Amazon SOA-C02 Question Answers

Question # 61

A company hosts a database on an Amazon RDS Multi-AZ DB instance. The database is not encrypted. The company's new security policy requires all AWS resources to be encrypted at rest and in transit. What should a SysOps administrator do to encrypt the database? 

A. Configure encryption on the existing DB instance. 
B. Take a snapshot of the DB instance. Encrypt the snapshot. Restore the snapshot to the same DB instance. 
C. Encrypt the standby replica in a secondary Availability Zone. Promote the standby replica to the primary DB instance. 
D. Take a snapshot of the DB instance. Copy and encrypt the snapshot. Create a new DB instance by restoring the encrypted copy. 

Show / Hide Answer

---

Question # 62

A company has an initiative to reduce costs associated with Amazon EC2 and AWS Lambda. Which action should a SysOps administrator take to meet these requirements? 

A. Analyze the AWS Cost and Usage Report by using Amazon Athena to identity cost savings. 
B. Create an AWS Budgets alert to alarm when account spend reaches 80% of the budget. 
C. Purchase Reserved Instances through the Amazon EC2 console. 
D. Use AWS Compute Optimizer and take action on the provided recommendations. 

Show / Hide Answer

---

Question # 63

A SysOps administrator configures an Amazon S3 gateway endpoint in a VPC. The private subnets inside the VPC do not nave outbound internet access. A user logs in to an Amazon EC2 instance in one of the private subnets and cannot upload a file to an Amazon S3 bucket in the same AWS Region Which solution will solve this problem? 

A. Update the EC2 instance role policy to allow s3:PutObjed access to the target S3 bucket. 
B. Update the EC2 security group to allow outbound traffic to 0.0.0.070 for port 80.
C. Update the EC2 subnet route table to include the S3 prefix tot destination routes to the S3 gateway endpoint. 
D. Update the S3 bucket policy to allow s3 PurObject access from the private subnet OOR block. 

Show / Hide Answer

---

Question # 64

A company runs an application on an Amazon EC2 instance A SysOps administrator creates an Auto Scaling group and an Application Load Balancer (ALB) to handle an increase in demand However, the EC2 instances are failing tie health check. What should the SysOps administrator do to troubleshoot this issue? 

A. Verity that the Auto Scaling group is configured to use all AWS Regions.
 B. Verily that the application is running on the protocol and the port that the listens is expecting. 
C. Verify the listener priority in the ALB Change the priority if necessary. 
D. Verify the maximum number of instances in the Auto Scaling group Change the number if necessary 

Show / Hide Answer

---

Question # 65

A company is running an application on premises and wants to use AWS for data backup All of the data must be available locally The backup application can write only to blockbased storage that is compatible with the Portable Operating System Interface (POSIX) Which backup solution will meet these requirements?

A. Configure the backup software to use Amazon S3 as the target for the data backups 
B. Configure the backup software to use Amazon S3 Glacier as the target for the data backups 
C. Use AWS Storage Gateway, and configure it to use gateway-cached volumes 
D. Use AWS Storage Gateway, and configure it to use gateway-stored volumes 

Show / Hide Answer

---

Question # 66

A company applies user-defined tags to resources that are associated with me company's AWS workloads Twenty days after applying the tags, the company notices that it cannot use re tags to filter views in the AWS Cost Explorer console. What is the reason for this issue? 

A. It lakes at least 30 days to be able to use tags to filter views in Cost Explorer. 
B. The company has not activated the user-defined tags for cost allocation. 
C. The company has not created an AWS Cost and Usage Report 
D. The company has not created a usage budget in AWS Budgets

Show / Hide Answer

---

Question # 67

A SysOps administrator creates an AWS CloudFormation template to define an application stack that can be deployed in multiple AWS Regions. The SysOps administrator also creates an Amazon CloudWatch dashboard by using the AWS Management Console. Each deployment of the application requires its own CloudWatch dashboard. How can the SysOps administrator automate the creation of the CloudWatch dashboard each time the application is deployed?

A. Create a script by using the AWS CLI to run the aws cloudformation put-dashboard command with the name of the dashboard. Run the command each time a new CloudFormation stack is created.
 B. Export the existing CloudWatch dashboard as JSON. Update the CloudFormation template to define an AWS::CloudWatch::Dashboard resource. Include the exported JSON in the resource's DashboardBody property. 
C. Update the CloudFormation template to define an resource. Use the intrinsic Ref function to reference the ID of the existing CloudWatch dashboard. 
D. Update the CloudFormation template to define an AWS::CloudWatch::Dashboard resource. Specify the name of the existing dashboard in the DashboardName property. 

Show / Hide Answer

---

Question # 68

A SysOps administrator trust manage the security of An AWS account Recently an IAM users access key was mistakenly uploaded to a public code repository. The SysOps administrator must identity anything that was changed by using this access key. 

A. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to send all IAM events lo an AWS Lambda function for analysis 
B. Query Amazon EC2 togs by using Amazon CloudWatch Logs Insights for all events Heated with the compromised access key within the suspected timeframe 
C. Search AWS CloudTrail event history tor all events initiated with the compromised access key within the suspected timeframe 
D. Search VPC Flow Logs foe all events initiated with the compromised access key within the suspected Timeframe. 

Show / Hide Answer

---

Question # 69

A company wants to track its AWS costs in all member accounts that are part of an organization in AWS Organizations. Managers of the member accounts want to receive a notification when the estimated costs exceed a predetermined amount each month. The managers are unable to configure a billing alarm. The IAM permissions for all users are correct. What could be the cause of this issue? 

A. The management/payer account does not have billing alerts turned on. 
B. The company has not configured AWS Resource Access Manager (AWS RAM) to share billing information between the member accounts and the management/payer account. 
C. Amazon GuardDuty is turned on for all the accounts. 
D. The company has not configured an AWS Config rule to monitor billing. 

Show / Hide Answer

---

Question # 70

A SysOos administrator s tasked with analyzing database performance. The database runs on a single Amazon RDS D6 instance. The SysOps administrator finds that, during times of peak traffic, resources on the database are over utilized due to the amount of read traffic. Which actions should the SysOps administrator take to improve RDS performance? (Select TWO.) 

A. Add a read replica. 
B. Modify the application to use Amazon ElastiCache for Memcached. 
C. Migrate the database from RDS to Amazon DynamoDB. 
D. Migrate the database to Amazon EC2 with enhanced networking enabled 
E. Upgrade the database to a Multi-AZ deployment. 

Show / Hide Answer

---

<123456789101112131415161718>

---

Download All 556 Questions Check Customers Feedbacks