SOA-C02 Exam Questions
733 real SOA-C02 exam questions with expert-verified answers and explanations. Page 14 of 15.
- Question #657Reliability and Business Continuity
A company uses an Amazon Aurora PostgreSQL database. The company's compliance policy requires the data to be available in a separate, distinct geographic location. The company must...
Aurora global databaseRPOdisaster recoverycross-region replication - Question #658Networking and Content Delivery
A company's VPC has connectivity to an on-premises data center through an AWS Site-to-Site VPN. The company needs Amazon EC2 instances in the VPC to send DNS queries for example.co...
Route 53 Resolveroutbound endpointconditional forwardingDNS hybrid - Question #661Networking and Content Delivery
A company deploys an application on AWS behind an internet-facing Application Load Balancer (ALB) in the us-west-2 Region. Amazon Route 53 manages DNS CNAME records for the applica...
Route 53 latency routingmulti-regionALBtraffic distribution - Question #662Reliability and Business Continuity
A company runs an application on a fleet of Amazon EC2 Windows instances in a Multi-AZ deployment. The company needs a solution that will give the instances access to shared files....
FSx for Windows File Servershared storageMulti-AZWindows native - Question #663Networking and Content Delivery
A company website contains a web tier and a database tier on AWS. The web tier consists of Amazon EC2 instances that run in an Auto Scaling group across two Availability Zones. The...
network ACLsephemeral portsRDS accessstateless firewall - Question #665Reliability and Business Continuity
A company has a public web application that experiences rapid traffic increases after advertisements appear on local television. The application runs on Amazon EC2 instances that a...
Auto Scaling warm poolstraffic surgesinstance startuppre-warming - Question #666Networking and Content Delivery
A SysOps administrator is troubleshooting a website that will not load for users. The website is hosted by an Amazon CloudFront distribution that has an Amazon S3 bucket as the ori...
CloudFront distributionDNS CNAMES3 originwebsite hosting - Question #667Monitoring, Logging, and Remediation
A company moved its server infrastructure to Amazon EC2 instances. The company needs to use Amazon CloudWatch metrics to track metrics for a Java application. The company has integ...
OpenTelemetryCloudWatch metricsAWS Distro for OpenTelemetryJava application - Question #668Security and Compliance
A company requires the rotation of administrative credentials for production workloads on a regular basis. A SysOps administrator must implement this policy for an Amazon RDS DB in...
Secrets ManagerRDS password rotationcredential managementautomation - Question #671Monitoring, Logging, and Remediation
A SysOps administrator needs to monitor Amazon DynamoDB usage across a company's AWS accounts. The accounts are in an organization with all features enabled in AWS Organizations. T...
CloudWatch cross-accountDynamoDB throttlingdelegated administratorservice quotas - Question #673Security and Compliance
A company migrates a write-once, read-many (WORM) drive to an Amazon S3 bucket that has S3 Object Lock configured in governance mode. During the migration, the company copies unnee...
S3 Object Lockgovernance modebypass governance retentionWORM compliance - Question #675Security and Compliance
A company is creating a new multi-account environment in AWS Organizations. The company will use AWS Control Tower to deploy the environment. Users must be able to create resources...
AWS Control Towerservice control policiesAWS Organizationsmulti-account governance - Question #676Security and Compliance
A company is hosting a public website on Amazon EC2 instances behind an Application Load Balancer (ALB). The company needs the website to support HTTPS connections. Which solution...
SSL/TLS certificatesACMApplication Load BalancerHTTPS - Question #678Cost and Performance Optimization
A team of developers is using several Amazon S3 buckets as centralized repositories. Users across the world upload large sets of files to these repositories. The development team's...
S3 Transfer AccelerationS3 performanceglobal file uploadsAmazon S3 - Question #679Reliability and Business Continuity
A company has implemented a Kubernetes cluster on Amazon Elastic Kubernetes Service (Amazon EKS) to host a microservices-based application. The company expects application traffic...
Kubernetes HPAAmazon EKShorizontal pod autoscalingauto scaling - Question #680Reliability and Business Continuity
A company has an NFS server that runs on a single Amazon EC2 instance. A SysOps administrator needs to replace the NFS server with a highly available file system. A total of 30 EC2...
Amazon EFSshared file systemhigh availabilityEFS Standard storage class - Question #681Monitoring, Logging, and Remediation
A SysOps administrator has used AWS Secrets Manager to set up automatic password rotation for a company's Amazon RDS databases. A web application uses the password to connect to th...
