SOA-C02 Exam Questions
733 real SOA-C02 exam questions with expert-verified answers and explanations. Page 7 of 15.
- Question #304Monitoring, Logging, and Remediation
A SysOps administrator is responsible for a company's security groups. The company wants to maintain a documented trail of any changes that are made to the security groups. The Sys...
AWS Configsecurity group changeschange trackingSNS notifications - Question #305Networking and Content Delivery
A SysOps administrator created an Amazon VPC with an IPv6 CIDR block, which requires access to the internet. However, access from the internet towards the VPC is prohibited. After...
IPv6 routingegress-only internet gatewayVPC route tablesoutbound-only access - Question #306Networking and Content Delivery
A company is rolling out a new version of its website. Management wants to deploy the new website in a limited rollout to 20% of the company's customers. The company uses Amazon Ro...
Route 53 weighted routinglimited rollouttraffic splittingDNS policy - Question #307Security and Compliance
A company needs to view a list of security groups that are open to the internet on port 3389. What should a SysOps administrator do to meet this requirement?
AWS Trusted AdvisorSecurity GroupsSecurity Best PracticesPort Scanning - Question #308Networking and Content Delivery
A company has a simple web application that runs on a set of Amazon EC2 instances behind an Elastic Load Balancer in the eu-west-2 Region. Amazon Route 53 holds a DNS record for th...
Route 53Multi-Region DeploymentLatency Routing PolicyElastic Load Balancing - Question #309Deployment, Provisioning, and Automation
A company is managing many accounts by using a single organization in AWS Organizations. The organization has all features enabled. The company wants to turn on AWS Config in all t...
CloudFormation StackSetsAWS OrganizationsAWS Config multi-accountmulti-region deployment - Question #310Security and Compliance
A company updates its security policy to prohibit the public exposure of any data in Amazon S3 buckets in the company's account. What should a SysOps administrator do to meet this...
S3 Block Public Accessdata exposure preventionS3 ACLsaccount-level security - Question #311Security and Compliance
A SysOps administrator needs to secure the credentials for an Amazon RDS database that is created by an AWS CloudFormation template. The solution must encrypt the credentials and m...
CloudFormationSecrets ManagementSSM Parameter StoreEncryption - Question #312Networking and Content Delivery
A company has two VPC networks named VPC A and VPC B. The VPC A CIDR block is 10.0.0.0/16 and the VPC B CIDR block is 172.31.0.0/16. The company wants to establish a VPC peering co...
VPC peeringroute tablesCIDR block routingpcx target - Question #313Monitoring, Logging, and Remediation
A company has a public website that recently experienced problems. Some links led to missing webpages, and other links rendered incorrect webpages. The application infrastructure w...
CloudWatch Syntheticscanary monitoringproactive website monitoringsynthetic testing - Question #314Security and Compliance
A company hosts a database on an Amazon RDS Multi-AZ DB instance. The database is not encrypted. The company's new security policy requires all AWS resources to be encrypted at res...
RDS encryption at restsnapshot copyMulti-AZencryption migration - Question #315Deployment, Provisioning, and Automation
A company uses an Amazon S3 bucket to store data files. The S3 bucket contains hundreds of objects. The company needs to replace a tag on all the objects in the S3 bucket with anot...
S3 Batch Operationsbulk taggingS3 object managementoperational efficiency - Question #316Monitoring, Logging, and Remediation
A company runs several workloads on AWS. The company identifies five AWS Trusted Advisor service quota metrics to monitor in a specific AWS Region. The company wants to receive ema...
CloudWatch alarmsTrusted Advisorservice quota monitoringSNS email notifications - Question #317Cost and Performance Optimization
A company runs its entire suite of applications on Amazon EC2 instances. The company plans to move the applications to containers and AWS Fargate. Within 6 months, the company plan...
Cost OptimizationSavings PlansAWS FargateEC2 - Question #318Security and Compliance
A company creates a new member account by using AWS Organizations. A SysOps administrator needs to add AWS Business Support to the new account. Which combination of steps must the...
AWS Support plansAWS Organizations member accountroot user credentialsaccount management - Question #319Security and Compliance
A company needs to automatically monitor an AWS account for potential unauthorized AWS Management Console logins from multiple geographic locations. Which solution will meet this r...
