A company runs its web application on multiple Amazon EC2 instances that are part of an Auto Scaling group. The company wants the Auto Scaling group to scale out as soon as CPU utilization rises above 50% for the instances.
How should a SysOps administrator configure the Auto Scaling group to meet these requirements?
A. Configure the Auto Scaling group to scale based on events. B. Configure the Auto Scaling group to scale based on a schedule. C. Configure the Auto Scaling group to scale dynamically based on demand. D. Configure the Auto Scaling group to use predictive scaling.
C. Configure the Auto Scaling group to scale dynamically based on demand.
Question 52:
A SysOps administrator has created a VPC that contains a public subnet and a private subnet. Amazon EC2 instances that were launched in the private subnet cannot access the internet. The default network ACL is active on all subnets in the VPC, and all security groups allow all outbound traffic:
Which solution will provide the EC2 instances in the private subnet with access to the internet?
A. Create a NAT gateway in the public subnet. Create a route from the private subnet to the NAT gateway. B. Create a NAT gateway in the public subnet. Create a route from the public subnet to the NAT gateway. C. Create a NAT gateway in the private subnet. Create a route from the public subnet to the NAT gateway. D. Create a NAT gateway in the private subnet. Create a route from the private subnet to the NAT gateway.
A. Create a NAT gateway in the public subnet. Create a route from the private subnet to the NAT gateway. Explanation Explanation/Reference:NAT Gateway resides in public subnet, and traffic should be routed from private subnet to NAT Gateway: https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html
Question 53:
A company runs a multi-tier web application with two Amazon EC2 instances in one Availability Zone in the us-east-1 Region. A SysOps administrator must migrate one of the EC2 instances to a new Availability Zone. Which solution will accomplish this?
A. Copy the EC2 instance to a different Availability Zone. Terminate the original instance. B. Create an Amazon Machine Image (AMI) from the EC2 instance and launch it in a different Availability Zone. Terminate the original instance. C. Move the EC2 instance to a different Availability Zone using the AWS CLI. D. Stop the EC2 instance, modify the Availability Zone, and start the instance.
B. Create an Amazon Machine Image (AMI) from the EC2 instance and launch it in a different Availability Zone. Terminate the original instance. It's not possible to move an existing instance to another subnet, Availability Zone, or VPC. Instead, you can manually migrate the instance by creating a new Amazon Machine Image (AMI) from the source instance. Then, launch a new instance using the new AMI in the desired subnet, Availability Zone, or VPC. Finally, you can reassign any Elastic IP addresses from the source instance to the new instance. https://aws.amazon.com/premiumsupport/knowledge-center/move-ec2-instance/
Question 54:
A company's SysOps administrator is troubleshooting communication between the components of an application. The company configured VPC flow logs to be published to Amazon CloudWatch Logs. However, there are no logs in CloudWatch Logs.
What could be blocking the VPC flow logs from being published to CloudWatch Logs?
A. The 1AM policy that is attached to the 1AM role for the flow log is missing the logs:CreateLogGroup permission. B. The 1AM policy that is attached to the 1AM role for the flow log is missing the logs:CreateExportTask permission. C. The VPC is configured for IPv6 addresses. D. The VPC is peered with another VPC in the AWS account.
A. The 1AM policy that is attached to the 1AM role for the flow log is missing the logs:CreateLogGroup permission.
Question 55:
A company has a web application with a database tier that consists of an Amazon EC2 instance that runs MySQL. A SysOps administrator needs to minimize potential data loss and the time that is required to recover in the event of a database failure.
What is the MOST operationally efficient solution that meets these requirements?
A. Create an Amazon CloudWatch alarm for the StatusCheckFailed_System metric to invoke an AWS Lambda function that stops and starts the EC2 instance. B. Create an Amazon RDS for MySQL Multi-AZ DB instance. Use a MySQL native backup that is stored in Amazon S3 to restore the data to the new database. Update the connection string in the web application. C. Create an Amazon RDS for MySQL Single-AZ DB instance with a read replica. Use a MySQL native backup that is stored in Amazon S3 to restore the data to the new database. Update the connection string in the web application. D. Use Amazon Data Lifecycle Manager (Amazon DLM) to take a snapshot of the Amazon Elastic Block Store (Amazon EBS) volume every hour. In the event of an EC2 instance failure, restore the EBS volume from a snapshot.
D. Use Amazon Data Lifecycle Manager (Amazon DLM) to take a snapshot of the Amazon Elastic Block Store (Amazon EBS) volume every hour. In the event of an EC2 instance failure, restore the EBS volume from a snapshot. To me both BandD minimize potential data loss. However, the question is not specifying availability (Multi-AZ is B) Instead, the question is emphasizing quick recovery from backup (not active/active recovery) Therefore, I think only option D meets both criteria for minimizing potential data loss and quick recovery. -1 Hour RPO (only D specifies hourly snapshots and hourly RPO) - Snapshots (D) have faster RTO than native backup restore from S3 (B) In the real world, I've used both backups (regularly/scheduled) and snapshots (prior to scheduled changes, etc.)
Question 56:
A company needs to implement a managed file system to host Windows file shares for users on premises. Resources in the AWS Cloud also need access to the data on these file shares. A SysOps administrator needs to present the user file shares on premises and make the user file shares available on AWS with minimum latency. What should the SysOps administrator do to meet these requirements?
