Amazon SOA-C02 Online Practice Questions and Exam Preparation

Amazon SOA-C02 Online Questions & Answers

• Question 651:

  A company hosts its website on Amazon EC2 instances in the us-east-1 Region. The company is preparing to extend its website into the eu-central-1 Region, but the database must remain only in us-east-1. After deployment, the EC2

  instances in eu-central-1 are unable to connect to the database in us-east-1.

  What is the MOST operationally efficient solution that will resolve this connectivity issue?

  A. Create a VPC peering connection between the two Regions. Add the private IP address range of the instances to the inbound rule of the database security group.
  B. Create a VPC peering connection between the two Regions. Add the security group of the instances in eu-central-1 to the outbound rule of the database security group.
  C. Create a VPN connection between the two Regions. Add the private IP address range of the instances to the outbound rule of the database security group.
  D. Create a VPN connection between the two Regions. Add the security group of the instances in eu-central-1 to the inbound rule of the database security group.
  A. Create a VPC peering connection between the two Regions. Add the private IP address range of the instances to the inbound rule of the database security group.

  ---

  VPN options are out of the question. We are left with add the IP address or a security group rule, but since you cannont create a security group rule that references a peer VPC security group, than the answer is clearly A.

• Question 652:

  A company has an application that uses an Amazon Elastic File System (Amazon EFS) file system. A recent incident that involved an application logic error corrupted several files. The company wants to improve its ability to back up and recover the EFS file system. The company must be able to recover individual files rapidly.

  Which solution meets these requirements MOST cost-effectively?

  A. Configure Amazon Data Lifecycle Manager (Amazon DLM) to archive a copy of the data to an Amazon S3 Glacier vault. Use S3 Glacier retrieval requests to retrieve individual files.
  B. Create a second EFS file system in another AWS Region. Configure AWS DataSync to copy the data to the backup file system. Recover files by copying them from the backup EFS file system.
  C. Enable AWS Backup in Amazon EFS to back up the file system to an Amazon S3 Glacier vault. Use S3 Glacier retrieval requests to retrieve individual files.
  D. Enable AWS Backup in Amazon EFS to back up the file system to a backup vault. Use a partial restore job to retrieve individual files.
  D. Enable AWS Backup in Amazon EFS to back up the file system to a backup vault. Use a partial restore job to retrieve individual files.

• Question 653:

  A company uses an AWS CloudFormation template to provision an Amazon EC2 instance and an Amazon RDS DB instance A SysOps administrator must update the template to ensure that the DB instance is created before the EC2 instance is launched

  What should the SysOps administrator do to meet this requirement?

  A. Add a wait condition to the template Update the EC2 instance user data script to send a signal after the EC2 instance is started
  B. Add the DependsOn attribute to the EC2 instance resource, and provide the logical name of the RDS resource
  C. Change the order of the resources in the template so that the RDS resource is listed before the EC2 instance resource
  D. Create multiple templates Use AWS CloudFormation StackSets to wait for one stack to complete before the second stack is created
  B. Add the DependsOn attribute to the EC2 instance resource, and provide the logical name of the RDS resource

  ---

  Explanation Explanation/Reference:Syntax The DependsOn attribute can take a single string or list of strings. "DependsOn" : [ String, ... ] Example The following template contains an AWS::EC2::Instance resource with a DependsOn attribute that specifies myDB, an AWS::RDS::DBInstance. When CloudFormation creates this stack, it first creates myDB, then creates Ec2Instance. https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html

• Question 654:

  A company is running a flash sale on its website. The website is hosted on burstable performance Amazon EC2 instances in an Auto Scaling group. The Auto Scaling group is configured to launch instances when the CPU utilization is above 70%.

  A couple of hours into the sale, users report slow load times and error messages for refused connections. A SysOps administrator reviews Amazon CloudWatch metrics and notices that the CPU utilization is at 20% across the entire fleet of instances.

  The SysOps administrator must restore the website's functionality without making changes to the network infrastructure.

  Which solution will meet these requirements?

  A. Activate unlimited mode for the instances in the Auto Scaling group.
  B. Implement an Amazon CloudFront distribution to offload the traffic from the Auto Scaling group.
  C. Move the website to a different AWS Region that is closer to the users.
  D. Reduce the desired size of the Auto Scaling group to artificially increase CPU average utilization.
  B. Implement an Amazon CloudFront distribution to offload the traffic from the Auto Scaling group.

