SOA-C02 Exam Questions
733 real SOA-C02 exam questions with expert-verified answers and explanations. Page 5 of 15.
- Question #202Reliability and Business Continuity
A company is testing Amazon Elasticsearch Service (Amazon ES) as a solution for analyzing system logs from a fleet of Amazon EC2 instances. During the test phase, the domain operat...
Amazon Elasticsearch ServiceHigh AvailabilityMulti-AZ deploymentDedicated Master Nodes - Question #203Security and Compliance
An organization with a large IT department has decided to migrate to AWS. With different job functions in the IT department, it is not desirable to give all users access to all AWS...
LDAP federationSAMLIAM rolesidentity federation - Question #204Monitoring, Logging, and Remediation
A recent audit found that most resources belonging to the development team were in violation of patch compliance standards. The resources were properly tagged. Which service should...
Systems Managerpatch managementcompliance remediationresource tagging - Question #205Cost and Performance Optimization
A SysOps administrator noticed that a large number of Elastic IP addresses are being created on the company's AWS account, but they are not being associated with Amazon EC2 instanc...
EIP ManagementCost OptimizationResource TaggingIAM Identity - Question #206Cost and Performance Optimization
A SysOps administrator is optimizing the cost of a workload. The workload is running in multiple AWS Regions and is using AWS Lambda with Amazon EC2 On-Demand Instances for the com...
Compute Savings PlansLambda cost optimizationmulti-regionReserved Instances - Question #207Networking and Content Delivery
A SysOps administrator is trying to set up an Amazon Route 53 domain name to route traffic to a the S3 bucket name is anycompany-static. After the record set is set up in Route 53,...
Route 53S3 static website hostingDNS aliasbucket naming - Question #208Reliability and Business Continuity
A SysOps administrator is evaluating Amazon Route 53 DNS options to address concerns about high availability for an on-premises website. The website consists of two servers: a prim...
Route 53 failoverhealth checksactive-passiveDNS routing policy - Question #209Cost and Performance Optimization
A company has an application that runs on a fleet of Amazon EC2 instances behind an Elastic Load Balancer. The instances run in an Auto Scaling group. The application's performance...
Auto Scalingscheduled scalingpredictable trafficELB - Question #210Networking and Content Delivery
A company is supporting a business-critical application that runs on Amazon EC2 instances. The application receives data from a service that runs in an on-premises data center. End...
Direct Connecthybrid connectivitynetwork performanceon-premises integration - Question #211Security and Compliance
A database is running on an Amazon RDS Multi-AZ DB instance. A recent security audit found the database to be out of compliance because it was not encrypted. Which approach will re...
RDS encryptionsnapshot copyMulti-AZencryption at rest - Question #212Reliability and Business Continuity
A company has a web application with a database tier that consists of an Amazon EC2 instance that runs MySQL. A SysOps administrator needs to minimize potential data loss and the t...
RDS Multi-AZMySQLhigh availabilitydata recovery - Question #213Monitoring, Logging, and Remediation
A large company is using AWS Organizations to manage hundreds of AWS accounts across multiple AWS Regions. The company has turned on AWS Config throughout the organization. The com...
AWS Config aggregatorS3 complianceAWS OrganizationsConfig rules - Question #214Networking and Content Delivery
A company has set up an IPsec tunnel between its AWS environment and its on-premises data center. The tunnel is reporting as UP, but the Amazon EC2 instances are not able to ping a...
VPN IPsecsecurity groupsICMPVPC troubleshooting - Question #215Networking and Content Delivery
While setting up an AWS managed VPN connection, a SysOps administrator creates a customer gateway resource in AWS. The customer gateway device resides in a data center with a NAT g...
VPN customer gatewayNAT traversalmanaged VPNIP addressing - Question #216Reliability and Business Continuity
A company recently deployed an application in production. The production environment currently runs on a single Amazon EC2 instance that hosts the application's web application and...
High AvailabilityAmazon RDSMulti-AZDatabase Reliability - Question #217Security and Compliance
A company is using an AWS KMS customer master key (CMK) with imported key material. The company references the CMK by its alias in the Java application to encrypt data. The CMK mus...
KMSkey rotationimported key materialCMK alias - Question #218Deployment, Provisioning, and Automation
A SysOps administrator has successfully deployed a VPC with an AWS CloudFormation template. The SysOps administrator wants to deploy the same template across multiple accounts that...
