Amazon Amazon Certifications SOA-C02 Questions & Answers

• Question 341:

  A SysOps administrator created an AWS Cloud Formation template that provisions Amazon EC2 instances, an Elastic Load Balancer (ELB), and an Amazon RDS DB instance. During stack creation, the creation of the EC2 instances and the creation of the ELB are successful. However, the creation of the DB instance fails.

  What is the default behavior of CloudFormation in this scenario?

  A. CloudFormation will roll back the stack and delete the stack.

  B. CloudFormation will roll back the stack but will not delete the stack.

  C. CloudFormation will prompt the user to roll back the stack or continue.

  D. CloudFormation will successfully complete the stack but will report a failed status for the DB instance.

  Correct Answer: B

  CloudFormation will delete the resources it created during the stack creation attempt but it will not remove the stack record itself. This allows you to review the stack events and troubleshoot the reason for failure. I hope this clarifies the matter.

• Question 342:

  A SysOps administrator uses AWS Systems Manager Session Manager to connect to instances After the SysOps administrator launches a new Amazon EC2 instance the EC2 instance does not appear in the Session Manager list of systems that are available for connection. The SysOps administrator verities that Systems Manager Agent is installed updated and running on the EC2 instance.

  What is the reason for this issue?

  A. The SysOps administrator does not have access to the key pair that is required for connection

  B. The SysOps administrator has not attached a security group to the EC2 instance to allow SSH on port 22.

  C. The EC2 instance does not have an attached IAM role that allows Session Manager to connect to the EC2 instance.

  D. The EC2 instance ID has not been entered into the Session Manager configuration

  Correct Answer: C

• Question 343:

  A SysOps administrator must ensure that a company's Amazon EC2 instances auto scale as expected The SysOps administrator configures an Amazon EC2 Auto Scaling Lifecycle hook to send an event to Amazon EventBridge (Amazon CloudWatch Events), which then invokes an AWS Lambda function to configure the EC2 distances When the configuration is complete, the Lambda function calls the complete Lifecycle-action event to put the EC2 instances into service. In testing, the SysOps administrator discovers that the Lambda function is not invoked when the EC2 instances auto scale.

  What should the SysOps administrator do to reserve this issue?

  A. Add a permission to the Lambda function so that it can be invoked by the EventBridge (CloudWatch Events) rule.

  B. Change the lifecycle hook action to CONTINUE if the lifecycle hook experiences a fa* we or timeout.

  C. Configure a retry policy in the EventBridge (CloudWatch Events) rule to retry the Lambda function invocation upon failure.

  D. Update the Lambda function execution role so that it has permission to call the complete lifecycle-action event

  Correct Answer: A

  To allow the EventBridge (CloudWatch Events) rule to invoke the Lambda function, the function's execution role needs to have the necessary permissions to be invoked by the rule. Specifically, the execution role needs to have an event pattern that matches the rule and an IAM policy that grants the necessary permissions to execute the Lambda function. By adding the necessary permissions to the Lambda function, the SysOps administrator can ensure that the function is invoked when the EC2 instances auto scale.

  Option D is incorrect because updating the Lambda function execution role so that it has permission to call the complete-lifecycle-action event will not address the issue of the Lambda function not being invoked by the EventBridge (CloudWatch Events) rule.

• Question 344:

  A company's AWS Lambda function is experiencing performance issues. The Lambda function performs many CPU-intensive operations. The Lambda function is not running fast enough and is creating bottlenecks in the system.

  What should a SysOps administrator do to resolve this issue?

  A. In the CPU launch options for the Lambda function, activate hyperthreading.

  B. Turn off the AWS managed encryption.

  C. Increase the amount of memory for the Lambda function.

  D. Load the required code into a custom layer.

  Correct Answer: C

  Option A (In the CPU launch options for the Lambda function, activate hyperthreading) is not a valid option because AWS Lambda manages the underlying infrastructure, including the CPU configuration. SysOps administrators do not have direct access to adjust hyperthreading settings for Lambda functions.

  Option B (Turn off the AWS managed encryption) is unrelated to the performance issue caused by CPU-intensive operations. AWS managed encryption refers to the automatic encryption of data at rest for Lambda function code and other resources. Disabling encryption won't improve the Lambda function's performance.

• Question 345:

  A company's SysOps administrator attempts to restore an Amazon Elastic Block Store (Amazon EBS) snapshot. However, the snapshot is missing because another system administrator accidentally deleted the snapshot. The company needs the ability to recover snapshots for a specified period of time after snapshots are deleted.

  Which solution will provide this functionality?

  A. Turn on deletion protection on individual EBS snapshots that need to be kept.

  B. Create an 1AM policy that denies the deletion of EBS snapshots by using a condition statement for the snapshot age Apply the policy to all users

  C. Create a Recycle Bin retention rule for EBS snapshots for the desired retention period.

  D. Use Amazon EventBridge (Amazon CloudWatch Events) to schedule an AWS Lambda function to copy EBS snapshots to Amazon S3 Glacier.

  Correct Answer: C

  New Recycle Bin In order to give you more control over the deletion process, we are launching a Recycle Bin for EBS Snapshots. As you will see in a moment, you can now set up rules to retain deleted snapshots so that you can recover them after an accidental deletion. You can think of this as a two-level model, where individual AWS users are responsible for the initial deletion, and then a designated “Recycle Bin Administrator” (as specified by an IAM role) manages retention and recovery.

