SOA-C02 Exam Questions
733 real SOA-C02 exam questions with expert-verified answers and explanations. Page 15 of 15.
- Question #715Cost and Performance Optimization
A company is using Amazon S3 buckets to store datasets. The company has several teams that use Amazon Athena to run one-time queries against the datasets. A SysOps administrator mu...
Athena workgroupsquery result isolationS3 output locationteam access control - Question #716Cost and Performance Optimization
An ecommerce company uses an Amazon ElastiCache (Redis OSS) cluster for in-memory caching of popular product queries on a shopping website. The cache eviction policy is randomly ev...
ElastiCache Rediscache eviction policycache hit ratioLFU eviction - Question #717Networking and Content Delivery
A company deploys AWS infrastructure in a VPC that has an internet gateway. The VPC has public subnets and private subnets. An Amazon RDS for MySQL DB instance is deployed in a pri...
VPC endpointsNAT gatewayLambda VPC networkingSQS connectivity - Question #718Networking and Content Delivery
A company must use AWS Systems Manager Session Manager to manage a fleet of Amazon EC2 instances. The company wants to use Session Manager to configure private connectivity that us...
Systems Manager Session ManagerVPC interface endpointsprivate connectivitySSM endpoints - Question #719Reliability and Business Continuity
A company uploads audio files to an Amazon S3 bucket. The company has configured S3 Event notifications to invoke an AWS Lambda function when an object is uploaded to the S3 bucket...
Lambda retry behaviorSQS event source mappingS3 event notificationsfault tolerance - Question #720Reliability and Business Continuity
A company runs databases on Amazon RDS for MySQL DB instances. The company must generate database backups every 12 hours for all the DB instances. The company must retain the backu...
AWS BackupRDS automated backupsbackup retention policyleast operational overhead - Question #721Cost and Performance Optimization
A company's web application uses an Amazon Aurora DB cluster. The DB cluster includes memory optimized instances and operates 24 hours a day, 7 days a week. The DB cluster has a wr...
Aurora Replicaread scalingSELECT latencyzero-downtime scaling - Question #722Monitoring, Logging, and Remediation
A SysOps administrator needs to implement a solution to track configuration changes to security groups of Amazon EC2 instances. The solution also must remediate any noncompliant se...
AWS Config rulessecurity group complianceautomated remediationSystems Manager - Question #723Networking and Content Delivery
A company uses an Amazon CloudFront distribution to share a file through a signed URL. The company stores the source file in an Amazon S3 bucket and updates the file every day. Use...
CloudFront TTLcache invalidationsigned URLcontent freshness - Question #724Reliability and Business Continuity
A company must automate daily incremental backups of any Amazon Elastic Block Store (Amazon EBS) volume that is marked with a Lifecycle: Production tag. The company also must preve...
EBS snapshotsAWS Backuptag-based backup policysnapshot deletion protection - Question #725Security and Compliance
A company deploys an application to multiple AWS Regions. The company uses an organization in AWS Organizations to manage multiple AWS accounts. The company must prevent all AWS ac...
Service Control PolicyAWS OrganizationsRegion restrictionguardrails - Question #726Security and Compliance
A company stores customer data in an Amazon S3 bucket. Users from several AWS accounts need to access the data. The company owns some of the accounts. Partner companies own the oth...
AWS Lake Formationcross-account data accessS3 data lakedata governance - Question #727Reliability and Business Continuity
A company configures an Amazon Route 53 public hosted zone. The company wants traffic to fail over to a backup web server whenever the primary web server becomes unreachable. The c...
Route 53 failover routinghealth check associationDNS recordactive-passive failover - Question #728Security and Compliance
A company uses an organization in AWS Organizations to manage multiple AWS accounts. A SysOps administrator must identify all IPv4 ports that are open to 0.0.0.0/0 across all accou...
Trusted Advisororganizational viewsecurity group rulesunrestricted access - Question #729Monitoring, Logging, and Remediation
A SysOps administrator needs to implement a monitoring system to collect instance metrics every minute for an application. The application runs on a highly available pair of Amazon...
CloudWatch detailed monitoringEC2 instance metricsCloudWatch alarmsSNS notifications - Question #730Monitoring, Logging, and Remediation
A company is using an organization in AWS Organizations to manage hundreds of AWS accounts across AWS Regions. AWS Config is turned on for the organization. The company requires al...
AWS Config aggregatorS3 public access complianceOrganizations conformanceconfig managed rules - Question #731Security and Compliance
A company needs to view a list of security groups that are open to the internet on port 3389. What should a SysOps administrator do to meet this requirement?
