Amazon SOA-C02 Online Practice Questions and Exam Preparation

Amazon SOA-C02 Online Questions & Answers

• Question 461:

  A company is running Amazon RDS for PostgreSQL Multi-AZ DB clusters. The company uses an AWS CloudFormation template to create the databases individually with a default size of 100 GB. The company creates the databases every Monday and deletes the databases every Friday.

  Occasionally, the databases run low on disk space and initiate an Amazon CloudWatch alarm. A SysOps administrator must prevent the databases from running low on disk space in the future.

  Which solution will meet these requirements with the FEWEST changes to the application?

  A. Modify the CloudFormation template to use Amazon Aurora PostgreSQL as the DB engine.
  B. Modify the CloudFormation template to use Amazon DynamoDB as the database. Activate storage auto scaling during creation of the tables.
  C. Modify the Cloud Formation template to activate storage auto scaling on the existing DB instances.
  D. Create a CloudWatch alarm to monitor DB instance storage space. Configure the alarm to invoke the VACUUM command.
  B. Modify the CloudFormation template to use Amazon DynamoDB as the database. Activate storage auto scaling during creation of the tables.

• Question 462:

  The SysOps administrator must restart the web server if specific errors are detected in logs on EC2 instances behind a load balancer. (Select THREE):

  A. Install the Amazon CloudWatch agent on the EC2 instances.
  B. Create an AWS CloudTrail metric filter for the web logs. Configure an alarm for the specific errors.
  C. Create an Amazon CloudWatch metric filter for the web logs. Configure an alarm for the specific errors.
  D. Publish alarm findings to Amazon Simple Email Service (Amazon SES). Invoke an AWS Lambda function to restart the web server software.
  E. Create an Amazon EventBridge rule that responds to the alarm. Configure the rule to invoke an AWS Systems Manager Automation runbook to restart the web server software.
  F. Create an Amazon Simple Notification Service (Amazon SNS) notification that responds to the alarm. Configure the notification to invoke an AWS Systems Manager Automation runbook to restart the web server software.
  A. Install the Amazon CloudWatch agent on the EC2 instances.
  C. Create an Amazon CloudWatch metric filter for the web logs. Configure an alarm for the specific errors.
  E. Create an Amazon EventBridge rule that responds to the alarm. Configure the rule to invoke an AWS Systems Manager Automation runbook to restart the web server software.

• Question 463:

  A SysOps administrator needs to share a new AMI with all accounts within an organization managed through AWS Organizations.

  A. Make the AMI public. Reference the AMI ID from within the member accounts of the organization.
  B. Share the AMI's associated snapshots with all the accounts in the organization.
  C. Share the AMI with the organization by specifying the organization Amazon Resource Name (ARN).
  D. Upload the AMI to AWS Marketplace. Search for the uploaded AMI when an instance is launched from a member account in the organization.
  C. Share the AMI with the organization by specifying the organization Amazon Resource Name (ARN).

• Question 464:

  A company's web application runs on Amazon EC2 instances in a single AWS Region. The infrastructure must be designed so the application remains available with no performance degradation in the event of an Availability Zone (AZ) failure. To ensure optimal performance, the application must maintain a minimum of 12 instances at all times.

  Which solution will meet the requirements with the fewest running instances possible?

  A. 2 AZs with 6 instances in each AZ
  B. 2 AZs with 12 instances in each AZ
  C. 3 AZs with 4 instances in each AZ
  D. 3 AZs with 6 instances in each AZ
  D. 3 AZs with 6 instances in each AZ

• Question 465:

  A company runs a workload on a high performance computing (HPC) cluster on AWS. The workload is Linux-based and uses three Amazon EC2 instances. Each EC2 instance has a 10 TiB Throughput Optimized HDD (st1) Amazon Elastic Block Store (Amazon EBS) volume.

  A SysOps administrator determines that the current storage is not meeting the workload's performance needs. The workload needs a durable file store that has throughput of 100,000 IOPS.

  Which solution will meet these requirements?