AWS Secrets Managerpassword rotationLambda rotation functionCloudWatch Logs - Question #682Security and Compliance
A company that uses AWS Organizations has an organization that contains several AWS accounts. A SysOps administrator needs to implement controls to prevent an account from leaving...
service control policiesAWS OrganizationsLeaveOrganizationaccount governance - Question #683Networking and Content Delivery
A company has an Amazon EC2 instance that is deployed in an isolated private subnet in a VPC. The EC2 instance needs to access data that is in an Amazon S3 bucket. The company has...
S3 gateway endpointVPC routingsecurity groupsprivate subnet - Question #684Monitoring, Logging, and Remediation
A SysOps administrator needs to set up alerting and remediation for a web application. The application consists of Amazon EC2 instances that have AWS Systems Manager Agent (SSM Age...
CloudWatch agentmetric filtersEventBridge rulesautomated remediation - Question #685Deployment, Provisioning, and Automation
A SysOps administrator needs to delete an AWS CloudFormation stack that is in the DELETE_FAILED state. CloudFormation was unable to delete an Amazon EC2 security group. What should...
CloudFormationDELETE_FAILED stateRetainResourcesstack deletion - Question #686Cost and Performance Optimization
A SysOps administrator needs to track workload costs across all accounts in an organization in AWS Organizations. All components of each workload have a workload tag. However, the...
cost allocation tagsAWS Cost ManagementAWS Organizationsworkload tagging - Question #687Cost and Performance Optimization
A company has an ecommerce application. The application runs on Amazon EC2 instances that are in an Auto Scaling group. The company runs a backend PostgreSQL database on Amazon RDS...
RDS Proxyconnection poolingPostgreSQLAuto Scaling group - Question #688Networking and Content Delivery
A company needs to launch a public website. The company will deploy the website on Amazon EC2 instances that are in an Auto Scaling group. The Auto Scaling group extends across mul...
Application Load BalancerRoute 53 alias recordinternet-facing load balancermulti-AZ - Question #689Security and Compliance
A company has its accounts in an organization in AWS Organizations. The company deploys its first service control policy (SCP) to an organizational unit (OU). The SCP denies the ia...
service control policiesSCP evaluation logicAWS OrganizationsIAM permissions - Question #690Monitoring, Logging, and Remediation
A company is using an Amazon EC2 instance to inspect inbound traffic. The EC2 instance runs Amazon Linux and has the Amazon CloudWatch agent installed and configured. The company n...
CloudWatch Logsmetric filtersCloudWatch alarmsEC2 monitoring - Question #691Networking and Content Delivery
A company is deploying a new version of its website. A SysOps administrator must deploy the new website in a limited rollout to 20% of the company's customers. The company uses Ama...
Route 53 weighted routingDNS routing policiescanary deploymenttraffic distribution - Question #692Cost and Performance Optimization
A SysOps administrator is configuring an Auto Scaling group of Amazon EC2 instances for an application. The average CPU utilization of the instances in the Auto Scaling group must...
target tracking scalingAuto ScalingCPU utilizationCloudWatch metrics - Question #693Reliability and Business Continuity
A company runs an application on Amazon EC2 instances that are behind an Application Load Balancer (ALB). The application supports customers in Europe and runs in a single Availabi...
high availabilityAuto Scaling groupALB health checksmulti-AZ deployment - Question #694Deployment, Provisioning, and Automation
A company has deployed Amazon EC2 instances from custom Amazon Machine Images (AMIs) in two AWS Regions. The company registered all the instances with AWS Systems Manager. The comp...
Systems Manager Patch Managerpatch complianceEventBridge automationzero-day patching - Question #695Monitoring, Logging, and Remediation
A company's APIs are not receiving all their expected events. The company has hundreds of Amazon EventBridge rules configured and no dead-letter queues for failed event delivery. A...
EventBridgeFailedInvocations metricCloudWatch alarmsSNS notifications - Question #696Security and Compliance
A SysOps administrator manages policies for many AWS member accounts in an AWS Organizations structure. Administrators on other teams have access to the account root user credentia...
service control policiesAWS OrganizationsDynamoDB access denialroot user restrictions - Question #697Networking and Content Delivery
A SysOps administrator launches two Amazon EC2 instances and creates a single public subnet for testing purposes in the same Availability Zone. The SysOps administrator wants Amazo...
Route 53 health checksmultivalue routingDNS failoverEC2 public IP - Question #698Deployment, Provisioning, and Automation
A company plans to create many AWS accounts. Each account requires a VPC that has a unique IPv4 CIDR allocation. The company has an organization with all features enabled in AWS Or...
