Amazon Amazon Certifications SOA-C02 Questions & Answers

• Question 131:

  An application team is working with a SysOps administrator to define Amazon CloudWatch alarms for an application. The application team does not know the application's expected usage or expected growth. Which solution should the SysOps administrator recommend?

  A. Create CloudWatch alarms that are based on anomaly detection.

  B. Create CloudWatch alarms by using a set of composite alarms.

  C. Create CloudWatch alarms by using static thresholds.

  D. Create CloudWatch alarms that treat missing data as breaching.

  Correct Answer: A

  https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Anomaly_Detection.html

• Question 132:

  A SysOps administrator wants to provide access to AWS services by attaching an IAM policy to multiple IAM users. The SysOps administrator also wants to be able to change the policy and create new versions. Which combination of actions will meet these requirements? (Choose two.)

  A. Add the users to an IAM service-linked role. Attach the policy to the role.

  B. Add the users to an IAM user group. Attach the policy to the group.

  C. Create an AWS managed policy.

  D. Create a customer managed policy.

  E. Create an inline policy.

  Correct Answer: BD

  https://docs.aws.amazon.com/acm/latest/userguide/authen-custmanagedpolicies.html https://docs.aws.amazon.com/IAM/latest/UserGuide/id_groups.html

• Question 133:

  A company stores critical data in Amazon S3 buckets. A SysOps administrator must build a solution to record all S3 API activity. Which action will meet this requirement?

  A. Configure S3 bucket metrics to record object access logs.

  B. Create an AWS CloudTrail trail to log data events for all S3 objects.

  C. Enable S3 server access logging for each S3 bucket.

  D. Use AWS IAM Access Analyzer for Amazon S3 to store object access logs.

  Correct Answer: B

  Amazon S3 is integrated with AWS CloudTrail, a service that provides a record of actions taken by a user, role, or an AWS service in Amazon S3. CloudTrail captures a subset of API calls for Amazon S3 as events, including calls from the Amazon S3 console and code calls to the Amazon S3 APIs. https://docs.aws.amazon.com/AmazonS3/latest/userguide/cloudtrail-logging.html

• Question 134:

  A company runs an application that uses a MySQL database on an Amazon EC2 instance. The EC2 instance has a General Purpose SSD Amazon Elastic Block Store (Amazon EBS) volume. The company made changes to the application

  code and now wants to perform load testing to evaluate the impact of the code changes. A SysOps administrator must create a new MySQL instance from a snapshot of the existing production instance. This new instance needs to perform as

  similarly as possible to the production instance.

  Which restore option meets these requirements?

  A. Use EBS fast snapshot restore to create a new General Purpose SSD EBS volume from the production snapshot.

  B. Use EBS fast snapshot restore to create a new Provisioned IOPS SSD EBS volume from the production snapshot.

  C. Use EBS snapshot restore to create a new General Purpose SSD EBS volume from the production snapshot.

  D. Use EBS snapshot restore to create a new Provisioned IOPS SSD EBS volume from the production snapshot.

  Correct Answer: A

  https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-fast-snapshot-restore.html

• Question 135:

  A company hosts a static website on Amazon S3. An Amazon CloudFront distribution presents this site to global users. The company uses the Managed-CachingDisabled CloudFront cache policy. The company's developers confirm that they

  frequently update a file in Amazon S3 with new information.

  Users report that the website presents correct information when the website first loads the file. However, the users' browsers do not retrieve the updated file after a refresh.

  What should a SysOps administrator recommend to fix this issue?

  A. Add a Cache-Control header field with max-age=0 to the S3 object.

  B. Change the CloudFront cache policy to Managed-CachingOptimized.

  C. Disable bucket versioning in the S3 bucket configuration.

  D. Enable content compression in the CloudFront configuration.

  Correct Answer: A

  You can control how long your files stay in a CloudFront cache before CloudFront forwards another request to your origin. Reducing the duration allows you to serve dynamic content. Increasing the duration means that your users get better performance because your files are more likely to be served directly from the edge cache. A longer duration also reduces the load on your origin. To change the cache duration for an individual file, you can configure your origin to add a Cache-Control header with the max-age or s-maxage directive, or an Expires header to the file. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Expiration.html

• Question 136:

  A company's application is hosted by an internet provider at app.example.com. The company wants to access the application by using www.company.com, which the company owns and manages with Amazon Route 53. Which Route 53 record should be created to address this?