  ---

  Implement an Amazon CloudFront distribution to offload the traffic from the Auto Scaling group does not breach the requirement of no changes in the network infrastructure. Reason is that cloudfront is a distribution that allows you to distribute content using a worldwide network of edge locations that provide low latency and high data transfer speeds. It plug in to existing setup, not changes to it.

• Question 655:

  Users are reporting consistent forced logouts from a stateful web application. The logouts occur before the expiration of a 15-minute application logout timer.

  The web application is hosted on Amazon EC2 instances that are in an Auto Scaling group. The instances run behind an Application Load Balancer (ALB) that has a single target group. The ALB is configured as the origin in an Amazon CloudFront distribution. Session affinity (sticky sessions) is already enabled on the ALB target group and uses duration-based cookies. The web application generates its own application cookie.

  Which combination of actions should a SysOps administrator take to resolve the logout problem? (Choose two.)

  A. Change to the least outstanding requests algorithm on the ALB target group.
  B. Configure cookie forwarding in the CloudFront distribution's cache behavior settings.
  C. Configure the duration-based cookie to be named AWSALB.
  D. Configure the ALB to use the expiration cookie header.
  E. Change the ALB to use application-based cookies.
  B. Configure cookie forwarding in the CloudFront distribution's cache behavior settings.
  E. Change the ALB to use application-based cookies.

• Question 656:

  A company's IT help desk reports that a recently deployed EC2 instance has set off an Amazon CloudWatch alarm that monitors HTTP availability. The instance runs Amazon Linux and hosts a non-production web server. A SysOps administrator needs to connect to the instance to review the cloud-init.log file for the instance. The instance is in an isolated subnet that does not have a NAT gateway. The VPC where the instance is located has no VPN connectivity.

  Which solution will meet these requirements with the LEAST operational effort?

  A. Connect to the instance by using EC2 Instance Connect. Use an EC2 Instance Connect endpoint. Ensure that the security groups on the endpoint and instance allow SSH access.
  B. Connect to the instance by using EC2 Instance Connect. Ensure that the instance security group and network ACL allow port 22 access from the IT help desk client's IP address.
  C. Connect to the instance by using AWS Systems Manager Session Manager. Ensure that the instance security group and network ACL allow outbound connectivity to the internet.
  D. Connect to the instance by using EC2 Instance Connect. Select a bastion host to connect to. Ensure that the security groups on the instance allow SSH access.
  A. Connect to the instance by using EC2 Instance Connect. Use an EC2 Instance Connect endpoint. Ensure that the security groups on the endpoint and instance allow SSH access.

• Question 657:

  A company wants to collect data from an application to use for analytics. For the first 90 days, the data will be infrequently accessed but must remain highly available. During this time, the company's analytics team requires access to the data in milliseconds. However, after 90 days, the company must retain the data for the long term at a lower cost. The retrieval time after 90 days must be less than 5 hours.

  Which solution will meet these requirements MOST cost-effectively?

  A. Store the data in S3 Standard-Infrequent Access (S3 Standard-IA) for the first 90 days. Set up an S3 Lifecycle rule to move the data to S3 Glacier Flexible Retrieval after 90 days.
  B. Store the data in S3 One Zone-Infrequent Access (S3 One Zone-IA) for the first 90 days. Set up an S3 Lifecycle rule to move the data to S3 Glacier Deep Archive after 90 days.
  C. Store the data in S3 Standard for the first 90 days. Set up an S3 Lifecycle rule to move the data to S3 Glacier Flexible Retrieval after 90 days.
  D. Store the data in S3 Standard for the first 90 days. Set up an S3 Lifecycle rule to move the data to S3 Glacier Deep Archive after 90 days.
  A. Store the data in S3 Standard-Infrequent Access (S3 Standard-IA) for the first 90 days. Set up an S3 Lifecycle rule to move the data to S3 Glacier Flexible Retrieval after 90 days.

  ---

  S3 Glacier Flexible Retrieval provides three retrieval options: expedited retrievals that typically complete in 1? minutes, standard retrievals that typically complete in 3? hours, and free bulk retrievals that return large amounts of data typically in 5?2 hours. The Amazon S3 Glacier Deep Archive storage class provides two retrieval options ranging from 12-48 hours.