SOA-C02 Exam Questions
733 real SOA-C02 exam questions with expert-verified answers and explanations. Page 1 of 15.
- Question #1High Availability and Elasticity
A company hosts a website on multiple Amazon EC2 instances that run in an Auto Scaling group. Users are reporting slow responses during peak times between 6 PM and 11 PM very weeke...
Auto Scalingscheduled scalingEC2 performanceEventBridge - Question #2Compute - Amazon EC2
A SysOps administrator is notified that an Amazon EC2 instance has stopped responding. The AWS Management Console indicates that the system checks are failing. What should the admi...
EC2 system status checksinstance troubleshootinghost recovery - Question #3Storage and Data Management
An organization created an Amazon Elastic File System (Amazon EFS) volume with a file system ID of fs-85ba41fc, and it is actively used by 10 Amazon EC2 hosts. The organization has...
EFS encryptionencryption at restdata migrationfile system - Question #4Networking and Content Delivery
A SysOps administrator has an Amazon S3 website and wants to restrict access to a single Amazon CloudFront distribution. Visitors to the website should not be able to circumvent Cl...
CloudFront OAIS3 access restrictioncontent deliveryorigin access identity - Question #5Storage and Data Management
A company is migrating its production file server to AWS. All data that is stored on the file server must remain accessible if an Availability Zone becomes unavailable or when syst...
FSx for Windows File ServerMulti-AZSMB protocolWindows ACLs - Question #6Database and Caching
A company manages an application that uses Amazon ElastiCache for Redis with two extra-large nodes spread across two different Availability Zones. The company's IT team discovers t...
ElastiCache Redisonline resizingcost optimizationhigh availability - Question #7Compute - Amazon EC2
A SysOps administrator is deploying an application on 10 Amazon EC2 instances. The application must be highly available. The instances must be placed on distinct underlying hardwar...
EC2 placement groupsspread placementhardware isolationhigh availability - Question #8Identity and Access Management
A company's SysOps administrator uses AWS IAM Identity Center (AWS Single Sign-On) to connect to an Active Directory. The SysOps administrator creates a new account that all the co...
IAM Identity CenterActive Directory integrationSSO permissionsgroup access - Question #9Cost and Performance Optimization
A company's IT department noticed an increase in the spend of their developer AWS account. There are over 50 developers using the account, and the finance team wants to determine t...
Cost AllocationAWS TagsCost ExplorerResource Tagging - Question #10Networking and Content Delivery
A SysOps Administrator runs a web application that is using a microservices approach whereby different responsibilities of the application have been divided in a separate microserv...
MicroservicesApplication Load Balancer (ALB)Path-based routingLoad Balancing - Question #11Cost Optimization and Resource Management
A company has multiple Amazon EC2 instances that run a resource-intensive application in a development environment. A SysOps administrator is implementing a solution to stop these...
CloudWatch alarmCPU utilizationEC2 automationcost optimization - Question #12Networking and Content Delivery
A SysOps Administrator is troubleshooting Amazon EC2 connectivity issues to the internet. The EC2 instance is in a private subnet. Below is the route table that is applied to the s...
EC2 ConnectivityNAT GatewayRoute TablesTroubleshooting - Question #13Security and Compliance
A company has adopted a security policy that requires all customer data to be encrypted at rest. Currently, customer data is stored on a central Amazon EFS file system and accessed...
EFSEncryption at RestData SecurityAWS Storage - Question #14Monitoring, Logging, and Remediation
A SysOps Administrator has implemented an Auto Scaling group with a step scaling policy. The Administrator notices that the additional instances have not been included in the aggre...
Auto Scaling GroupCloudWatch MetricsEC2 Instance Lifecycle - Question #15Networking and Content Delivery
A SysOps administrator configures VPC flow logs to publish to Amazon CloudWatch Logs. The SysOps administrator reviews the logs in CloudWatch Logs and notices less traffic than exp...
VPC flow logsCloudWatch Logson-premises trafficnetwork monitoring gaps - Question #16Cost and Performance Optimization
A company's static website hosted on Amazon S3 was launched recently, and is being used by tens of thousands of users. Subsequently, website users are experiencing 503 service unav...
Amazon S3Static WebsitesPerformanceHTTP 503 errors - Question #17Security and Compliance
A SysOps Administrator is using AWS KMS with AWS-generated key material to encrypt an Amazon EBS volume in a company's AWS environment. The Administrator wants to rotate the KMS ke...
