Amazon SOA-C02 Online Practice Questions and Exam Preparation

Amazon SOA-C02 Online Questions & Answers

• Question 581:

  When the AWS Cloud infrastructure experiences an event that may impact an organization, which AWS service can be used to see which of the organization's resources are affected?

  A. AWS Service Health Dashboard
  B. AWS Trusted Advisor
  C. AWS Personal Health Dashboard
  D. AWS Systems Manager
  C. AWS Personal Health Dashboard

  ---

  https://docs.aws.amazon.com/health/latest/ug/getting-started-phd.html

• Question 582:

  A company stores files on 50 Amazon S3 buckets in the same AWS Region The company wants to connect to the S3 buckets securely over a private connection from its Amazon EC2 instances The company needs a solution that produces no additional cost

  Which solution will meet these requirements?

  A. Create a gateway VPC endpoint lor each S3 bucket Attach the gateway VPC endpoints to each subnet inside the VPC
  B. Create an interface VPC endpoint (or each S3 bucket Attach the interface VPC endpoints to each subnet inside the VPC
  C. Create one gateway VPC endpoint for all the S3 buckets Add the gateway VPC endpoint to the VPC route table
  D. Create one interface VPC endpoint for all the S3 buckets Add the interface VPC endpoint to the VPC route table
  C. Create one gateway VPC endpoint for all the S3 buckets Add the gateway VPC endpoint to the VPC route table

  ---

  A gateway VPC endpoint allows you to connect to Amazon S3 from your VPC without requiring an internet gateway, NAT gateway, or VPN connection. It provides a private connection to Amazon S3 over your Amazon VPC using Amazon's private network. Since the company wants to connect to 50 Amazon S3 buckets securely over a private connection from its Amazon EC2 instances in the same AWS Region, creating one gateway VPC endpoint for all the S3 buckets is the most efficient and cost-effective solution. By creating one gateway VPC endpoint, you can connect to all S3 buckets in the same Region without the need to create multiple VPC endpoints for each bucket, thus reducing complexity and avoiding additional costs One gateway endpoint and specific bucket access point https://docs.aws.amazon.com/vpc/latest/privatelink/vpc-endpoints-s3.html#create-gateway-endpoint-s3

• Question 583:

  A non-production application is installed on an Amazon EC2 instance. The application's developer has created an Amazon CloudWatch alarm that reboots the EC2 instance if a critical application error occurs. When the developer tests the new alarm, the alarm enters ALARM state. However, the EC2 instance fails to reboot. A SysOps administrator needs to troubleshoot the developer's IAM permissions.

  What should the SysOps administrator do to ensure that the developer can configure the alarm correctly?

  A. Ensure that the developer has the iam:AttachGroupPolicy permission.
  B. Ensure that the developer has the iam:CreateServiceLinkedRole permission.
  C. Ensure that the developer has the iam:CreateServiceSpecificCredential permission.
  D. Ensure that the developer does not have the iam:EnableMFADevice permission.
  B. Ensure that the developer has the iam:CreateServiceLinkedRole permission.

• Question 584:

  After creating a presigned URL for an S3 object, users can no longer access the file after a few days. (Select TWO)

  A. The presigned URL's expiration date and time have passed.
  B. The SysOps administrator's access key is no longer valid.
  C. The S3 bucket's Block Public Access settings are enabled.
  D. The S3 object's ACL does not include READ access for the All Users group.
  E. The S3 object's ACL does not include READ_ACP access for the All Users group.
  A. The presigned URL's expiration date and time have passed.
  B. The SysOps administrator's access key is no longer valid.

• Question 585:

  A company wants to track its expenditures for Amazon EC2 and Amazon RDS within AWS. The company decides to implement more rigorous tagging requirements for resources in its AWS accounts. A SysOps administrator needs to identify all noncompliant resources.

  What is the MOST operationally efficient solution that meets this requirement?

  A. Create a rule in Amazon EventBridge that invokes a custom AWS Lambda function that will evaluate all created or updated resources for the specified tags.
  B. Create a rule in AWS Config that invokes a custom AWS Lambda function that will evaluate all resources for the specified tags.
  C. Create a rule in AWS Config with the required-tags managed rule to evaluate all resources for the specified tags.
  D. Create a rule in Amazon EventBridge with a managed rule to evaluate all created or updated resources for the specified tags.
  C. Create a rule in AWS Config with the required-tags managed rule to evaluate all resources for the specified tags.