VPC IPAMCloudFormation StackSetsAWS RAMCIDR automation - Question #699Monitoring, Logging, and Remediation
A company made a configuration change to an Amazon EC2 Auto Scaling group that hosts a production application. The change affected the number of available EC2 instances and caused...
EventBridge rulesCloudTrail management eventsSNS notificationsAuto Scaling changes - Question #700Reliability and Business Continuity
A company uses Amazon ElastiCache (Redis OSS) to cache application data. A SysOps administrator must implement a solution to increase the resilience of the cache. The solution also...
ElastiCache RedisMulti-AZ replicationRTO minimizationcache resilience - Question #701Cost and Performance Optimization
A company needs to optimize costs for its Amazon RDS DB instances. The company currently runs more than 20 RDS DB instances and suspects that some databases are rarely used. Some o...
Compute OptimizerRDS rightsizingunderutilized resourcescost optimization - Question #702Cost and Performance Optimization
A company runs an application on Amazon EC2 instances. The application connects to a single Amazon RDS for MySQL DB instance. Traffic for the application has increased for several...
RDS read replicaRDS Proxyconnection poolingdatabase scaling - Question #703Security and Compliance
A company has AWS accounts in an organization in AWS Organizations. The company has built an AWS Lambda function in one account. The Lambda function needs to retrieve a list of Ama...
cross-account IAM roleLambda execution roleassume roleleast privilege - Question #704Reliability and Business Continuity
A company wants to centrally provide file shares to Windows machines by using SMB. The company wants to provide file shares to Linux machines by using NFS. The company requires hig...
FSx for NetApp ONTAPSMB NFS multi-protocolMulti-AZ failoverfile share HA - Question #705Cost and Performance Optimization
A company has deployed AWS Lambda functions, Amazon EC2 instances, and Amazon Elastic Block Store (Amazon EBS) volumes across multiple AWS Regions. A SysOps administrator needs to...
Compute OptimizerEC2 Lambda EBS optimizationrightsizingmulti-region resources - Question #706Networking and Content Delivery
A company has a microservice that runs on a set of Amazon EC2 instances. The EC2 instances run behind an Application Load Balancer (ALB). A SysOps administrator must use Amazon Rou...
Route 53 alias recordALB DNS mappingapex domainDNS record types - Question #707Networking and Content Delivery
A company is creating an application that runs on smart TVs and mobile phones. Static images for the application are loaded from an Amazon CloudFront distribution. The images have...
CloudFront origin request policydevice-based cachingCloudFront-Is-SmartTV-Viewercache differentiation - Question #708Security and Compliance
A company deploys an application on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB). The company wants to protect the application from SQL i...
AWS WAFSQL injection protectionmanaged rule groupsALB web ACL - Question #709Networking and Content Delivery
A SysOps administrator launches an Amazon EC2 instance in a VPC that has an IPv4 CIDR block of 172.16.0.0/22. The VPC does not have internet access. The EC2 instance has an IAM ins...
VPC endpointsSystems Manager Session Managerssmmessages endpointprivate subnet connectivity - Question #710Monitoring, Logging, and Remediation
A company has turned on server access logging for all of its existing Amazon S3 buckets. The company wants to implement a solution to monitor the logging settings for new and exist...
AWS ConfigS3 bucket loggingautomatic remediationcompliance rule - Question #711Deployment, Provisioning, and Automation
A company runs a website on Amazon EC2 instances. Users can upload images to an Amazon S3 bucket and publish the images to the website. The company wants to deploy a serverless ima...
S3 Event NotificationsLambda triggerserverless image processingevent-driven architecture - Question #712Monitoring, Logging, and Remediation
A company has an AWS account that multiple teams use. A SysOps administrator needs to identify any IAM users and roles in the account that have not been used within the last 30 day...
IAM Access Analyzerunused IAM identitiesEventBridge access-analyzer eventsSNS notifications - Question #713Security and Compliance
A company has a security AWS account and a production AWS account. The company stores API keys as a secret in AWS Secrets Manager in the security account. The company uses an AWS K...
Secrets Manager cross-accountcustomer managed KMS keyKMS key policyresource-based policy - Question #714Deployment, Provisioning, and Automation
A SysOps administrator manages an Auto Scaling group of Amazon EC2 instances for an application. Each instance requires a significant amount of dynamic configuration at boot time....
Auto Scaling warm poolinstance pre-initializationscale-out latencyboot time optimization