KMS key rotationEBS encryptionAWS-managed keysautomatic rotation - Question #18Reliability and Business Continuity
A company has an Amazon RDS DB instance. The company wants to implement a caching service while maintaining high availability. Which combination of actions will meet these requirem...
ElastiCache RedisMulti-AZRDS cachinghigh availability - Question #19Security and Compliance
The SysOps Administrator must integrate an existing on-premises asymmetrical key management system into an AWS services platform. How can the Administrator meet this requirement?
AWS CloudHSMasymmetric keyson-premises integrationkey management - Question #20Networking and Content Delivery
A Systems Administrator is planning to deploy multiple EC2 instances within two separate Availability Zones in the same AwS Region. The instances cannot be exposed to the Internet,...
VPCPrivate SubnetsEC2 NetworkingAvailability Zones - Question #21Networking and Content Delivery
A company website hosts patches for software that is sold globally. The website runs in AWS and performs well until a large software patch is released. The flood of downloads puts...
CloudFrontCDNStatic Content CachingPerformance Optimization - Question #22
An organization has developed a new memory-intensive application that is deployed to a large Amazon EG2 Linux fleet. There is concern about potential memory exhaustion, so the Deve...
- Question #23Monitoring, Logging, and Remediation
A SysOps Administrator is running Amazon EC2 instances in multiple AWS Regions. The Administrator wants to aggregate the CPU utilization for all instances onto an Amazon CloudWatch...
CloudWatch dashboardcross-region metricsCPU utilizationEC2 monitoring - Question #24Deployment, Provisioning, and Automation
A SysOps administrator is creating two AWS CloudFormation templates. The first template will create a VPC with associated resources, such as subnets, route tables, and an internet...
CloudFormation outputscross-stack referencesstack exportsVPC provisioning - Question #25Reliability and Business Continuity
A company has deployed a web application in a VPC that has subnets in three Availability Zones. The company launches three Amazon EC2 instances from an EC2 Auto Scaling group behin...
Auto Scaling groupAvailability Zone distributionEC2 placementALB configuration - Question #26Reliability and Business Continuity
A company is running an application on premises and wants to use AWS for data backup. All of the data must be available locally. The backup application can write only to block-base...
Storage Gatewaygateway-stored volumesblock storagePOSIX backup - Question #27Security and Compliance
A company asks a SysOps administrator to ensure that AWS CloudTrail files are not tampered with after they are created. Currently, the company uses AWS Identity and Access Manageme...
CloudTrail log validationfile integritylog tampering preventionaudit trail - Question #29Monitoring, Logging, and Remediation
A SysOps administrator has noticed millions of LIST requests on an Amazon S3 bucket. Which services or features can the administrator use to investigate where the requests are comi...
S3 LoggingAWS CloudTrailTroubleshootingAccess Logging - Question #30Networking and Content Delivery
A company hosts its website in the us-east-1 Region. The company is preparing to deploy its website into the eu-central-1 Region. Website visitors who are located in Europe should...
Route 53geolocation routingDNS traffic routingmulti-region - Question #31Cost and Performance Optimization
A company is running a website on Amazon EC2 instances that are in an Auto Scaling group. When the website traffic increases, additional instances take several minutes to become av...
EC2 Auto ScalingInstance Launch TimePerformance OptimizationInstance Types - Question #32Security and Compliance
A company needs to restrict access to an Amazon S3 bucket to Amazon EC2 instances in a VPC only. All traffic must be over the AWS private network. What actions should the SysOps ad...
VPC endpointS3 bucket policyprivate network accessaccess restriction - Question #33Monitoring, Logging, and Remediation
A SysOps administrator notices a scale-up event for an Amazon EC2 Auto Scaling group. Amazon CloudWatch shows a spike in the RequestCount metric for the associated Application Load...
ALB Access LogsClient IP addressesTroubleshootingLogging - Question #34Security and Compliance
A mobile application must allow users to securely access their own content stored in a shared Amazon S3 bucket. Which AWS services should be used to enable this access? (Choose two...