  ---

  Explanation Explanation/Reference:required-tags "Checks if your resources have the tags that you specify. For example, you can check whether your Amazon EC2 instances have the CostCenter tag." https://docs.aws.amazon.com/config/latest/developerguide/requiredtags.html

• Question 586:

  A company is running an application on premises and wants to use AWS for data backup All of the data must be available locally The backup application can write only to block- based storage that is compatible with the Portable Operating System Interface (POSIX).

  Which backup solution will meet these requirements?

  A. Configure the backup software to use Amazon S3 as the target for the data backups
  B. Configure the backup software to use Amazon S3 Glacier as the target for the data backups
  C. Use AWS Storage Gateway, and configure it to use gateway-cached volumes
  D. Use AWS Storage Gateway, and configure it to use gateway-stored volumes
  D. Use AWS Storage Gateway, and configure it to use gateway-stored volumes

  ---

  Explanation Explanation/Reference:Volume Gateway provides an iSCSI target, which enables you to create block storage volumes and mount them as iSCSI devices from your on-premises or EC2 application servers. The Volume Gateway runs in either a cached or stored mode. In the cached mode, your primary data is written to S3, while retaining your frequently accessed data locally in a cache for low-latency access. In the stored mode, your primary data is stored locally and your entire dataset is available for low-latency access while asynchronously backed up to AWS https://docs.aws.amazon.com/storagegateway/latest/userguide/StorageGatewayConcepts.html

• Question 587:

  A company expanded its web application to serve a worldwide audience. A SysOps administrator has implemented a multi-Region AWS deployment for all production infrastructure. The SysOps administrator must route traffic based on the

  location of resources.

  Which Amazon Route 53 routing policy should the SysOps administrator use to meet this requirement?

  A. Geolocation routing policy
  B. Geoproximity routing policy
  C. Latency-based routing policy
  D. Multivalue answer routing policy
  B. Geoproximity routing policy

  ---

  The Geolocation routing policy allows you to route traffic based on the geographic location of your users. You can create different routing configurations based on the continent, country, state, or even postal code of the requesting user. This policy is useful when you want to provide different responses or direct traffic to specific resources based on the user's location.

• Question 588:

  A large company is using AWS Organizations to manage its multi-account AWS environment. According to company policy, all users should have read-level access to a particular Amazon S3 bucket in a central account. The S3 bucket data should not be available outside the organization. A SysOps administrator must set up the permissions and add a bucket policy to the S3 bucket.

  Which parameters should be specified to accomplish this in the MOST efficient manner?

  A. Specify '*' as the principal and PrincipalOrgld as a condition.
  B. Specify all account numbers as the principal.
  C. Specify PrincipalOrgld as the principal.
  D. Specify the organization's management account as the principal.
  C. Specify PrincipalOrgld as the principal.

• Question 589:

  A company wants to build a solution for its business-critical Amazon RDS for MySQL database. The database requires high availability across different geographic locations. A SysOps administrator must build a solution to handle a disaster recovery (DR) scenario with the lowest recovery time objective (RTO) and recovery point objective (RPO).

  Which solution meets these requirements?

  A. Create automated snapshots of the database on a schedule. Copy the snapshots to the DR Region.
  B. Create a cross-Region read replica for the database.
  C. Create a Multi-AZ read replica for the database.
  D. Schedule AWS Lambda functions to create snapshots of the source database and to copy the snapshots to a DR Region.
  B. Create a cross-Region read replica for the database.

• Question 590:

  A SysOps administrator has launched a large general purpose Amazon EC2 instance to regularly process large data files. The instance has an attached 1 TB General Purpose SSD (gp2) Amazon Elastic Block Store (Amazon EBS) volume. The instance also is EBS- optimized. To save costs, the SysOps administrator stops the instance each evening and restarts the instance each morning.

  When data processing is active, Amazon CloudWatch metrics on the instance show a consistent 3.000 VolumeReadOps. The SysOps administrator must improve the I/O performance while ensuring data integrity.

  Which action will meet these requirements?

  A. Change the instance type to a large, burstable, general purpose instance.
  B. Change the instance type to an extra large general purpose instance.
  C. Increase the EBS volume to a 2 TB General Purpose SSD (gp2) volume.
  D. Move the data that resides on the EBS volume to the instance store.
  C. Increase the EBS volume to a 2 TB General Purpose SSD (gp2) volume.