Amazon Amazon Certifications SOA-C02 Questions & Answers

• Question 161:

  A SysOps administrator is investigating issues on an Amazon RDS for MariaDB DB instance. The SysOps administrator wants to display the database load categorized by detailed wait events. How can the SysOps administrator accomplish this goal?

  A. Create an Amazon CloudWatch dashboard.

  B. Enable Amazon RDS Performance Insights.

  C. Enable and configure Enhanced Monitoring.

  D. Review the database logs in Amazon CloudWatch Logs.

  Correct Answer: B

  https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PerfInsights.UsingDashboard.AnalyzeDBLoad.html DB load grouped by waits and top SQL queries is the default Performance Insights dashboard view. This combination typically provides the most insight into performance issues. DB load grouped by waits shows if there are any resource or concurrency bottlenecks in the database. In this case, the SQL tab of the top load items table shows which queries are driving that load.

• Question 162:

  A company is planning to host an application on a set of Amazon EC2 instances that are distributed across multiple Availability Zones. The application must be able to scale to millions of requests each second. A SysOps administrator must

  design a solution to distribute the traffic to the EC2 instances. The solution must be optimized to handle sudden and volatile traffic patterns while using a single static IP address for each Availability Zone.

  Which solution will meet these requirements?

  A. Amazon Simple Queue Service (Amazon SQS) queue

  B. Application Load Balancer

  C. AWS Global Accelerator

  D. Network Load Balancer

  Correct Answer: D

  "Network Load Balancer is optimized to handle sudden and volatile traffic patterns while using a single static IP address per Availability Zone." https://aws.amazon.com/elasticloadbalancing/network-load-balancer/

• Question 163:

  A SysOps administrator is using AWS CloudFormation StackSets to create AWS resources in two AWS Regions in the same AWS account. A stack operation fails in one Region and returns the stack instance status of OUTDATED. What is the cause of this failure?

  A. The CloudFormation template changed on the local disk and has not been submitted to CloudFormation.

  B. The CloudFormation template is trying to create a global resource that is not unique.

  C. The stack has not yet been deployed to the Region.

  D. The SysOps administrator is using an old version of the CloudFormation API.

  Correct Answer: B

  https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-troubleshooting.html

• Question 164:

  A company is implementing security and compliance by using AWS Trusted Advisor. The company's SysOps team is validating the list of Trusted Advisor checks that it can access. Which factor will affect the quantity of available Trusted Advisor checks?

  A. Whether at least one Amazon EC2 instance is in the running state

  B. The AWS Support plan

  C. An AWS Organizations service control policy (SCP)

  D. Whether the AWS account root user has multi-factor authentication (MFA) enabled

  Correct Answer: B

  AWS Basic Support and AWS Developer Support customers get access to 6 security checks (S3 Bucket Permissions, Security Groups - Specific Ports Unrestricted, IAM Use, MFA on Root Account, EBS Public Snapshots, RDS Public Snapshots) and 50 service limit checks. AWS Business Support, AWS Enterprise On-Ramp, and AWS Enterprise Support customers get access to all 115 Trusted Advisor checks (14 cost optimization, 17 security, 24 fault tolerance, 10 performance, and 50 service limits) and recommendations."

• Question 165:

  A SysOps administrator configured AWS Backup to capture snapshots from a single Amazon EC2 instance that has one Amazon Elastic Block Store (Amazon EBS) volume attached. On the first snapshot, the EBS volume has 10 GiB of data. On the second snapshot, the EBS volume still contains 10 GiB of data, but 4 GiB have changed. On the third snapshot, 2 GiB of data have been added to the volume, for a total of 12 GiB.

  How much total storage is required to store these snapshots?

  A. 12 GiB

  B. 16 GiB

  C. 26 GiB

  D. 32 GiB

  Correct Answer: B

  https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSSnapshots.html#how_snapshots_work

• Question 166:

  A team is managing an AWS account that is a member of an organization in AWS Organizations. The organization has consolidated billing features enabled. The account hosts several applications. A SysOps administrator has applied tags to

  resources within the account to reflect the environment. The team needs a report of the breakdown of charges by environment.

  What should the SysOps administrator do to meet this requirement?