Amazon CognitoIAM rolesS3 mobile accessfederated identity - Question #35Deployment, Provisioning, and Automation
A Development team has an application stack consisting of many OS dependencies and language runtime dependencies. When deploying the application to production, the most important f...
golden AMIbaked imagesAuto Scaling deploymentlaunch speed - Question #36Cost and Performance Optimization
A web-based application is running in AWS. The application is using a MySQL Amazon RDS database instance for persistence. The application stores transactional data and is read-heav...
RDS Read ReplicasElastiCacheDatabase CachingPerformance Optimization - Question #37Cost and Performance Optimization
A Content Processing team has notified a SysOps Administrator that their content is sometimes taking a long time to process, whereas other times it processes quickly. The Content P...
SQS queue depthAuto ScalingEC2 pollingcost-effective scaling - Question #38Monitoring, Logging, and Remediation
A SysOps Administrator receives reports of an Auto Scaling group failing to scale when the nodes running Amazon Linux in the cluster are constrained by high memory utilization. Wha...
Auto ScalingCloudWatch Custom MetricsMemory MonitoringLinux Instances - Question #39Reliability and Business Continuity
A company is using an Amazon Aurora MySQL DB cluster that has point-in-time recovery, backtracking, and automatic backup enabled. A SysOps administrator needs to be able to roll ba...
Aurora backtrackingpoint-in-time recoveryDB cluster rollbackAurora MySQL - Question #40Cost and Performance Optimization
A company is running a flash sale on its website. The website is hosted on burstable performance Amazon EC2 instances in an Auto Scaling group. The Auto Scaling group is configured...
burstable EC2 instancesCPU creditsT-instance unlimited modeperformance degradation - Question #41Security and Compliance
A company uses Amazon Elasticsearch Service (Amazon ES) to analyze sales and customer usage data. Members of the company's geographically dispersed sales team are traveling. They n...
Amazon CognitoAD FS federationKibana authenticationSAML identity - Question #42Security and Compliance
An Amazon EC2 instance is running an application that uses Amazon Simple Queue Service (Amazon SQS) queues. A SysOps administrator must ensure that the application can read, write,...
IAM RolesEC2 SecuritySQS PermissionsLeast Privilege - Question #43Reliability and Business Continuity
A company has an infernal web application that runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto Scaling group in a single A...
Auto Scaling groupmulti-AZhigh availabilityALB - Question #44Networking and Content Delivery
A company has launched a social media website that gives users the ability to upload images directly to a centralized Amazon S3 bucket. The website is popular in areas that are geo...
S3 Transfer Accelerationupload performanceCloudFront edgegeographic latency - Question #45Networking and Content Delivery
A SysOps administrator has set up a new Amazon EC2 instance as a web server in a public subnet. The instance uses HTTP port 80 and HTTPS port 443. The SysOps administrator has conf...
EC2 networkingSecurity GroupsNetwork ACLsInstance firewall - Question #46Deployment, Provisioning, and Automation
A SysOps administrator created an AWS CloudFormation template that provisions an Amazon EventBridge rule that invokes an AWS Lambda function. The Lambda function is designed to wri...
Lambda PermissionsEventBridge IntegrationCloudFormationService Invocation - Question #47Security and Compliance
A SysOps Administrator is deploying a legacy web application on AWS. The application has four Amazon EC2 instances behind Classic Load Balancer and stores data in an Amazon RDS ins...
AWS WAFSQL InjectionClassic Load BalancerWeb Application Security - Question #48Cost and Performance Optimization
A SysOps Administrator needs to report on Amazon EC2 instance cost by both project and environment (production, staging, development). Which action would impact the operations team...
Cost AllocationAWS TaggingEC2 Cost ManagementBilling and Cost Management - Question #49Cost and Performance Optimization
A web application's performance has been degrading. Historically, the application has had highly- variable workloads, but lately, there has been a steady growth in traffic as the r...
Burstable Performance InstancesPerformance OptimizationCPU CreditsInstance Sizing - Question #50Security and Compliance
An Amazon EC2 instance is in a private subnet. To SSH to the instance, it is required to use a bastion host that has an IP address of 10.0.0.5. SSH logs on the EC2 instance in the...
Security GroupsEC2 NetworkingAccess ControlNetwork Security - Question #51Deployment, Provisioning, and Automation
An AWS CloudFormation template creates an Amazon RDS instance. This template is used to build up development environments as needed and then delete the stack when the environment i...
CloudFormation deletion policyRDS snapshot retentionstack lifecycledata persistence