A SysOps administrator manages the caching of an Amazon CloudFront distribution that serves pages of a website, The SysOps administrator needs to configure the distribution so that the TTL of individual pages can vary. The TTL of the individual pages must remain within the maximum TLL and the minimum TTL that are set for the distribution.
Which solution will meet these requirements?
A. Create an AWS Lambda function that calls the Createlnvalidation API operation when a change in cache time is necessary. B. Add a Cache-Control: max-age directive to the object at the origin when content is being returned to CloudFront. C. Add a no-cache header through a Lambda@Edge function in response to the Viewer response. D. Add.an Expires header through a CloudFront function in response to the Viewer response.
B. Add a Cache-Control: max-age directive to the object at the origin when content is being returned to CloudFront. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Expiration.html
Question 632:
A company's SysOps administrator manages a fleet of hundreds of Amazon EC2 instances that run Windows-based workloads and Linux-based workloads. Each EC2 instance has a tag that identifies its operating system. All the EC2 instances run AWS Systems Manager Session Manager.
A zero-day vulnerability is reported, and no patches are available. The company's security team provides code for all the relevant operating systems to reduce the risk of the vulnerability. The SysOps administrator needs to implement the code on the EC2 instances and must provide a report that shows that the code has successfully run on all the instances.
What should the SysOps administrator do to meet these requirements as quickly as possible?
A. Use Systems Manager Run Command. Choose either the AWS-RunShellScript document or the AWS-RunPowerShellScript document. Configure Run Command with the code from the security team. Specify the operating system tag in the Targets parameter. Run the command. Provide the command history's evidence to the security team. B. Create an AWS Lambda function that connects to the EC2 instances through Session Manager. Configure the Lambda function to identify the operating system, run the code from the security team, and return the results to an Amazon RDS DB instance. Query the DB instance for the results. Provide the results as evidence to the security team. C. Log on to each EC2 instance. Run the code from the security team on each EC2 instance. Copy and paste the results of each run into a single spreadsheet. Provide the spreadsheet as evidence to the security team. D. Update the launch templates of the EC2 instances to include the code from the security team in the user data. Relaunch the EC2 instances by using the updated launch templates. Retrieve the EC2 instance logs of each instance. Provide the EC2 instance logs as evidence to the security team.
A. Use Systems Manager Run Command. Choose either the AWS-RunShellScript document or the AWS-RunPowerShellScript document. Configure Run Command with the code from the security team. Specify the operating system tag in the Targets parameter. Run the command. Provide the command history's evidence to the security team. The AWS Systems Manager Run Command allows the SysOps administrator to execute commands on multiple EC2 instances simultaneously, which is crucial for managing a large fleet of instances efficiently. By using the AWS-RunShellScript or AWS-RunPowerShellScript documents, the SysOps administrator can run the code provided by the security team on both Windows-based and Linux-based instances, as required. The SysOps administrator can specify the operating system tag as a target parameter, ensuring that the code is only executed on the relevant instances, which saves time and prevents errors. AWS Systems Manager keeps a history of Run Command executions, providing an easy way to provide evidence to the security team that the code has successfully run on all instances.
Question 633:
A company receives an alert from an Amazon CloudWatch alarm The alarm indicates that a web application that Is running on Amazon EC2 instances is not responding to requests The EC2 instances have a Red Hat Enterprise Linux operating system and are in an Auto Scaling group. The Auto Scaling group has a minimum capacity of 2 and a maximum capacity of 5.
An Investigation reveals that the web application is experiencing oul-of-memory errors. The company adds memory lo the web application and wants to track operating system memory utilization. A CloudWatch memory metric does not currently exist tor the EC2 Instances in the Auto Scaling group
What should a SysOps administrator do to provide a CloudWatch memory metric for the EC2 instances?
A. Use an Amazon Machine Image (AMI) that includes the CloudWatch agent. B. Turn on CloudWatch detailed monitoring C. Turn on Instance Metadata Service Version 2 (IMOSv2). D. Use an Amazon Machine Image (AMI) that is based on Amazon Linux.
A. Use an Amazon Machine Image (AMI) that includes the CloudWatch agent. Using an AMI with CloudWatch Agent: The CloudWatch agent can collect memory utilization metrics and send them to CloudWatch. Steps:Collecting Metrics and Logs from Amazon EC2 Instances and On-Premises Servers with the CloudWatch Agent
Question 634:
ASysOps administrator configures an application to run on Amazon EC2 instances behind an Application Load Balancer (ALB) in a simple scaling Auto Scaling group with the default settings. The Auto Scaling group is configured to use the RequestCountPerTarget metric for scaling. The SysOps administrator notices that the RequestCountPerTarget metric exceeded the specified limit twice in 180 seconds.
