Free Amazon SOA-C02 Exam Questions

Question 1

The company’s security team needs to consolidate Security Hub findings to reduce duplicate notifications for the same misconfigurations.

A : Turn on consolidated control findings in the Security Hub delegated administrator account.

B : Export the Security Hub findings. Consolidate the findings based on control ID. Visualize the findings in Amazon QuickSight.

C : Set up an AWS Config aggregator instead of Security Hub. Deploy a custom conformance pack by consolidating AWS Config rules.

D : Launch an Amazon EC2 instance in the organization's management account. Configure a custom script to assume a role in each linked account to extract and consolidate findings from the accounts.

Answer: A

Question 2

A company deploys a new application on three Amazon EC2 instances across three Availability Zones The company uses a Network Load Balancer (NLB) to route traffic lo the EC2 instances. A SysOps administrator must implement a solution so that the EC2 instances allow traffic from only the NLB. What should the SysOps administrator do to meet these requirements with the LEAST operational overhead?

A : Configure the security group that is associated with the EC2 instances to allow traffic from only the security group that is associated with the NLB.

B : Configure the security group that is associated with the EC2 instances to allow traffic from only the elastic network interfaces that are associated with the NLB.

C : Create a network ACL. Associate the network ACL with the application subnets. Configure the network ACL to allow inbound traffic from only the CIDR ranges of the NLB.

D : Use a third-party firewall solution that is installed on a separate EC2 instance. Configure a firewall rule that allows traffic to the application's EC2 instances from only the subnets where the NLB is deployed

Answer: A

Question 3

The company’s security team needs to consolidate Security Hub findings to reduce duplicate notifications for the same misconfigurations.

A : Turn on consolidated control findings in the Security Hub delegated administrator account.

B : Export the Security Hub findings. Consolidate the findings based on control ID. Visualize the findings in Amazon QuickSight.

C : Set up an AWS Config aggregator instead of Security Hub. Deploy a custom conformance pack by consolidating AWS Config rules.

D : Launch an Amazon EC2 instance in the organization's management account. Configure a custom script to assume a role in each linked account to extract and consolidate findings from the accounts.

Answer: A

Question 4

A SysOps administrator must create a solution that immediately notifies software developers if an AWS Lambda function experiences an error.
Which solution will meet this requirement?

A : eate an Amazon Simple Notification Service (Amazon SNS) topic with an email subscription for each developer. Create an Amazon CloudWatch alarm by using the Errors metric and the Lambda function name as a dimension. Configure the alarm to send a notification to the SNS topic when the alarm state reaches ALARM.

B : Create an Amazon Simple Notification Service (Amazon SNS) topic with a mobile subscription for each developer. Create an Amazon EventBridge (Amazon CloudWatch Events) alarm by using LambdaError as the event pattern and the SNS topic name as a resource. Configure the alarm to send a notification to the SNS topic when the alarm state reaches ALARM.

C : rify each developer email address in Amazon Simple Email Service (Amazon SES). Create an Amazon CloudWatch rule by using the LambdaError metric and developer email addresses as dimensions. Configure the rule to send an email through Amazon SES when the rule state reaches ALARM.

D : rify each developer mobile phone in Amazon Simple Email Service {Amazon SES). Create an Amazon EventBridge (Amazon CloudWatch Events) rule by using Errors as the event pattern and the Lambda function name as a resource. Configure the rule to send a push notification through Amazon SES when the rule state reaches ALARM.

Answer: A

Question 5

The company’s ecommerce website running on EC2 instances behind an ALB intermittently returns HTTP 500 errors. The Auto Scaling group is only using EC2 status checks.

A : Replace the ALB with a Network Load Balancer.

B : Add Elastic Load Balancing (ELB) health checks to the Auto Scaling group.

C : Update the target group configuration on the ALB. Enable session affinity (sticky sessions).

D : Install the Amazon CloudWatch agent on all the instances. Configure the agent to reboot the instances.

Answer: B