SOA-C02 Exam Questions
733 real SOA-C02 exam questions with expert-verified answers and explanations. Page 2 of 15.
- Question #52Monitoring, Logging, and Remediation
A company uses an Amazon Elastic File System (Amazon EFS) file system to share files across many Linux Amazon EC2 instances. A SysOps administrator notices that the file system's P...
EFS PerformancePerformance ModesTroubleshootingMonitoring EFS - Question #53
A data storage company provides a service that gives users the ability to upload and download files as needed. The files are stored in Amazon S3 Standard and must be immediately re...
- Question #54Security and Compliance
A company using AWS Organizations requires that no Amazon S3 buckets in its production accounts should ever be deleted. What is the SIMPLEST approach the SysOps administrator can t...
AWS OrganizationsService Control Policies (SCPs)S3 SecurityAccess Control - Question #55Networking and Content Delivery
A company uses Amazon Route 53 to manage the public DNS records for the domain example.com. The company deploys an Amazon CloudFront distribution to deliver static assets for a new...
Route 53CloudFrontDNS RecordsSubdomains - Question #56Monitoring, Logging, and Remediation
A company wants to be alerted through email when IAM CreateUser API calls are made within its AWS account. Which combination of actions should a SysOps administrator take to meet t...
AWS CloudTrailAmazon EventBridgeAmazon SNSEmail Alerting - Question #57
A company is running a website on Amazon EC2 instances behind an Application Load Balancer (ALB). The company configured an Amazon CloudFront distribution and set the ALB as the or...
- Question #58
A company hosts its website on Amazon EC2 instances behind an Application Load Balancer. The company manages its DNS with Amazon Route 53 and wants to point its domain's zone apex...
- Question #59
A company's IT Security team is performing an audit of the AWS environment to determine which servers need to be patched and where additional security controls need to be added. Th...
- Question #60Security and Compliance
The InfoSec team has asked the SysOps Administrator to perform some hardening on the company Amazon RDS database instances. Based on this requirement, what actions should be recomm...
RDS SecuritySecurity GroupsParameter GroupsDatabase Encryption - Question #61Security and Compliance
A Big Data consulting company wants to separate its customers' workloads for billing and security reasons. The company would like to maintain billing and security controls on these...
AWS OrganizationsMulti-account strategyConsolidated billingWorkload isolation - Question #62Reliability and Business Continuity
An organization stores files on Amazon S3. Employees download the files, edit them with the same file name to the same folder on Amazon S3. Occasionally the files are unintentional...
S3 VersioningData ProtectionData RecoveryObject Storage - Question #63
A company has a web application that runs both on-premises and on Amazon EC2 instances. Over time, both the on-premises servers and EC2 instances begin crashing. A SysOps Administr...
- Question #64
A SysOps Administrator is responsible for the administration of a web application that is hosted on Amazon EC2 instances and is protected by an Application Load Balancer (ALB). The...
- Question #65
A SysOps administrator has created a VPC that contains a public subnet and a private subnet. Amazon EC2 instances that were launched in the private subnet cannot access the interne...
- Question #66
A company has an AWS Site-to-Site VPN connection between on-premises resources and resources that are hosted in a VPC. A SysOps administrator launches an Amazon EC2 instance that h...
- Question #67
A company must ensure that any objects uploaded to an S3 bucket are encrypted. Which of the following actions will meet this requirement? (Choose two.)
- Question #68
A company wants to apply an existing Amazon Route 53 private hosted zone to a new VPC to allow for customized resource name resolution within the VPC. The SysOps administrator crea...
- Question #69Networking and Content Delivery
A SysOps Administrator has an AWS Direct Connect connection in place in region us-east-1, between an AWS account and a data center. The Administrator is now required to connect the...
Direct ConnectDirect Connect GatewayCross-Region ConnectivityHybrid Cloud Networking - Question #70
A new application is being tested for deployment on an Amazon EC2 instance that requires greater IOPS than currently provided by the single 4TB General Purpose SSD (gp2) volume. Wh...
- Question #71
A web service runs on Amazon EC2 instances behind an Elastic Load Balancing (ELB) load balancer. External clients must whitelist specific public IP addresses in their firewalls to...
- Question #72Deployment, Provisioning, and Automation
While creating the wait condition resource in AWS CloudFormation, a SysOps Administrator receives the error "received 0 signals out of the 1 expected from the EC2 instance". What s...
CloudFormationEC2IAM PermissionsTroubleshooting - Question #73
A new website will run on Amazon EC2 instances behind an Application Load Balancer. Amazon Route 53 will be used to manage DNS records. What type of record should be set in Route 5...
- Question #74
A company's SysOps administrator as created an Amazon EC2 instance with custom software that will be used as a template for all new EC2 instances across multiple AWS accounts. The...
- Question #75Security and Compliance
A company plans to run a public web application on Amazon EC2 instances behind an Elastic Load Balancer (ELB). The company's security team wants to protect the website by using AWS...