CloudFormation StackSetsAWS Organizationsmulti-account deploymentIaC - Question #219Cost and Performance Optimization
A company's customers are reporting increased latency while accessing static web content from Amazon S3. A SysOps administrator observed a very high rate of read operations on a pa...
CloudFrontS3 static contentCDNlatency optimization - Question #220Deployment, Provisioning, and Automation
A company's SysOps administrator deploys four new Amazon EC2 instances by using the standard Amazon Linux 2 Amazon Machine Image (AMI). The company needs to be able to use AWS Syst...
Systems ManagerIAM instance profileSSM agentEC2 management - Question #221Security and Compliance
A SysOps administrator uses AWS Systems Manager Session Manager to connect to instances. After the SysOps administrator launches a new Amazon EC2 instance the EC2 instance does not...
AWS Systems ManagerSession ManagerIAM rolesEC2 instance management - Question #222Monitoring, Logging, and Remediation
A company has an organization in AWS Organizations. The company uses shared VPCs to provide networking resources across accounts. A SysOps administrator has been able to successful...
EC2Service QuotasShared VPCAWS Organizations - Question #223Monitoring, Logging, and Remediation
An environment consists of 100 Amazon EC2 Windows instances. The Amazon CloudWatch agent is deployed and running on all EC2 Instances with a baseline configuration file to capture...
CloudWatch AgentLog CollectionConfiguration ManagementEC2 Instances - Question #224Monitoring, Logging, and Remediation
A SysOps administrator is reviewing VPC Flow Logs to troubleshoot connectivity issues in a VPC. While reviewing the togs the SysOps administrator notices that rejected traffic is n...
VPC Flow Logstraffic filteringlogging configurationnetwork monitoring - Question #225Monitoring, Logging, and Remediation
A company uses an Amazon CloudFront distribution to deliver its website. Traffic logs for the website must be centrally stored and all data must be encrypted at rest. Which solutio...
CloudFront access logsS3server-side encryptionlog centralization - Question #226Security and Compliance
An Amazon CloudFront distribution has a single Amazon S3 bucket as its origin. A SysOps administrator must ensure that users can access the S3 bucket only through requests from the...
CloudFront OAIS3 bucket access controlorigin access identitycontent delivery security - Question #227Deployment, Provisioning, and Automation
A company uses an Amazon Simple Queue Service (Amazon SQS) standard queue with its application. The application sends messages to the queue with unique message bodies. The company...
SQS FIFO queuequeue migrationmessage orderingSQS queue types - Question #228Security and Compliance
A database is running on an Amazon RDS Mufti-AZ DB instance. A recent security audit found the database to be out of compliance because it was not encrypted. Which approach will re...
RDS encryptionDatabase securitySnapshot managementCompliance - Question #229Deployment, Provisioning, and Automation
A SysOps administrator is tasked with deploying a company's infrastructure as code. The SysOps administrator want to write a single template that can be reused for multiple environ...
CloudFormation parametersIaC reusabilitymulti-environment templatesstack configuration - Question #230Security and Compliance
A company's web application is available through an Amazon CloudFront distribution and directly through an internet-facing Application Load Balancer (ALB). A SysOps administrator m...
CloudFront custom headerALB access restrictionorigin securitydirect access prevention - Question #231Monitoring, Logging, and Remediation
A company is using Amazon CloudFront to serve static content for its web application to its users. The CloudFront distribution uses an existing on-premises website as a custom orig...
CloudFront 502 errorTLS certificate expirationcustom origin HTTPSdistribution troubleshooting - Question #232Monitoring, Logging, and Remediation
A SysOps administrator is responsible for a large fleet of Amazon EC2 instances and must know whether any instances will be affected by upcoming hardware maintenance. Which option...
Personal Health DashboardEC2 hardware maintenancescheduled instance eventsproactive notifications - Question #233Cost and Performance Optimization
A company wants to reduce costs for jobs that can be completed at any time. The jobs currently run by using multiple Amazon EC2 On-Demand Instances and the jobs take slightly less...
Spot Instances defined durationEC2 cost optimizationbatch job pricingfault-tolerant workloads - Question #234Cost and Performance Optimization
A company is running distributed computing software to manage a fleet of 20 Amazon EC2 instances for calculations. The fleet includes 2 control nodes and 18 task nodes to run the c...
EC2 Savings PlansSpot Instancesmixed pricing modelscompute cost optimization - Question #235Monitoring, Logging, and Remediation
A company is supposed to receive a data file every hour in an Amazon S3 bucket. An S3 event notification invokes an AWS Lambda function each time a file arrives. The function proce...
