisor service quota metric. Configure an Amazon Simple Notification Service (Amazon SNS) topic for email notification each time that usage exceeds 60% of one of the service quotas.





A.
  Create five Amazon CloudWatch alarms, one for each Trusted Advisor service quota metric. Configure an Amazon Simple Notification Service (Amazon SNS) topic for email notification each time that usage exceeds 60% of one of the service quotas.

Explanation: CloudWatch alarms allow you to monitor AWS resources, and you can configure an SNS topic to send an email notification each time one of the alarms is triggered. This will ensure that the company receives email notifications each time one of the service quotas is exceeded, allowing the company to take action as needed.


Page 15 out of 41 Pages
Previous