How will the number of EC2 instances in this Auto Scaling group be affected in this scenario?
A. The Auto Scaling group will launch an additional EC2 instance every time the RequestCountPerTarget metric exceeds the predefined limit. B. The Auto Scaling group will launch one EC2 instance and will wait for the default cooldown period before launching another instance. C. The Auto Scaling group will send an alert to the ALB to rebalance the traffic and not add new EC2 instances until the load is normalized. D. The Auto Scaling group will try to distribute the traffic among all EC2 instances before launching another instance.
B. The Auto Scaling group will launch one EC2 instance and will wait for the default cooldown period before launching another instance. When the RequestCountPerTarget metric exceeds the specified limit, the Auto Scaling group will launch an additional EC2 instance to handle the increased load. However, after launching an instance, the Auto Scaling group will wait for the default cooldown period before launching another instance. The cooldown period is a configurable setting that helps ensure that the Auto Scaling group doesn't launch or terminate additional instances before the previous scaling activity takes effect.
Question 635:
A SysOps administrator is configuring Amazon CloudWatch alarms. A particular is constantly in the ALARM state.
What could be the reason for this issue?
A. Alarms continue to evaluate metrics against configured thresholds, even after they are triggered. B. After alarms are triggered, they remain in the ALARM state until they are manually disabled. C. After an alarm is triggered and an action is performed, the application logic must reset the alarm to its normal state. D. The alarm is not receiving appropriate metrics.
A. Alarms continue to evaluate metrics against configured thresholds, even after they are triggered. For any period of one minute or longer, an alarm is evaluated every minute and the evaluation is based on the window of time defined by the Period and Evaluation Periods. For example, if the Period is 5 minutes (300 seconds) and Evaluation Periods is 1, then at the end of minute 5 the alarm evaluates based on data from minutes 1 to 5. Then at the end of minute 6, the alarm is evaluated based on the data from minutes 2 to 6.
Question 636:
A company is implementing a monitoring solution that is based on machine learning. The monitoring solution consumes Amazon EventBridge (Amazon CloudWatch Events) events that are generated by Amazon EC2 Auto Scaling. The monitoring solution provides detection of anomalous behavior such as unanticipated scaling events and is configured as an EventBridge (CloudWatch Events) API destination.
During initial testing, the company discovers that the monitoring solution is not receiving events. However, Amazon CloudWatch is showing that the EventBridge (CloudWatch Events) rule is being invoked. A SysOps administrator must implement a solution to retrieve client error details to help resolve this issue. Which solution will meet these requirements with the LEAST operational effort?
A. Create an EventBridge (CloudWatch Events) archive for the event pattern to replay the events. Increase the logging on the monitoring solution. Use replay to invoke the monitoring solution. Examine the error details. B. Add an Amazon Simple Queue Service (Amazon SQS) standard queue as a dead-letter queue for the target. Process the messages in the dead-letter queue to retrieve error details. C. Create a second EventBridge (CloudWatch Events) rule for the same event pattern to target an AWS Lambda function. Configure the Lambda function to invoke the monitoring solution and to record the results to Amazon CloudWatch Logs. Examine the errors in the logs. D. Configure the EventBridge (CloudWatch Events) rule to send error messages to an Amazon Simple Notification Service (Amazon SNS) topic.
A. Create an EventBridge (CloudWatch Events) archive for the event pattern to replay the events. Increase the logging on the monitoring solution. Use replay to invoke the monitoring solution. Examine the error details. You can now create an encrypted archive of the events published to an event bus. You can archive all events, or filter them using the same pattern matching syntax used by EventBridge rules. You can store events indefinitely, or set up a retention period after which older events are automatically removed from the archive. You can also replay the events stored in an archive. Events are replayed to all rules defined for the event bus (but not to managed rules created by other AWS services) or to the rules you specify. Replayed events contain an extra replay-name field in case you need to recognize them. When starting a replay, you define a time frame, and only events within that time frame are replayed. Currently, you can only replay events to the same event bus from which they were archived.
Question 637:
An ecommerce company has built a web application that uses an Amazon Aurora DB cluster. The DB cluster includes memory optimized instance types with both a writer node and a reader node. Traffic volume changes throughout the day.
During sudden traffic surges, Amazon CloudWatch metrics for the DB cluster indicate high RAM consumption and an increase in select latency.