Application Load BalancerHTTPS RedirectionAWS Certificate ManagerELB Listeners - Question #76Reliability and Business Continuity
A company needs to create a daily Amazon Machine Image (AMI) of an existing Amazon Linux EC2 instance that hosts the operating system, application, and database on multiple attache...
AWS BackupEC2 AMIData IntegrityAutomated Backups - Question #77
A company uses an AWS CloudForm tion template to provision an Amazon EC2 instance and an Amazon RDS DB instance. A SysOps administrator must update the template to ensure that the...
- Question #78
A SysOps administrator is setting up an automated process to recover an Amazon EC2 instance in the event of an underlying hardware failure. The recovered instance must have the sam...
- Question #79
A company uses AWS Organizations to host several applications across multiple AWS accounts. Several teams are responsible for building and maintaining the infrastructure of the app...
- Question #80Networking and Content Delivery
A SysOps administrator needs to design a high-traffic static website. The website must be highly available and must provide the lowest possible latency to users across the globe. W...
Amazon S3Static Website HostingHigh AvailabilityContent Delivery - Question #81
A company is running a serverless application on AWS Lambda. The application stores data in an Amazon RDS for MySQL DB instance. Usage has steadily increased, and recently there ha...
- Question #82
An existing, deployed solution uses Amazon EC2 instances with Amazon EBS General Purpose SSD volumes, am Amazon RDS PostgreSQL database, an Amazon EFS file system, and static objec...
- Question #83Security and Compliance
A SysOps administrator is using IAM credentials to try to upload a file to a customer's Amazon S3 bucket that is named DOC-EXAMPLE-BUCKET. The SysOps administrator is receiving an...
IAM PoliciesS3 Bucket PoliciesAccess ControlAWS S3 - Question #84Monitoring, Logging, and Remediation
An application is running on Amazon EC2 instances behind a Classic Load Balancer. The instances run in an Auto Scaling group across multiple Availability Zones. Occasionally multip...
Classic Load BalancerCloudWatch MetricsAuto ScalingPerformance Tuning - Question #85Security and Compliance
An application running by a SysOps Administrator is under repeated, large-scale distributed denial of service (DDoS) attacks. Each time an attack occurs, multiple customers reach o...
DDoS ProtectionAWS Shield AdvancedApplication SecuritySecurity Operations - Question #86
Malicious traffic is reaching company web servers from a single IP address located in another country. The SysOps Administrator is tasked with blocking this IP address. How should...
- Question #87Monitoring, Logging, and Remediation
A SysOps administrator is maintaining a web application using an Amazon CloudFront web distribution, an Application Load Balancer (ALB), Amazon RDS, and Amazon EC2 in a VPC. All se...
LoggingHTTP status codesCloudFrontALB - Question #88Networking and Content Delivery
A SysOps administrator is deploying a test site running on Amazon EC2 instances. The application requires both incoming and outgoing connectivity to the internet. Which combination...
VPCInternet GatewayRoute TablesEC2 Networking - Question #89
An organization is running multiple applications for their customers. Each application is deployed by running a base AWS CloudFormation templat that configures a new VPC. All appli...
- Question #90
A large company is using AWS Organizations to manage its multi-account AWS environment. According to company policy, all users should have read-level access to a particular Amazon...
- Question #91
A development team recently deployed a new version of a web application to production. After the release, penetration testing revealed a cross-site scripting vulnerability that cou...
- Question #92
A SysOps administrator needs to develop a solution that provides email notification and inserts a record into a database every time a file is put into an Amazon S3 bucket. What is...
- Question #93
A SysOps administrator needs to control access to groups of Amazon EC2 instances using AWS Systems Manager Session Manager. Specific tags on the EC2 instances have already been add...
- Question #94
A SysOps administrator must configure a resilient tier of Amazon EC2 instances for a high performance computing (HPC) application. The HPC application requires minimum latency betw...
- Question #95
A SysOps administrator is unable to launch Amazon EC2 instances into a VPC because there are no available private IPv4 addresses in the VPC. Which combination of actions must the S...
- Question #96
A company needs to upload gigabytes of files every day. The company need to achieve higher throughput and upload speeds to Amazon S3. Which action should a SysOps administrator tak...
- Question #97
A company runs a stateless application that is hosted on an Amazon EC2 instance. Users are reporting performance issues. A SysOps administrator reviews the Amazon CloudWatch metric...
- Question #98
A company hosts a static website on Amazon S3. An Amazon CloudFront distribution presents this site to global users. The company uses the Managed-CachingDisabled CloudFront cache p...
- Question #99
A SysOps administrator wants to provide access to AWS services by attaching an IAM policy to multiple IAM users. The SysOps administrator also wants to be able to change the policy...
- Question #100Security and Compliance
An Amazon S3 Inventory report reveals that more than 1 million objects in an S3 bucket are not encrypted. These objects must be encrypted, and all future objects must be encrypted...
S3 EncryptionServer-Side EncryptionS3 Event NotificationsAWS Lambda - Question #101
A SysOps administrator has Nocked public access to all company Amazon S3 buckets. The SysOps administrator wants to be notified when an S3 bucket becomes publicly readable in the f...