Amazon SOA-C02 Question Answers

Question # 131

A SysOps administrator wants to upload a file that is 1 TB in size from on-premises to an Amazon S3 bucket using multipart uploads. What should the SysOps administrator do to meet this requirement? 

A. Upload the file using the S3 console. 
B. Use the s3api copy-object command. 
C. Use the s3api put-object command. 
D. Use the s3 cp command. 

Show / Hide Answer

---

Question # 132

A company is planning to host its stateful web-based applications on AWS A SysOps administrator is using an Auto Scaling group of Amazon EC2 instances The web applications will run 24 hours a day 7 days a week throughout the year The company must be able to change the instance type within the same instance family later in the year based on the traffic and usage patterns Which EC2 instance purchasing option will meet these requirements MOST costeffectively?

A. Convertible Reserved Instances 
B. On-Demand instances 
C. Spot instances 
D. Standard Reserved instances

Show / Hide Answer

---

Question # 133

A global company handles a large amount of personally identifiable information (Pll) through an internal web portal. The company's application runs in a corporate data center that is connected to AWS through an AWS Direct Connect connection. The application stores the Pll in Amazon S3. According to a compliance requirement, traffic from the web portal to Amazon S3 must not travel across the internet. What should a SysOps administrator do to meet the compliance requirement?

A. Provision an interface VPC endpoint for Amazon S3. Modify the application to use the interface  endpoint. B Configure AWS Network Firewall to redirect traffic to the internal S3 address. 
B. Modify the application to use the S3 path-style endpoint.
C. Set up a range of VPC network ACLs to redirect traffic to the Internal S3 address. 

Show / Hide Answer

---

Question # 134

A company needs to view a list of security groups that are open to the internet on port 3389. What should a SysOps administrator do to meet this requirement? 

A. Configure Amazon GuardDuly to scan security groups and report unrestricted access on port 3389. 
B. Configure a service control policy (SCP) to identify security groups that allow unrestricted access on port 3389 
C. Use AWS Identity and Access Management Access Analyzer to find any instances that have unrestricted access on port 3389. 
D. Use AWS Trusted Advisor to find security groups that allow unrestricted access on port 3389. 

Show / Hide Answer

---

Question # 135

A company is undergoing an external audit of its systems, which run wholly on AWS. A SysOps administrator must supply documentation of Payment Card Industry Data Security Standard (PCI DSS) compliance for the infrastructure managed by AWS. Which set of action should the SysOps administrator take to meet this requirement?

 A. Download the applicable reports from the AWS Artifact portal and supply these to the auditors. 
B. Download complete copies of the AWS CloudTrail log files and supply these to the auditors. 
C. Download complete copies of the AWS CloudWatch logs and supply these to the auditors. 
D. Provide the auditors with administrative access to the production AWS account so that the auditors can determine compliance.

Show / Hide Answer

---

Question # 136

A company is rolling out a new version of its website. Management wants to deploy the new website in a limited rollout to 20% of the company's customers. The company uses Amazon Route 53 for its website's DNS solution. Which configuration will meet these requirements? 

A. Create a failover routing policy. Within the policy, configure 80% of the website traffic to be sent to the original resource. Configure the remaining 20% of traffic as the failover record that points to the new resource. 
B. Create a multivalue answer routing policy. Within the policy, create 4 records with the name and IP address of the original resource. Configure 1 record with the name and IP address of the new resource. 
C. Create a latency-based routing policy. Within the policy, configure a record pointing to the original resource with a weight of 80. Configure a record pointing to the new resource with a weight of 20. 
D. Create a weighted routing policy. Within the policy, configure a weight of 80 for the record pointing to the original resource. Configure a weight of 20 for the record pointing to the new resource. 

Show / Hide Answer

---

Question # 137

A company uses an Amazon Simple Queue Service (Amazon SQS) standard queue with its application. The application sends messages to the queue with unique message bodies The company decides to switch to an SQS FIFO queue What must the company do to migrate to an SQS FIFO queue? 

