SOA-C02 Exam Questions
733 real SOA-C02 exam questions with expert-verified answers and explanations. Page 6 of 15.
- Question #252Networking and Content Delivery
A company runs an application on an Amazon EC2 instance. A SysOps administrator creates an Auto Scaling group and an Application Load Balancer (ALB) to handle an increase in demand...
ALB health checklistener configurationAuto ScalingEC2 - Question #254Cost and Performance Optimization
A company has migrated its application to AWS. The company will host the application on Amazon EC2 instances of multiple instance families. During initial testing, a SysOps adminis...
Compute OptimizerEC2 right-sizinginstance familiesperformance tuning - Question #255Deployment, Provisioning, and Automation
A SysOps administrator is attempting to deploy resources by using an AWS CloudFormation template. An Amazon EC2 instance that is defined in the template fails to launch and produce...
CloudFormationInsufficientInstanceCapacityAvailability Zoneinstance type - Question #256Reliability and Business Continuity
A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The company uses Amazon Route 53 to route traffic. The company also has a stati...
Route 53 failover routingS3 static websitedisaster recoveryDNS - Question #257Monitoring, Logging, and Remediation
A data analytics application is running on an Amazon EC2 instance. A SysOps administrator must add custom dimensions to the metrics collected by the Amazon CloudWatch agent. How ca...
CloudWatch agentcustom dimensionsappend_dimensionsmetrics configuration - Question #258Security and Compliance
A company stores its data in an Amazon S3 bucket. The company is required to classify the data and find any sensitive personal information in its S3 files. Which solution will meet...
Amazon MaciePII detectionS3 data classificationmanaged data identifier - Question #259Networking and Content Delivery
A SysOps administrator is investigating why a user has been unable to use RDP to connect over the internet from their home computer to a bastion server running on an Amazon EC2 Win...
RDPnetwork ACLroute tableinternet gateway - Question #260Deployment, Provisioning, and Automation
A SysOps administrator is examining the following AWS CloudFormation template: Why will the stack creation fail?
CloudFormationPrivateDnsNametemplate validationEC2 attributes - Question #261Security and Compliance
A compliance team requires all administrator passwords for Amazon RDS DB instances to be changed at least annually. Which solution meets this requirement in the MOST operationally...
Secrets Managercredential rotationRDScompliance - Question #262Networking and Content Delivery
A SysOps administrator is responsible for managing a fleet of Amazon EC2 instances. These EC2 instances upload build artifacts to a third-party service. The third-party service rec...
NAT gatewayegress IPEC2 fleetIP allow list - Question #263Cost and Performance Optimization
A company has a stateful, long-running workload on a single xlarge general purpose Amazon EC2 On-Demand Instance Metrics show that the service is always using 80% of its available...
EC2 right-sizingmemory optimizedinstance type selectioncost reduction - Question #264Security and Compliance
On an Amazon EC2 instance, an application is running that makes use of Amazon Simple Queue Service (Amazon SQS) queues. A SysOps administrator must guarantee that an application is...
IAM RolesEC2 SecurityLeast PrivilegeAWS Access Control - Question #265Networking and Content Delivery
A new website will be hosted on Amazon EC2 instances that will be routed via an Application Load Balancer. DNS records will be managed through Amazon Route 53. Which Route 53 recor...
Route 53ALIAS recordapex domainALB - Question #266Monitoring, Logging, and Remediation
A SysOps administrator is responsible for the administration of an online application that utilizes an Amazon CloudFront web distribution, an Application Load Balancer (ALB), Amazo...
ALB access logsCloudFront access logsHTTP status codesLayer 7 logging - Question #267Security and Compliance
A SysOps administrator is designing a solution for an Amazon RDS for PostgreSQL DB instance. Database credentials must be stored and rotated monthly. The applications that connect...
Secrets Managercredential rotationRDS Proxyconnection pooling - Question #268Cost and Performance Optimization
An ecommerce company uses an Amazon ElastiCache for Memcached cluster for in-memory caching of popular product queries on the shopping site. When viewing recent Amazon CloudWatch m...
ElastiCache Memcachedcache evictionsnode scalingmemory capacity - Question #269Deployment, Provisioning, and Automation
A company is deploying a third-party unit testing solution that is delivered as an Amazon EC2 Amazon Machine Image (AMI). All system configuration data is stored in Amazon DynamoDB...