  A. Filter, map, and categorize resource groups in Tag Editor.

  B. Ensure that the organization's service control policies (SCPs) allow access to cost allocation tags.

  C. Ensure that the IAM credentials that are used to access Cost Explorer have permissions to group cost by tags.

  D. Activate the tag keys for cost allocation on the organization's management account.

  Correct Answer: D

  You must activate both types of tags separately before they can appear in Cost Explorer or on a cost allocation report. https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html

• Question 167:

  A company hosts a static website on Amazon S3. The website is served by an Amazon CloudFront distribution with a default TTL of 86,400 seconds. The company recently uploaded an updated version of the website to Amazon S3.

  However, users still see the old content when they refresh the site. A SysOps administrator must make the new version of the website visible to users as soon as possible.

  Which solution meets these requirements?

  A. Adjust the TTL value for the DNS CNAME record that is pointing to the CloudFront distribution.

  B. Create an invalidation on the CloudFront distribution for the old S3 objects.

  C. Create a new CloudFront distribution. Update the DNS records to point to the new CloudFront distribution.

  D. Update the DNS record for the website to point to the S3 bucket.

  Correct Answer: B

  Invalidations can be created for the entire bucket content or specific paths.

• Question 168:

  A SysOps administrator is responsible for managing a company's cloud infrastructure with AWS CloudFormation. The SysOps administrator needs to create a single resource that consists of multiple AWS services. The resource must support

  creation and deletion through the CloudFormation console.

  Which CloudFormation resource type should the SysOps administrator create to meet these requirements?

  A. AWS::EC2::Instance with a cfn-init helper script

  B. AWS::OpsWorks::Instance

  C. AWS::SSM::Document

  D. Custom::MyCustomType

  Correct Answer: D

  Custom resources enable you to write custom provisioning logic in templates that AWS CloudFormation runs anytime you create, update (if you changed the custom resource), or delete stacks. For example, you might want to include resources that aren't available as AWS CloudFormation resource types. You can include those resources by using custom resources. That way you can still manage all your related resources in a single stack. https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-custom-resources.html

• Question 169:

  A company is supposed to receive a data file every hour in an Amazon S3 bucket. An S3 event notification invokes an AWS Lambda function each time a file arrives. The function processes the data for use by an application. The application

  team notices that sometimes the file does not arrive. The application team wants to receive a notification whenever the file does not arrive.

  What is the MOST operationally efficient solution that meets these requirements?

  A. Add an S3 Lifecycle rule on the S3 bucket with a scope that is limited to objects that were created in the last hour. Configure another S3 event notification to be invoked by the lifecycle transition when the number of objects transitioned is zero. Publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to notify the application team.

  B. Configure another S3 event notification to invoke a Lambda function that posts a message to an Amazon Simple Queue Service (Amazon SQS) queue. Create an Amazon CloudWatch alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to notify the application team when the ApproximateAgeOfOldestMessage metric of the queue is greater than 1 hour.

  C. Create an Amazon CloudWatch alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to alert the application team when the Invocations metric of the Lambda function is zero for an hour. Configure the alarm to treat missing data as breaching.

  D. Create a new Lambda function to get the timestamp of the newest file in the S3 bucket. If the timestamp is more than 1 hour ago, publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to notify the application team. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke the new function hourly.

  Correct Answer: C

• Question 170:

  A company has a web application that is experiencing performance problems many times each night. A root cause analysis reveals sudden increases in CPU utilization that last 5 minutes on an Amazon EC2 Linux instance. A SysOps

  administrator must find the process ID (PID) of the service or process that is consuming more CPU.

  What should the SysOps administrator do to collect the process utilization information with the LEAST amount of effort?

  A. Configure the Amazon CloudWatch agent procstat plugin to capture CPU process metrics.

  B. Configure an AWS Lambda function to run every minute to capture the PID and send a notification.

  C. Log in to the EC2 instance by using a .pem key each night. Then run the top command.

  D. Use the default Amazon CloudWatch CPU utilization metric to capture the PID in CloudWatch.

  Correct Answer: A

  The procstat plugin enables you to collect metrics from individual processes. It is supported on Linux servers and on servers running Windows Server 2012 or later. https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Agent-procstat-process-metrics.html