A SysOps administrator must implement a configuration change to improve the performance of the DB cluster. The change must minimize downtime and must not result in the loss of data.
Which change will meet these requirements?
A. Add an Aurora Replica to the DB cluster. B. Modify the DB cluster to convert the DB cluster into a multi-master DB cluster. C. Take a snapshot of the DB cluster. From that snapshot, create a new DB cluster that has larger memory optimized instances. D. Increase the disk storage capacity of the DB cluster to double the existing disk capacity.
A. Add an Aurora Replica to the DB cluster. Explanation Explanation/Reference:To improve the performance of the Aurora DB cluster, while minimizing downtime and without losing data, option A - adding an Aurora Replica to the DB cluster, is the best choice. Adding an Aurora Replica would create a new reader node in the cluster, which can help distribute the load during sudden traffic surges, and reduce the select latency. This can also help reduce RAM consumption on the writer node. Additionally, adding a replica can be done with minimal downtime, as it does not require any changes to the application, and data will be automatically replicated from the writer node to the new replica.
Question 638:
A company has an application that runs behind an Application Load Balancer (ALB) in the us-west-2 Region. An Amazon Route 53 record set contains an alias record for app.anycompany.com that references the ALB in us-west-2 and uses a simple routing policy. The application is experiencing an increase in users from other locations in the world. These users are experiencing high latency.
Most of the new users are close to the ap-southeast-2 Region. The company deploys a copy of the application to ap-southeast-2. A SysOps administrator must implement a solution that automatically routes requests to the lowest latency endpoint for users without changing the URL.
Which solution will meet these requirements?
A. Add a new value to the existing alias record for app.anycompany.com with the DNS name of the new ALB in ap-southeast-2. B. Change the existing alias record to use a geolocation routing policy. Create two geolocation records, one record that references each ALSelect the location that is closest to each Region. C. Change the existing alias record to use a latency routing policy. Create two latency records, one record that references each ALB. D. Change the existing alias record to use a multivalue routing policy Add the DNS name of each ALB to the record.
C. Change the existing alias record to use a latency routing policy. Create two latency records, one record that references each ALB. To automatically route requests to the lowest latency endpoint for users without changing the URL, the SysOps administrator should change the existing alias record to use a latency routing policy and create two latency records, one record that references each ALB. With a latency routing policy, Amazon Route 53 routes traffic to the endpoint with the lowest latency for the user. This will ensure that users are automatically routed to the endpoint with the lowest latency, improving their experience.
Question 639:
A SysOps administrator receives an alert from Amazon GuardDuty about suspicious network activity on an Amazon FC2 instance. The GuardDuty finding lists a new external IP address as a traffic destination. The SysOps administrator does not recognize the external IP address. The SysOps administrator must block traffic to the external IP address that GuardDuty identified.
Which solution will meet this requirement?
A. Create a new security group to block traffic to the external IP address. Assign the new security group to the EC2 instance B. Use VPC flow logs with Amazon Athena to block traffic to the external IP address C. Create a network ACL Add an outbound deny rule tor traffic to the external IP address D. Create a new security group to block traffic to the external IP address Assign the new security group to the entire VPC
C. Create a network ACL Add an outbound deny rule tor traffic to the external IP address Explanation Explanation/Reference:Network Access Control Lists (NACLs) are used to control the traffic entering and exiting subnets in a VPC. They operate at the subnet level and are stateless, meaning that both inbound and outbound rules must be explicitly defined. By adding an outbound deny rule for traffic to the specific external IP address identified by GuardDuty, you can block any communication from the EC2 instance to that IP address.
Question 640:
A company uses AWS Organizations. A SysOps administrator wants to use AWS Compute Optimizer and AWS tag policies in the management account to govern all member accounts in the billing family. The SysOps administrator navigates to the AWS Organizations console but cannot activate tag policies through the management account.
What could be the reason for this issue?
A. All features have not been enabled in the organization. B. Consolidated billing has not been enabled. C. The member accounts do not have tags enabled for cost allocation. D. The member accounts have not manually enabled trusted access for Compute Optimizer.
A. All features have not been enabled in the organization. https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_tag-policies-prereqs.html
Nowadays, the certification exams become more and more important and required by more and more
enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare
for the exam in a short time with less efforts? How to get a ideal result and how to find the
most reliable resources? Here on Vcedump.com, you will find all the answers.
Vcedump.com provide not only Amazon exam questions,
answers and explanations but also complete assistance on your exam preparation and certification
application. If you are confused on your SOA-C02 exam preparations
and Amazon certification application, do not hesitate to visit our
Vcedump.com to find your solutions here.