  A. Create an Amazon ElastiCache (Redis OSS) instance. Keep the append-only file (AOF) feature disabled.
  B. Create an Amazon S3 bucket in the same AWS Region where the HPC cluster is deployed. Use the same S3 bucket prefix on all objects.
  C. Create an Amazon FSx for Lustre file system. Configure an appropriate number of IOPS.
  D. Create an Amazon S3 bucket in the same AWS Region where the HPC cluster is deployed. Enable S3 Transfer Acceleration.
  C. Create an Amazon FSx for Lustre file system. Configure an appropriate number of IOPS.

• Question 466:

  A company runs an application on Amazon EC2 instances that are in an Amazon EC2 Auto Scaling group. Scale-out actions take a long time to become complete because of long-running boot scripts. A SysOps administrator must implement a solution to reduce the required time for scale-out actions without overprovisioning the Auto Scaling group.

  Which solution will meet these requirements?

  A. Change the launch configuration to use a larger instance size.
  B. Increase the minimum number of instances in the Auto Scaling group.
  C. Add a predictive scaling policy to the Auto Scaling group.
  D. Add a warm pool to the Auto Scaling group.
  D. Add a warm pool to the Auto Scaling group.

  ---

  Explanation Explanation/Reference:warm pools contain instances that are already past boot scripts and have fully loaded the OS

• Question 467:

  A company runs a retail website on multiple Amazon EC2 instances behind an Application Load Balancer (ALB). The company must secure traffic to the website over an HTTPS connection. Which combination of actions should a SysOps administrator take to meet these requirements? (Choose two.)

  A. Attach the certificate to each EC2 instance.
  B. Attach the certificate to the ALB.
  C. Create a private certificate in AWS Certificate Manager (ACM).
  D. Create a public certificate in AWS Certificate Manager (ACM).
  E. Export the certificate, and attach it to the website.
  B. Attach the certificate to the ALB.
  D. Create a public certificate in AWS Certificate Manager (ACM).

  ---

  show article about certificates https://www.ssls.com/blog/the-difference-between-aws-certificates-and-public-ca-certificates/

• Question 468:

  A Sysops administrator creates an Amazon Elastic Kubernetes Service (Amazon EKS) cluster that uses AWS Fargate. The cluster is deployed successfully. The Sysops administrator needs to manage the cluster by using the kubect1

  command line tool.

  Which of the following must be configured on the Sysops administrator's machine so that kubect1 can communicate with the cluster API server?

  A. The kubeconfig file
  B. The kube-proxy Amazon EKS add-on
  C. The Fargate profile
  D. The eks-connector.yaml file
  A. The kubeconfig file

  ---

  The kubeconfig file is a configuration file used to store cluster authentication information, which is required to make requests to the Amazon EKS cluster API server. The kubeconfig file will need to be configured on the SysOps administrator's machine in order for kubectl to be able to communicate with the cluster API server. https://aws.amazon.com/blogs/developer/running-a-kubernetes-job-in-amazon-eks-on-aws-fargate-using-aws-stepfunctions/

• Question 469:

  A SysOps administrator is responsible for the performance of an AWS Lambda function.

  The Lambda function has a timeout of 3 seconds and has values set for provisioned concurrency and reserved concurrency.

  Amazon CloudWatch metrics show that the Lambda function is experiencing several throttles each second. The metrics also show that the Lambda function's average duration is less than 100 ms.

  What should the SysOps administrator do to eliminate the function throttles?

  A. Increase the Lambda function's memory.
  B. Increase the Lambda function's provisioned concurrency value.
  C. Increase the Lambda function's reserved concurrency value.
  D. Configure a dead-letter queue for the Lambda function.
  C. Increase the Lambda function's reserved concurrency value.

• Question 470:

  A compliance learn requites all administrator passwords for Amazon RDS DB instances to be changed at least annually.

  Which solution meets this requirement in the MOST operationally efficient manner?

  A. Store the database credentials in AWS Secrets Manager. Configure automatic rotation for the secret every 365 days.
  B. Store the database credentials as a parameter In the RDS parameter group. Create a database trigger to rotate the password every 365 days.
  C. Store the database credentials in a private Amazon S3 bucket. Schedule an AWS Lambda function to generate a new set of credentials every 365 days.
  D. Store the database credentials in AWS Systems Manager Parameter Store as a secure string parameter. Configure automatic rotation for the parameter every 365 days.
  A. Store the database credentials in AWS Secrets Manager. Configure automatic rotation for the secret every 365 days.