Auto Scalinglaunch templateSpot instancesmixed instances policy - Question #270Monitoring, Logging, and Remediation
A company stores sensitive data in an Amazon S3 bucket. The company must log all access attempts to the S3 bucket. The company's risk team must receive immediate notification about...
S3 access loggingS3 event notificationsdelete eventsSNS alerts - Question #271Security and Compliance
A company wants to create an automated solution for all accounts managed by AWS Organizations to detect any security groups that use 0.0.0.0/0 as the source address for inbound tra...
AWS Configsecurity group remediationAWS OrganizationsCIDR compliance - Question #272Cost and Performance Optimization
A company runs workloads on 90 Amazon EC2 instances in the eu-west-1 Region in an AWS account. In 2 months, the company will migrate the workloads from eu-west-1 to the eu-west-3 R...
Savings PlansReserved InstancesEC2 cost optimizationcross-region flexibility - Question #273Security and Compliance
A company wants to archive sensitive data on Amazon S3 Glacier. The company's regulatory and compliance requirements do not allow any modifications to the data by any account. Whic...
S3 Glaciervault lock policyWORM compliancedata immutability - Question #274Networking and Content Delivery
A global company handles a large amount of personally identifiable information (Pll) through an internal web portal. The company's application runs in a corporate data center that...
VPC endpointDirect ConnectS3 private accesscompliance networking - Question #275Reliability and Business Continuity
A SysOps administrator recently configured Amazon S3 Cross-Region Replication on an S3 bucket. Which of the following does this feature replicate to the destination S3 bucket by de...
S3 Cross-Region Replicationobject metadatareplication defaultsversioning - Question #276Deployment, Provisioning, and Automation
A company must migrate its applications to AWS. The company is using Chef recipes for configuration management. The company wants to continue to use the existing Chef recipes after...
AWS OpsWorksChef configuration managementmigrationstack layers - Question #277Networking and Content Delivery
An application is running on an Amazon EC2 instance in a VPC with the default DHCP option set. The application connects to an on-premises Microsoft SQL Server database with the DNS...
Route 53 Resolveroutbound endpointon-premises DNShybrid networking - Question #278Deployment, Provisioning, and Automation
A SysOps administrator is creating an Amazon EC2 Auto Scaling group in a new AWS account. After adding some instances, the SysOps administrator notices that the group has not reach...
Service QuotasEC2 Auto ScalingInstance Launch FailureTroubleshooting - Question #279Security and Compliance
A company needs to view a list of security groups that are open to the internet on port 3389. What should a SysOps administrator do to meet this requirement?
AWS Trusted AdvisorSecurity GroupsNetwork SecuritySecurity Auditing - Question #280Reliability and Business Continuity
A company uses AWS Organizations to manage its AWS accounts. A SysOps administrator must create a backup strategy for all Amazon EC2 instances across all the company's AWS accounts...
AWS BackupOrganizationsmulti-accountEC2 backup policies - Question #281Networking and Content Delivery
A company uploaded its website files to an Amazon S3 bucket that has S3 Versioning enabled. The company uses an Amazon CloudFront distribution with the S3 bucket as the origin. The...
CloudFront invalidationcache evictionS3 origincontent delivery - Question #282Deployment, Provisioning, and Automation
A company uses AWS Organizations to manage multiple AWS accounts. The company's SysOps team has been using a manual process to create and manage IAM roles. The team requires an aut...
CloudFormation StackSetsOrganizationsIAM role automationmulti-account - Question #283Reliability and Business Continuity
A company's SysOps administrator attempts to restore an Amazon Elastic Block Store (Amazon EBS) snapshot. However, the snapshot is missing because another system administrator acci...
EBS snapshotsRecycle Binsnapshot recoveryretention rules - Question #284Monitoring, Logging, and Remediation
A company is using Amazon Elastic Container Service (Amazon ECS) to run a containerized application on Amazon EC2 instances. A SysOps administrator needs to monitor only traffic fl...
VPC Flow LogsECS networkingawsvpc modetask-level monitoring - Question #285Networking and Content Delivery
A company runs a website from Sydney, Australia. Users in the United States (US) and Europe are reporting that images and videos are taking a time to load. However, local testing i...
CloudFrontContent DeliveryStatic ContentLatency - Question #286Deployment, Provisioning, and Automation
A SysOps administrator is using AWS Systems Manager Patch Manager to patch a fleet of Amazon EC2 instances. The SysOps administrator has configured a patch baseline and a maintenan...