  A. A record

  B. Alias record

  C. CNAME record

  D. Pointer (PTR) record

  Correct Answer: C

  You should never use a CNAME record for your root domain name (e.g. example.com). https://support.dnsimple.com/articles/differences-between-a-cname-alias-url/

• Question 137:

  A company expanded its web application to serve a worldwide audience. A SysOps administrator has implemented a multi-Region AWS deployment for all production infrastructure. The SysOps administrator must route traffic based on the

  location of resources.

  Which Amazon Route 53 routing policy should the SysOps administrator use to meet this requirement?

  A. Geolocation routing policy

  B. Geoproximity routing policy

  C. Latency-based routing policy

  D. Multivalue answer routing policy

  Correct Answer: B

  The Geolocation routing policy allows you to route traffic based on the geographic location of your users. You can create different routing configurations based on the continent, country, state, or even postal code of the requesting user. This policy is useful when you want to provide different responses or direct traffic to specific resources based on the user's location.

• Question 138:

  A company wants to prohibit its developers from using a particular family of Amazon EC2 instances. The company uses AWS Organizations and wants to apply the restriction across multiple accounts. What is the MOST operationally efficient way for the company to apply service control policies (SCPs) to meet these requirements?

  A. Add the accounts to an organizational unit (OU). Apply the SCPs to the OU.

  B. Add the accounts to resource groups in AWS Resource Groups. Apply the SCPs to the resource groups.

  C. Apply the SCPs to each developer account

  D. Enroll the accounts with AWS Control Tower. Apply the SCPs to the AWS Control Tower management account.

  Correct Answer: A

  https://aws.amazon.com/blogs/industries/best-practices-for-aws-organizations-service-control-policies-in-a-multi-account-environment/

• Question 139:

  A company runs a multi-tier web application with two Amazon EC2 instances in one Availability Zone in the us-east-1 Region. A SysOps administrator must migrate one of the EC2 instances to a new Availability Zone. Which solution will accomplish this?

  A. Copy the EC2 instance to a different Availability Zone. Terminate the original instance.

  B. Create an Amazon Machine Image (AMI) from the EC2 instance and launch it in a different Availability Zone. Terminate the original instance.

  C. Move the EC2 instance to a different Availability Zone using the AWS CLI.

  D. Stop the EC2 instance, modify the Availability Zone, and start the instance.

  Correct Answer: B

  It's not possible to move an existing instance to another subnet, Availability Zone, or VPC. Instead, you can manually migrate the instance by creating a new Amazon Machine Image (AMI) from the source instance. Then, launch a new instance using the new AMI in the desired subnet, Availability Zone, or VPC. Finally, you can reassign any Elastic IP addresses from the source instance to the new instance. https://aws.amazon.com/premiumsupport/knowledge-center/move-ec2-instance/

• Question 140:

  A company analyzes sales data for its customers. Customers upload files to one of the company's Amazon S3 buckets, and a message is posted to an Amazon Simple Queue Service (Amazon SQS) queue that contains the object Amazon

  Resource Name (ARN). An application that runs on an Amazon EC2 instance polls the queue and processes the messages. The processing time depends on the size of the file. Customers are reporting delays in the processing of their files.

  A SysOps administrator decides to configure Amazon EC2 Auto Scaling as the first step. The SysOps administrator creates an Amazon Machine Image (AMI) that is based on the existing EC2 instance. The SysOps administrator also creates

  a launch template that references the AMI.

  How should the SysOps administrator configure the Auto Scaling policy to improve the response time?

  A. Add several different instance sizes in the launch template. Create an Auto Scaling policy based on the ApproximateNumberOfMessagesVisible metric to select the size of the instance based on the number of messages in the queue.

  B. Create an Auto Scaling policy based on the ApproximateNumberOfMessagesDelayed metric to scale the number of instances based on the number of messages in the queue that have been delayed.

  C. Create a custom metric based on the ASGAverageCPUUtilization metric and the GroupPendingInstances metric from the Auto Scaling group. Modify the application to calculate the metric and post the metric to Amazon CloudWatch once each minute. Create an Auto Scaling policy based on this metric to scale the number of instances.

  D. Create a custom metric based on the ApproximateNumberOfMessagesVisible metric and the number of instances in the InService state in the Auto Scaling group. Modify the application to calculate the metric and post the metric to Amazon CloudWatch once each minute. Create an Auto Scaling policy based on this metric to scale the number of instances.

  Correct Answer: D

  When there are delays in processing files due to a high volume of messages in the queue, adding more instances using Auto Scaling can help to reduce the processing time. The ApproximateNumberOfMessagesVisible metric is a good indicator of the workload on the EC2 instances. By creating an Auto Scaling policy based on this metric, the number of instances can be scaled up or down depending on the number of messages in the queue.