Amazon Amazon Certifications SOA-C02 Questions & Answers

• Question 251:

  A company's reporting job that used to run in 15 minutes is now taking an hour to run. An application generates the reports. The application runs on Amazon EC2 instances and extracts data from an Amazon RDS for MySQL database. A SysOps administrator checks the Amazon CloudWatch dashboard for the RDS instance and notices that the Read IOPS metrics are high, even when the reports are not running. The SysOps administrator needs to improve the performance and the availability of the RDS instance.

  Which solution will meet these requirements?

  A. Configure an Amazon ElastiCache cluster in front of the RDS instance. Update the reporting job to query the ElastiCache cluster.

  B. Deploy an RDS read replica. Update the reporting job to query the reader endpoint.

  C. Create an Amazon CloudFront distribution. Set the RDS instance as the origin. Update the reporting job to query the CloudFront distribution.

  D. Increase the size of the RDS instance.

  Correct Answer: B

  Using an RDS read replica will improve the performance and availability of the RDS instance by offloading read queries to the replica. This will also ensure that the reporting job completes in a timely manner and does not affect the

  performance of other queries that might be running on the RDS instance. Additionally, updating the reporting job to query the reader endpoint will ensure that all read queries are directed to the read replica.

  Reference:

  [1] https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_ReadRepl.html

• Question 252:

  A company needs to ensure strict adherence to a budget for 25 applications deployed on AWS Separate teams are responsible for storage compute, and database costs. A SysOps administrator must implement an automated solution to alert each team when their projected spend will exceed a quarterly amount mat has been set by the finance department. The solution cannot additional compute, storage, or database costs.

  A. Configure AWS Cost and Usage Reports to send a daily report to an Amazon S3 bucket. Create an AWS Lambda function that will evaluate Spend by service and nobly each team by using Amazon Simple Notification Service (Amazon SNS) notifications. Invoke the Lambda function when a report is placed in the S3 bucket

  B. Configure AWS Cost and Usage Reports to send a dairy report to an Amazon S3 bucket. Create a rule In Amazon EventBridge (Amazon CloudWatch Events) to evaluate the spend by service and notify each team by using Amazon Simple Queue Service (Amazon SOS) when the cost threshold i6 exceeded.

  C. Use AWS Budgets :o create one cost budget and select each of the services in use Specify the budget amount defined by the finance department along with the forecasted cost threshold Enter the appropriate email recipients for the budget.

  D. Use AWS Budgets to create a cost budget for each team, filtering by the services they own. Specify the budget amount defined by the finance department along with a forecasted cost threshold Enter the appropriate email recipients for each budget.

  Correct Answer: D

  https://docs.aws.amazon.com/cost-management/latest/userguide/budgets-managing-costs.html

• Question 253:

  A company is using Amazon Elastic File System (Amazon EFS) to share a file system among several Amazon EC2 instances. As usage increases, users report that file retrieval from the EFS file system is slower than normal.

  Which action should a SysOps administrator take to improve the performance of the file system?

  A. Configure the file system for Provisioned Throughput.

  B. Enable encryption in transit on the file system.

  C. Identify any unused files in the file system, and remove the unused files.

  D. Resize the Amazon Elastic Block Store (Amazon EBS) volume of each of the EC2 instances.

  Correct Answer: A

• Question 254:

  A company is expanding its use of AWS services across its portfolios The company wants to provision AWS accounts for each team to ensure a separation of business processes for security compliance and billing Account creation and bootstrapping should be completed m a scalable and efficient way so new accounts are created with a defined baseline and governance guardrails in place A SysOps administrator needs to design a provisioning process that saves time and resources.

  Which action should be taken to meet these requirements?

  A. Automate using AWS Elastic Beanstalk to provision the AWS accounts set up infrastructure and integrate with AWS Organizations

  B. Create bootstrapping scripts in AWS OpsWorks and combine them with AWS CloudFormation templates to provision accounts and infrastructure

  C. Use AWS Config to provision accounts and deploy instances using AWS Service Catalog

  D. Use AWS Control Tower to create a template in Account Factory and use the template to provision new accounts

  Correct Answer: D

  If you are hosting more than a handful of accounts, it's beneficial to have an orchestration layer that facilitates account deployment and account governance. You can adopt AWS Control Tower as your primary way to provision accounts and infrastructure. With AWS Control Tower, you can more easily adhere to corporate standards, meet regulatory requirements, and follow best practices.

  AWS Control Tower enables end users on your distributed teams to provision new AWS accounts quickly, by means of configurable account templates in Account Factory. Meanwhile, your central cloud administrators can monitor that all accounts are aligned with established, company-wide compliance policies.

• Question 255:

  A company is using an Amazon Aurora MySQL DB cluster that has point-in-time recovery, backtracking, and automatic backup enabled. A SysOps administrator needs to be able to roll back the DB cluster to a specific recovery point within the previous 72 hours. Restores must be completed in the same production DB cluster.