Amazon GuardDutythreat detectionunauthorized console logingeographic anomaly - Question #320Networking and Content Delivery
Application A runs on Amazon EC2 instances behind a Network Load Balancer (NLB). The EC2 instances are in an Auto Scaling group and are in the same subnet that is associated with t...
network ACLNLB flow logsoutbound traffic rulesVPC troubleshooting - Question #321Networking and Content Delivery
A company's SysOps administrator deploys a public Network Load Balancer (NLB) in front of the company's web application. The web application does not use any Elastic IP addresses....
Route 53DNSNetwork Load BalancerAlias Records - Question #322Security and Compliance
A company is creating a new multi-account architecture. A Sysops administrator must implement a login solution to centrally manage user access and permissions across all AWS accoun...
AWS SSOSAML 2.0 federationmulti-account accessAWS Organizations integration - Question #323Networking and Content Delivery
A company wants to use only IPv6 for all its Amazon EC2 instances. The EC2 instances must not be accessible from the internet, but the EC2 instances must be able to access the inte...
IPv6-only instancesegress-only internet gatewaydual-stack VPCoutbound internet access - Question #324Cost and Performance Optimization
A company wants to track its AWS costs in all member accounts that are part of an organization in AWS Organizations. Managers of the member accounts want to receive a notification...
billing alarmsAWS OrganizationsCloudWatch billingpayer account - Question #325Deployment, Provisioning, and Automation
A SysOps administrator creates an AWS CloudFormation template to define an application stack that can be deployed in multiple AWS Regions. The SysOps administrator also creates an...
CloudFormationCloudWatch dashboardAWS::CloudWatch::Dashboardinfrastructure as code - Question #326Networking and Content Delivery
A company's application is hosted by an internet provider at app.example.com. The company manages with Amazon Route 53. Which Route 53 record should be created to address this?
Route 53CNAME recordDNSexternal hostname - Question #327Cost and Performance Optimization
A company plans to migrate several of its high performance computing (MPC) virtual machines (VMs) to Amazon EC2 instances on AWS. A SysOps administrator must identify a placement g...
placement groupscluster placement groupHPCnetwork throughput - Question #328Networking and Content Delivery
A company's VPC has connectivity to an on-premises data center through an AWS Site-to-Site VPN. The company needs Amazon EC2 instances in the VPC to send DNS queries for example co...
Route 53 Resolveroutbound endpointDNS forwardingSite-to-Site VPN - Question #329Reliability and Business Continuity
A software company runs a workload on Amazon EC2 instances behind an Application Load Balancer (ALB). A SysOps administrator needs to define a custom health check for the EC2 insta...
ALBEC2 Health ChecksLoad BalancingOperational Efficiency - Question #330Cost and Performance Optimization
A SysOps administrator is tasked with analyzing database performance. The database runs on a single Amazon RDS DB instance. The SysOps administrator finds that, during times of pea...
RDS read replicaElastiCacheread scalingdatabase performance - Question #331Monitoring, Logging, and Remediation
A company recently its server infrastructure to Amazon EC2 instances. The company wants to use Amazon CloudWatch metrics to track instance memory utilization and available disk spa...
CloudWatch agentmemory metricsdisk space metricsEC2 monitoring - Question #332Networking and Content Delivery
A SysOps administrator configures an Amazon S3 gateway endpoint in a VPC. The private subnets inside the VPC do not nave outbound internet access. A user logs in to an Amazon EC2 i...
S3 gateway endpointVPC route tableprivate subnetS3 access - Question #333Cost and Performance Optimization
A company applies user-defined tags to resources that are associated with the company's AWS workloads. Twenty days after applying the tags, the company notices that it cannot use r...
cost allocation tagstag activationCost Explorerbilling visibility - Question #334Deployment, Provisioning, and Automation
A company's SysOps administrator must ensure that all Amazon EC2 Windows instances that are launched in an AWS account have a third-party agent installed. The third-party agent has...
Systems Manager DistributorState Manager associationsoftware deploymentWindows agents - Question #335Networking and Content Delivery
A global gaming company is preparing to launch a new game on AWS. The game runs in multiple AWS Regions on a fleet of Amazon EC2 instances. The instances are in an Auto Scaling gro...
Route 53 geoproximity routinghealth checksmulti-region failoverALB - Question #336Networking and Content Delivery
A SysOps administrator is configuring an application on Amazon EC2 instances for a company. Teams in other countries will use the application over the internet. The company require...
Static IP AddressNetwork Load BalancerEC2Public Endpoint - Question #337Security and Compliance
A SysOps administrator trust manage the security of An AWS account Recently an IAM users access key was mistakenly uploaded to a public code repository. The SysOps administrator mu...