• Question 346:

  A company has an existing web application that runs on two Amazon EC2 instances behind an Application Load Balancer (ALB) across two Availability Zones The application uses an Amazon RDS Multi-AZ DB Instance Amazon Route 53 record sets route requests tor dynamic content to the load balancer and requests for static content to an Amazon S3 bucket Site visitors are reporting extremely long loading times.

  Which actions should be taken to improve the performance of the website? (Select TWO )

  A. Add Amazon CloudFront caching for static content

  B. Change the load balancer listener from HTTPS to TCP

  C. Enable Amazon Route 53 latency-based routing

  D. Implement Amazon EC2 Auto Scaling for the web servers

  E. Move the static content from Amazon S3 to the web servers

  Correct Answer: AD

  Add Amazon CloudFront caching for static content. Implement Amazon EC2 Auto Scaling for the web servers.

  Not Enable Amazon Route 53 latency-based routing.:

  “To use latency-based routing, you create latency records for your resources in multiple AWS Regions.”

  https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy-latency.html

• Question 347:

  A company is running a serverless application on AWS Lambda The application stores data in an Amazon RDS for MySQL DB instance Usage has steadily increased and recently there have been numerous "too many connections" errors when the Lambda function attempts to connect to the database The company already has configured the database to use the maximum max_connections value that is possible.

  What should a SysOps administrator do to resolve these errors'?

  A. Create a read replica of the database Use Amazon Route 53 to create a weighted DNS record that contains both databases

  B. Use Amazon RDS Proxy to create a proxy Update the connection string in the Lambda function

  C. Increase the value in the max_connect_errors parameter in the parameter group that the database uses

  D. Update the Lambda function's reserved concurrency to a higher value

  Correct Answer: B

  https://aws.amazon.com/blogs/compute/using-amazon-rds-proxy-with-aws-lambda/

  RDS Proxy acts as an intermediary between your application and an RDS database. RDS Proxy establishes and manages the necessary connection pools to your database so that your application creates fewer database connections. Your Lambda functions interact with RDS Proxy instead of your database instance. It handles the connection pooling necessary for scaling many simultaneous connections created by concurrent Lambda functions. This allows your Lambda applications to reuse existing connections, rather than creating new connections for every function invocation. Check "Database proxy for Amazon RDS" section in the link to see how RDS proxy help Lambda handle huge connections to RDS MySQL https://aws.amazon.com/blogs/compute/using-amazon-rds-proxy-with-aws-lambda/

• Question 348:

  A SysOps administrator is notified that an Amazon EC2 instance has stopped responding The AWS Management Console indicates that the system status checks are failing What should the administrator do first to resolve this issue?

  A. Reboot the EC2 instance so it can be launched on a new host

  B. Stop and then start the EC2 instance so that it can be launched on a new host

  C. Terminate the EC2 instance and relaunch it

  D. View the AWS CloudTrail log to investigate what changed on the EC2 instance

  Correct Answer: B

  https://aws.amazon.com/premiumsupport/knowledge-center/ec2-windows-system-status-check-fail/

• Question 349:

  A company's web application is available through an Amazon CloudFront distribution and directly through an internet-facing Application Load Balancer (ALB) A SysOps administrator must make the application accessible only through the CloudFront distribution and not directly through the ALB. The SysOps administrator must make this change without changing the application code.

  Which solution will meet these requirements?

  A. Modify the ALB type to internal Set the distribution's origin to the internal ALB domain name

  B. Create a Lambda@Edge function Configure the function to compare a custom header value in the request with a stored password and to forward the request to the origin in case of a match Associate the function with the distribution.

  C. Replace the ALB with a new internal ALB Set the distribution's origin to the internal ALB domain name Add a custom HTTP header to the origin settings for the distribution In the ALB listener add a rule to forward requests that contain the matching custom header and the header's value Add a default rule to return a fixed response code of 403.

  D. Add a custom HTTP header to the origin settings for the distribution in the ALB listener add a rule to forward requests that contain the matching custom header and the header's value Add a default rule to return a fixed response code of 403.

  Correct Answer: D

  To make the application accessible only through the CloudFront distribution and not directly through the Application Load Balancer (ALB), you can add a custom HTTP header to the origin settings for the CloudFront distribution. You can then create a rule in the ALB listener to forward requests that contain the matching custom header and its value to the origin. You can also add a default rule to the ALB listener to return a fixed response code of 403 for requests that do not contain the matching custom header. This will allow you to redirect all requests to the CloudFront distribution and block direct access to the application through the ALB. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/restrict-access-to-load-balancer.html

• Question 350:

  A company has a simple web application that runs on a set of Amazon EC2 instances behind an Elastic Load Balancer in the eu-west-2 Region. Amazon Route 53 holds a DNS record for the application with a simple touting policy. Users from all over the world access the application through their web browsers.

  The company needs to create additional copies of the application in the us-east-1 Region and in the ap-south-1 Region. The company must direct users to the Region that provides the fastest response times when the users load the application.

  What should a SysOps administrator do to meet these requirements?

  A. In each new Region, create a new Elastic Load Balancer and a new set of EC2 Instances to run a copy of the application. Transition to a geolocation routing policy.

  B. In each new Region, create a copy of the application on new EC2 instances. Add these new EC2 instances to the Elastic Load Balancer in eu-west-2. Transition to a latency routing policy.

  C. In each new Region, create a copy of the application on new EC2 instances. Add these new EC2 instances to the Elastic Load Balancer in eu-west-2. Transition to a multivalue routing policy.

  D. In each new Region, create a new Elastic Load Balancer and a new set of EC2 instances to run a copy of the application. Transition to a latency routing policy.

  Correct Answer: D