A. Create a new SQS FIFO gueue Turn on content based deduplication on the new FIFO queue Update the application to include a message group ID in the messages 
B. Create a new SQS FIFO queue Update the application to include the DelaySeconds parameter in the messages
 C. Modify the queue type from SQS standard to SQS FIFO Turn off content-based deduplication on the queue Update the application to include a message group ID in the messages 
D. Modify the queue type from SQS standard to SQS FIFO Update the application to send messages with identical message bodies and to include the DelaySeconds parameter in the messages 

Show / Hide Answer

---

Question # 138

A company plans to run a public web application on Amazon EC2 instances behind an Elastic Load Balancer (ELB). The company's security team wants to protect the website by using AWS Certificate Manager (ACM) certificates The ELB must automatically redirect any HTTP requests to HTTPS Which solution will meet these requirements?

A. Create an Application Load Balancer that has one HTTPS listener on port 80 Attach an SSLTLS certificate to listener port 80 Create a rule to redirect requests from HTTP to HTTPS 
B. Create an Application Load Balancer that has one HTTP listener on port 80 and one HTTPS protocol listener on port 443 Attach an SSL TLS certificate to listener port 443 Create a rule to redirect requests from port 80 to port 443 
C. Create an Application Load Balancer that has two TCP listeners on port 80 and port 443 Attach an SSLTLS certificate to listener port 443 Create a rule to redirect requests from port 80 to port 443 
D. Create a Network Load Balancer that has two TCP listeners on port 80 and port 443 Attach an SSLTLS certificate to listener port 443 Create a rule to redirect requests from port 80 to port 443 

Show / Hide Answer

---

Question # 139

A company hosts a web portal on Amazon EC2 instances. The web portal uses an Elastic Load Balancer (ELB) and Amazon Route 53 for its public DNS service. The ELB and the EC2 instances are deployed by way of a single AWS CloudFormation stack in the us-east1 Region. The web portal must be highly available across multiple Regions. Which configuration will meet these requirements? 

A. Deploy a copy of the stack in the us-west-2 Region. Create a single start of authority (SOA) record in Route 53 that includes the IP address from each ELB. Configure the SOA record with health checks. Use the ELB in us-east-1 as the primary record and the ELB in us-west-2 as the secondary record. 
B. Deploy a copy of the stack in the us-west-2 Region. Create an additional A record in Route 53 that includes the ELB in us-west-2 as an alias target. Configure the A records with a failover routing policy and health checks. Use the ELB in us-east-1 as the primary record and the ELB in us-west-2 as the secondary record. 
C. Deploy a new group of EC2 instances in the us-west-2 Region. Associate the new EC2 instances with the existing ELB, and configure load balancer health checks on all EC2 instances. Configure the ELB to update Route 53 when EC2 instances in us-west-2 fail health checks. 
D. Deploy a new group of EC2 instances in the us-west-2 Region. Configure EC2 health checks on all EC2 instances in each Region. Configure a peering connection between the VPCs. Use the VPC in us-east-1 as the primary record and the VPC in us-west-2 as the secondary record. 

Show / Hide Answer

---

Question # 140

A user working in the Amazon EC2 console increased the size of an Amazon Elastic Block Store (Amazon EBS) volume attached to an Amazon EC2 Windows instance. The change is not reflected in the file system. What should a SysOps administrator do to resolve this issue?

 A. Extend the file system with operating system-level tools to use the new storage capacity. 
B. Reattach the EBS volume to the EC2 instance. 
C. Reboot the EC2 instance that is attached to the EBS volume. 
D. Take a snapshot of the EBS volume. Replace the original volume with a volume that is created from the snapshot. 

Show / Hide Answer

---

<123456789101112131415161718>

---

Download All 556 Questions Check Customers Feedbacks