A. Set up an Amazon S3 File Gateway. B. Set up an AWS Direct Connect connection. C. Use AWS DataSync to automate data transfers between the existing file servers and AWS. D. Set up an Amazon FSx File Gateway.
D. Set up an Amazon FSx File Gateway. Amazon FSx provides a fully managed file system that is optimized for Windows-based workloads and can be used to create file shares that can be accessed both on premises and in the AWS Cloud. The file shares that are created in Amazon FSx are highly available and can be accessed with low latency. Additionally, Amazon FSx supports Windows-based authentication, making it easy to integrate with existing Windows user accounts. References: [1] https://aws.amazon.com/fsx/ [2] https://aws.amazon.com/storage/file-storage/ [3] https://docs.aws.amazon.com/fsx/latest/WindowsGuide/what-is.html [4] https://aws.amazon.com/premiumsupport/knowledge-center/fsx-file-gateway-access/
Question 57:
An AWS Lambda function is intermittently failing several times a day A SysOps administrator must find out how often this error has occurred in the last 7 days. Which action will meet this requirement in the MOST operationally efficient manner?
A. Use Amazon Athena to query the Amazon CloudWatch logs that are associated with the Lambda function B. Use Amazon Athena to query the AWS CloudTrail logs that are associated with the Lambda function C. Use Amazon CloudWatch Logs Insights to query the associated Lambda function logs D. Use Amazon Elasticsearch Service (Amazon ES) to stream the Amazon CloudWatch logs for the Lambda function
C. Use Amazon CloudWatch Logs Insights to query the associated Lambda function logs
Question 58:
A company is hosting applications on Amazon EC2 instances. The company is hosting a database on an Amazon RDS for PostgreSQL DB instance. The company requires all connections to the DB instance to be encrypted.
What should a SysOps administrator do to meet this requirement?
A. Allow SSL connections to the database by using an inbound security group rule. B. Encrypt the database by using an AWS Key Management Service (AWS KMS) encryption key. C. Enforce SSL connections to the database by using a custom parameter group. D. Patch the database with SSL/TLS by using a custom PostgreSQL extension.
C. Enforce SSL connections to the database by using a custom parameter group. https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/PostgreSQL.Concepts.Gener al.SSL.htm Amazon RDS supports SSL/TLS encryption for connections to the database, and this can be enabled by creating a custom parameter group and setting the rds.force_ssl parameter to 1. This will ensure that all connections to the database are encrypted, protecting the data and maintaining compliance with the company's requirements.l
Question 59:
A SysOps administrator is configuring an application on Amazon EC2 instances for a company Teams in other countries will use the application over the internet. The company requires the application endpoint to have a static pubic IP address.
How should the SysOps administrator deploy the application to meet this requirement?
A. Behind an Amazon API Gateway API B. Behind an Application Load Balancer C. Behind an internet-facing Network Load Balancer D. In an Amazon CloudFront distribution
C. Behind an internet-facing Network Load Balancer
Question 60:
A team of developers is using several Amazon S3 buckets as centralized repositories. Users across the world upload large sets of files to these repositories. The development team's applications later process these files.
A SysOps administrator sets up a new S3 bucket, DOC-EXAMPLE-BUCKET, to support a new workload. The new S3 bucket also receives regular uploads of large sets of files from users worldwide. When the new S3 bucket is put into production, the upload performance from certain geographic areas is lower than the upload performance that the existing S3 buckets provide.
What should the SysOps administrator do to remediate this issue?
A. Provision an Amazon ElastiCache for Redis cluster for the new S3 bucket. Provide the developers with the configuration endpoint of the cluster for use in their API calls. B. Add the new S3 bucket to a new Amazon CloudFront distribution. Provide the developers with the domain name of the new distribution for use in their API calls. C. Enable S3 Transfer Acceleration for the new S3 bucket. Verify that the developers are using the DOC-EXAMPLE-BUCKET.s3-accelerate.amazonaws.com endpoint name in their API calls. D. Use S3 multipart upload for the new S3 bucket. Verify that the developers are using Region-specific S3 endpoint names such as DOC-EXAMPLE-BUCKETS3, [Region] amazonaws.com in their API calls.
C. Enable S3 Transfer Acceleration for the new S3 bucket. Verify that the developers are using the DOC-EXAMPLE-BUCKET.s3-accelerate.amazonaws.com endpoint name in their API calls. After researching this realize that the "s3-accelerate" domain in the special URL (e.g.: "acloudguru.s3-accelerate.amazonaws.com") will resolve to the nearest edge globally, and therefore there is only one url that can be used globally to make use of transfer acceleration, albeit at some additional cost for the data transfer. Setting must be enabled on bucket though. The URLs are worth reviewing (at least they were to me) https://docs.aws.amazon.com/AmazonS3/latest/userguide/ transfer-acceleration-examples.html https://www.javatpoint.com/aws-s3-transfer-acceleration
Nowadays, the certification exams become more and more important and required by more and more
enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare
for the exam in a short time with less efforts? How to get a ideal result and how to find the
most reliable resources? Here on Vcedump.com, you will find all the answers.
Vcedump.com provide not only Amazon exam questions,
answers and explanations but also complete assistance on your exam preparation and certification
application. If you are confused on your SOA-C02 exam preparations
and Amazon certification application, do not hesitate to visit our
Vcedump.com to find your solutions here.