Trusted Advisorsecurity groupport 3389 RDPunrestricted access - Question #732Networking and Content Delivery
A company deploys non-production Amazon EC2 instances in a VPC that has an internet gateway attached. The VPC has a single public subnet and a single private subnet. The EC2 instan...
NAT gatewayprivate subnet routinginternet accessroute table - Question #733Security and Compliance
A company stores data in an Amazon S3 bucket. The company must ensure that some specific objects are not deleted or overwritten for 10 years to comply with local regulations. The c...
S3 Object Lockcompliance modeS3 versioningdata retention regulation - Question #734Security and Compliance
A company uses AWS Organizations to manage its AWS accounts. The company is implementing a CostCenter tag for business units to track costs and prevent noncompliant actions. The co...
Service Control Policytag enforcementcost allocation tagsEC2 launch conditions - Question #735Monitoring, Logging, and Remediation
A SysOps administrator is examining costs in a development account that is part of an organization in AWS Organizations. The account includes Amazon CloudWatch Logs log groups that...
CloudWatch Logs retentionPutRetentionPolicyLambda automationEventBridge trigger - Question #737Monitoring, Logging, and Remediation
A medical research company uses an Amazon Bedrock powered AI assistant with agents and knowledge bases to provide physicians quick access to medical study protocols. The company ne...
CloudTrailBedrock audit logginggenerative AIAPI event logging - Question #738Cost and Performance Optimization
A company runs an application on a fleet of Amazon EC2 instances behind an Elastic Load Balancing (ELB) load balancer. The instances run in an Auto Scaling group. The application's...
scheduled scalingAuto ScalingEC2predictable traffic - Question #740Deployment, Provisioning, and Automation
A SysOps administrator runs the AWS Systems Manager Run Command AWS- RunPatchBaseline document on a group of 20 Amazon Linux 2023 based Amazon EC2 instances. After the Run Command...
patch baselineSystems ManagerRun Commandpatch exception - Question #741Reliability and Business Continuity
After an operating system update, a company experienced data corruption of the root volume of an Amazon EC2 instance that runs a critical application. The data corruption resulted...
EBS snapshotsRPOSystems Manager Automationroot volume recovery - Question #742Deployment, Provisioning, and Automation
A SysOps administrator is managing event rules in Amazon EventBridge. The SysOps administrator must configure the EventBridge rules to prevent infinite loops. Which solution will m...
EventBridge rulesinfinite loop preventionevent rule configuration - Question #743Monitoring, Logging, and Remediation
A company has a non-production application that runs on an Amazon EC2 instance. The Amazon CloudWatch agent is installed on the EC2 instance. The application includes a process tha...
CloudWatch alarmsEventBridgeEC2 rebootdisk monitoring - Question #744Deployment, Provisioning, and Automation
A company's developers manually install software modules on Amazon EC2 instances to deploy new versions of a service. A security audit finds that the instances have different combi...
EC2 Image BuilderAMIapproved softwaresecurity hardening - Question #745Cost and Performance Optimization
An application accesses databases that run on an Amazon Aurora PostgreSQL Multi-AZ DB cluster. The application is gaining more users and is experiencing an increased load. A SysOps...
RDS Proxyconnection poolingAurora PostgreSQLdatabase performance - Question #746Reliability and Business Continuity
A SysOps administrator needs to implement a solution to back up a company's Amazon S3 objects. The solution also must prevent any entity from deleting the backups after 7 days. Whi...
AWS BackupBackup Vault LockS3 backupimmutable backup - Question #747Networking and Content Delivery
A company hosts applications in private subnets across multiple Availability Zones within a VPC. The company has established a VPC peering connection between an application VPC and...
VPC peeringroute tablesprivate subnetsnetwork connectivity - Question #748Security and Compliance / Storage and Data Management - Implementing and managing CloudFormation templates with encryption configurations and dynamic resource naming.
A SysOps administrator needs to create an Amazon S3 bucket as a resource in an AWS CloudFormation template. The bucket name must be randomly generated. The bucket must be encrypted...
CloudFormationS3 EncryptionKMSInfrastructure as Code - Question #749Reliability and Business Continuity
A company needs to implement disaster recovery (DR) for its application. The application's production environment consists of Amazon EC2 instances in an Auto Scaling group and an A...
disaster recoverySystems Manager Automation runbookAuto ScalingRoute 53 failover