Systems Manager Patch ManagerIAM instance profileSSM agentEC2 access - Question #287Reliability and Business Continuity
A company is expanding globally and needs to back up data on Amazon Elastic Block Store (Amazon EBS) volumes to a different AWS Region. Most of the EBS volumes that store the data...
EBS snapshotsData Lifecycle Managercross-region backupencryption - Question #288Cost and Performance Optimization
A company has an initiative to reduce costs associated with Amazon EC2 and AWS Lambda. Which action should a SysOps administrator take to meet these requirements?
Cost OptimizationAWS Compute OptimizerEC2AWS Lambda - Question #289Security and Compliance
A company uses AWS Organizations. A SysOps administrator wants to use AWS Compute Optimizer and AWS tag policies in the management account to govern all member accounts in the bill...
AWS Organizationstag policiesCompute Optimizertrusted access - Question #290Networking and Content Delivery
A company runs an application on an Amazon EC2 instance A SysOps administrator creates an Auto Scaling group and an Application Load Balancer (ALB) to handle an increase in demand....
ALB Health ChecksAuto Scaling GroupsTroubleshootingApplication Connectivity - Question #291Security and Compliance
A team of on-call engineers frequently needs to connect to Amazon EC2 instances in a private subnet to troubleshoot and run commands. The instances use either the latest AWS-provid...
Systems Manager Session ManagerIAM permissionsprivate subnet accessssm:StartSession - Question #292Cost and Performance Optimization
A SysOps administrator is reviewing AWS Trusted Advisor recommendations. The SysOps administrator notices that all the application servers for a finance application are listed in t...
Trusted AdvisorrightsizingEC2 cost optimizationCost Explorer - Question #293Security and Compliance
A company is undergoing an external audit of its systems, which run wholly on AWS. A SysOps administrator must supply documentation of Payment Card Industry Data Security Standard...
AWS ArtifactPCI DSScompliance reportsaudit documentation - Question #294Cost and Performance Optimization
A company wants to collect data from an application to use for analytics. For the first 90 days, the data will be infrequently accessed but must remain highly available. During thi...
S3 storage classesS3 lifecycleS3 Standard-IAS3 Glacier - Question #295Reliability and Business Continuity
A company hosts several write-intensive applications. These applications use a MySQL database that runs on a single Amazon EC2 instance. The company asks a SysOps administrator to...
Aurora multi-masterhigh availabilityMySQL migrationmulti-tenant workloads - Question #296Deployment, Provisioning, and Automation
A SysOps administrator created an AWS Cloud Formation template that provisions Amazon EC2 instances, an Elastic Load Balancer (ELB), and an Amazon RDS DB instance. During stack cre...
CloudFormation rollbackstack creation failuredefault rollback behaviorstack lifecycle - Question #297Security and Compliance
A company needs to deploy a new workload on AWS. The company must encrypt all data at rest and must rotate the encryption keys once each year. The workload uses an Amazon RDS for M...
AWS RDSAWS KMSData EncryptionKey Rotation - Question #298Deployment, Provisioning, and Automation
A SysOps administrator needs to automate the invocation of an AWS Lambda function. The Lambda function must run at the end of each day to generate a report on data that is stored i...
EventBridge scheduled rulesLambda invocationevent-driven automationS3 reporting - Question #299Security and Compliance
A company's SysOps administrator needs to change the AWS Support plan for one of the company's AWS accounts. The account has multi-factor authentication (MFA) activated, and the MF...
MFA recoveryroot user accessaccount sign-inAWS Support plan - Question #301Deployment, Provisioning, and Automation
A SysOps administrator wants to manage a web server application with AWS Elastic Beanstalk. The Elastic Beanstalk service must maintain full capacity for new deployments at all tim...
Elastic Beanstalkdeployment policiesimmutable deploymentrolling with additional batch - Question #302Monitoring, Logging, and Remediation
A company has a policy that requires all Amazon EC2 instances to have a specific set of tags. If an EC2 instance does not have the required tags, the noncompliant instance should b...
AWS Config rulesEC2 taggingauto-remediationcompliance enforcement - Question #303Deployment, Provisioning, and Automation
A SysOps administrator wants to upload a file that is 1 TB in size from on-premises to an Amazon S3 bucket using multipart uploads. What should the SysOps administrator do to meet...
S3 multipart uploadAWS CLI s3 cplarge file transferS3 operations