CloudTrailcompromised access keysecurity investigationIAM audit - Question #338Security and Compliance
A company maintains a large set of sensitive data in an Amazon S3 bucket. The company's security team asks a SyeOps administrator to help verify that all current objects in the S3...
S3 Inventoryencryption verificationS3 securitydata compliance - Question #339Cost and Performance Optimization
A company has a high-performance Windows workload. The workload requires a storage volume that provides consistent performance of 10,000 IOPS. The company does not want to pay for...
EBS gp3provisioned IOPSstorage performancecost optimization - Question #340Networking and Content Delivery
A company has an application that is running on Amazon EC2 instances in a VPC. The application needs access to download software updates from the internet. The VPC has public subne...
NAT gatewayprivate subnetinternet accessVPC routing - Question #341Deployment, Provisioning, and Automation
A SysOps administrator must ensure that a company's Amazon EC2 instances auto scale as expected. The SysOps administrator configures an Amazon EC2 Auto Scaling lifecycle hook to se...
Auto Scaling lifecycle hookEventBridgeLambda resource policypermissions - Question #342Cost and Performance Optimization
A company with multiple AWS accounts needs to obtain recommendations for AWS Lambda functions and identify optimal resource configurations for each Lambda function. How should a Sy...
Compute OptimizerLambda recommendationsresource rightsizingmulti-account - Question #343Deployment, Provisioning, and Automation
A SysOps administrator needs to delete an AWS CloudFormation stack that is no longer in use. The CloudFormation stack is in the DELETE_FAILED state. The SysOps administrator has va...
CloudFormation DELETE_FAILEDstack deletionS3 non-empty bucketsecurity group dependency - Question #344Monitoring, Logging, and Remediation
A company stores critical data in Amazon S3 buckets. A SysOps administrator must build a solution to record all S3 API activity. Which action will meet this requirement?
CloudTrailS3 data eventsAPI activity loggingaudit trail - Question #345Networking and Content Delivery
A company expanded its web application to serve a worldwide audience. A SysOps administrator has implemented a multi-Region AWS deployment for all production infrastructure. The Sy...
Route 53geoproximity routingmulti-regionlocation-based routing - Question #346Monitoring, Logging, and Remediation
A web application runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances run in an Auto Scaling group across multiple Availability Zones. A SysOps ad...
Health ChecksAuto Scaling Group (ASG)Application Load Balancer (ALB)EC2 Status Checks - Question #347Deployment, Provisioning, and Automation
A SysOps administrator is testing an application mat is hosted on five Amazon EC2 instances. The instances run in an Auto Scaling group behind an Application Load Balancer (ALB) Hi...
Auto Scalingsuspend processestroubleshootingEC2 - Question #348Cost and Performance Optimization
A company uses Amazon S3 to aggregate raw video footage from various media teams across the US. The company recently expanded into new geographies in Europe and Australia. The tech...
S3 Transfer Accelerationmultipart uploadcross-region transfercost optimization - Question #349Cost and Performance Optimization
A company needs to ensure strict adherence to a budget for 25 applications deployed on AWS. Separate teams are responsible for storage, compute, and database costs. A SysOps admini...
AWS Budgetscost allocation tagsbudget alertscost filtering - Question #351Networking and Content Delivery
A SysOps administrator configuring AWS Client VPN to connect use's on a corporate network to AWS resources mat are running in a VPC According to compliance requirements, only traff...
Client VPNsplit-tunnelVPN routingnetwork traffic - Question #352Deployment, Provisioning, and Automation
Lab Simulation 1 If your AWS Management Console browser does not show that you are logged in to an AWS account, close the browser and relaunch the console by using the AWS Manageme...
EventBridge rulesevent archiveSNS topicLambda integration - Question #353Reliability and Business Continuity
Lab Simulation 2 A webpage is stored in an Amazon S3 bucket behind an Application Load Balancer (ALB). Configure the SS bucket to serve a static error page in the event of a failur...
Route 53 failoverS3 static websiteALB health checkDNS routing policy - Question #354Deployment, Provisioning, and Automation
Lab Simulation 3 You want to update an existing AWS CloudFormation stack. If needed, a copy of the CloudFormation template is available in an Amazon SB bucket named cloudformation-...
CloudFormationStack UpdateEC2 Instance ConfigurationIAM Instance Profiles