  Which solution will meet these requirements?

  A. Create an Aurora Replica. Promote the replica to replace the primary DB instance.

  B. Create an AWS Lambda function to restore an automatic backup to the existing DB cluster.

  C. Use backtracking to rewind the existing DB cluster to the desired recovery point.

  D. Use point-in-time recovery to restore the existing DB cluster to the desired recovery point.

  Correct Answer: C

  "The limit for a backtrack window is 72 hours.....Backtracking is only available for DB clusters that were created with the Backtrack feature enabled....Backtracking "rewinds" the DB cluster to the time you specify. Backtracking is not a replacement for backing up your DB cluster so that you can restore it to a point in time....You can backtrack a DB cluster quickly. Restoring a DB cluster to a point in time launches a new DB cluster and restores it from backup data or a DB cluster snapshot, which can take hours."

  https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Managi ng.Backtrack.html

• Question 256:

  A SysOps administrator receives notification that an application that is running on Amazon EC2 instances has failed to authenticate to an Amazon RDS database To troubleshoot, the SysOps administrator needs to investigate AWS Secrets Manager password rotation.

  Which Amazon CloudWatch log will provide insight into the password rotation?

  A. AWS CloudTrail logs

  B. EC2 instance application logs

  C. AWS Lambda function logs

  D. RDS database logs

  Correct Answer: B

• Question 257:

  A company is testing Amazon Elasticsearch Service (Amazon ES) as a solution for analyzing system logs from a fleet of Amazon EC2 instances. During the test phase, the domain operates on a single-node cluster. A SysOps administrator needs to transition the test domain into a highly available production-grade deployment.

  Which Amazon ES configuration should the SysOps administrator use to meet this requirement?

  A. Use a cluster of four data nodes across two AWS Regions. Deploy four dedicated master nodes in each Region.

  B. Use a cluster of six data nodes across three Availability Zones. Use three dedicated master nodes.

  C. Use a cluster of six data nodes across three Availability Zones. Use six dedicated master nodes.

  D. Use a cluster of eight data nodes across two Availability Zones. Deploy four master nodes in a failover AWS Region.

  Correct Answer: B

• Question 258:

  A company is using an Amazon DynamoDB table for data. A SysOps administrator must configure replication of the table to another AWS Region for disaster recovery. What should the SysOps administrator do to meet this requirement?

  A. Enable DynamoDB Accelerator (DAX).

  B. Enable DynamoDB Streams, and add a global secondary index (GSI).

  C. Enable DynamoDB Streams, and-add a global table Region.

  D. Enable point-in-time recovery.

  Correct Answer: C

• Question 259:

  A company runs a stateless application that is hosted on an Amazon EC2 instance. Users are reporting performance issues. A SysOps administrator reviews the Amazon CloudWatch metrics for the application and notices that the instance's CPU utilization frequently reaches 90% during business hours.

  What is the MOST operationally efficient solution that will improve the application's responsiveness?

  A. Configure CloudWatch logging on the EC2 instance. Configure a CloudWatch alarm for CPU utilization to alert the SysOps administrator when CPU utilization goes above 90%.

  B. Configure an AWS Client VPN connection to allow the application users to connect directly to the EC2 instance private IP address to reduce latency.

  C. Create an Auto Scaling group, and assign it to an Application Load Balancer. Configure a target tracking scaling policy that is based on the average CPU utilization of the Auto Scaling group.

  D. Create a CloudWatch alarm that activates when the EC2 instance's CPU utilization goes above 80%. Configure the alarm to invoke an AWS Lambda function that vertically scales the instance.

  Correct Answer: C

  https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-scaling-target-tracking.html

• Question 260:

  A Sysops administrator needs to configure automatic rotation for Amazon RDS database credentials. The credentials must rotate every 30 days. The solution must integrate with Amazon RDS. Which solution will meet these requirements with the LEAST operational overhead?

  A. Store the credentials in AWS Systems Manager Parameter Store as a secure string. Configure automatic rotation with a rotation interval of 30 days.

  B. Store the credentials in AWS Secrets Manager. Configure automatic rotation with a rotation interval of 30 days.

  C. Store the credentials in a file in an Amazon S3 bucket. Deploy an AWS Lambda function to automatically rotate the credentials every 30 days.

  D. Store the credentials in AWS Secrets Manager. Deploy an AWS Lambda function to automatically rotate the credentials every 30 days.

  Correct Answer: B

  Storing the credentials in AWS Secrets Manager and configuring automatic rotation with a rotation interval of 30 days is the most efficient way to meet the requirements with the least operational overhead. AWS Secrets Manager automatically rotates the credentials at the specified interval, so there is no need for an additional AWS Lambda function or manual rotation. Additionally, Secrets Manager is integrated with Amazon RDS, so the credentials can be easily used with the RDS database.