CloudWatch AlarmsLambda FunctionsMonitoringNotifications - Question #236Cost and Performance Optimization
A company recently acquired another corporation and all of that corporation's AWS accounts. A financial analyst needs the cost data from these accounts. A SysOps administrator uses...
Tag Editorresource taggingcost allocation tagsuntagged resource discovery - Question #237Monitoring, Logging, and Remediation
A company has a web application that is experiencing performance problems many times each night. A root cause analysis reveals sudden increases in CPU utilization that last 5 minut...
CloudWatch agentprocstat pluginCPU process metricsperformance monitoring - Question #238Reliability and Business Continuity
A SysOps administrator configured AWS Backup to capture snapshots from a single Amazon EC2 instance that has one Amazon Elastic Block Store (Amazon EBS) volume attached. On the fir...
EBS incremental snapshotssnapshot storage calculationAWS Backupdata protection - Question #239Cost and Performance Optimization
A team is managing an AWS account that is a member of an organization in AWS Organizations. The organization has consolidated billing features enabled. The account hosts several ap...
cost allocation tagsAWS Organizations management accountconsolidated billingtag activation - Question #240Networking and Content Delivery
A company hosts a static website on Amazon S3. The website is served by an Amazon CloudFront distribution with a default TTL of 86,400 seconds. The company recently uploaded an upd...
CloudFront invalidationcache TTLS3 static websitecontent refresh - Question #241Deployment, Provisioning, and Automation
A SysOps administrator is responsible for managing a company's cloud infrastructure with AWS CloudFormation. The SysOps administrator needs to create a single resource that consist...
CloudFormation custom resourcecustom resource typeIaC extensibilitymulti-service provisioning - Question #242Security and Compliance
A company is implementing security and compliance by using AWS Trusted Advisor. The company's SysOps team is validating the list of Trusted Advisor checks that it can access. Which...
AWS Trusted AdvisorAWS Support PlansSecurity ChecksCompliance - Question #243Deployment, Provisioning, and Automation
A SysOps administrator is using AWS CloudFormation StackSets to create AWS resources in two AWS Regions in the same AWS account. A stack operation fails in one Region and returns t...
CloudFormation StackSetsOUTDATED stack statusglobal resource uniquenessmulti-region deployment - Question #244Deployment, Provisioning, and Automation
A SysOps administrator must configure Amazon S3 to host a simple nonproduction webpage. The SysOps administrator has created an empty S3 bucket from the AWS Management Console. The...
S3 static website hostingBlock Public Accessbucket policyindex document - Question #245Monitoring, Logging, and Remediation
A user working in the Amazon EC2 console increased the size of an Amazon Elastic Block Store (Amazon EBS) volume attached to an Amazon EC2 Windows instance. The change is not refle...
EBS volume resizeWindows file system extensiondisk managementstorage expansion - Question #246Security and Compliance
A SysOps administrator is using Amazon EC2 instances to host an application. The SysOps administrator needs to grant permissions for the application to access an Amazon DynamoDB ta...
IAM roleEC2 instance profileDynamoDB accessleast privilege - Question #247Reliability and Business Continuity
A SysOps administrator wants to protect objects in an Amazon S3 bucket from accidental overwrite and deletion. Noncurrent objects must be kept for 90 days and then must be permanen...
S3 versioninglifecycle policynoncurrent object retentionaccidental deletion protection - Question #248Cost and Performance Optimization
A company has an application that customers use to search for records on a website. The application's data is stored in an Amazon Aurora DB cluster. The application's usage varies...
Aurora Replicaread scalingDB performance optimizationpeak load handling - Question #249Security and Compliance
A company uses AWS Organizations to manage multiple AWS accounts. Corporate policy mandates that only specific AWS Regions can be used to store and process customer data. A SysOps...
AWS OrganizationsService Control Policies (SCPs)Region restrictionResource governance - Question #250Monitoring, Logging, and Remediation
A company has a private Amazon S3 bucket that contains sensitive information. A SysOps administrator needs to keep logs of the IP addresses from authentication failures that result...
S3 access loggingS3 Object LockCloudTrailaudit logs - Question #251Networking and Content Delivery
A SysOps administrator migrates NAT instances to NAT gateways. After the migration, an application that is hosted on Amazon EC2 instances in a private subnet cannot access the inte...
NAT gatewayprotocol supportVPC connectivityprivate subnet