Free Amazon SOA-C02 Exam Questions

Question 1

[Deployment, Provisioning, and Automation]A company's ecommerce application is running on Amazon EC2 instances that are behind anApplication Load Balancer (ALB). The instances are in an Auto Scaling group. Customers report thatthe website is occasionally down. When the website is down, the website returns an HTTP 500(server error) status message to customer browsers.The Auto Scaling group's health check is configured for EC2 status checks, and the instances arehealthy.Which solution will resolve the problem?

A : Replace the ALB with a Network Load Balancer.

B : Add Elastic Load Balancing (ELB) health checks to the Auto Scaling group.

C : Update the target group configuration on the ALB. Enable session affinity (sticky sessions).

D : Install the Amazon CloudWatch agent on all the instances. Configure the agent to reboot theinstances.

Answer: B

Question 2

A company has set up an IPsec tunnel between its AWS environment and its on-premises data center. The tunnel is reporting as UP, but the Amazon EC2 instances are not able to ping any on-premises resources.

What should a SysOps administrator do to resolve this issue?

A : eate a new inbound rule on the EC2 instances’ security groups to allow ICMP traffic from the on-premises CIDR.

B : eate a peering connection between the IPsec tunnel and the subnet of the EC2 instances.

C : able route propagation for the virtual private gateway in the route table that is assigned to the subnet of the EC2 instances.

D : able route propagation for the virtual private gateway in the route table that is assigned to the subnet of the EC2 instances.

Answer: C

Question 3

A company has a workload that runs on several Amazon EC2 instances. The company must retain the workload's system logs and application logs for 13 months. The logs must be available for the entire 13 months. The termination of an EC2 instance must not result in the loss of log information. Which solution will meet these requirements?

A : Create an Amazon S3 bucket Apply a bucket policy to expire objects after 13 months. Schedule a shell script to periodically copy the logs to the S3 bucket Ensure that the attached instance profile has permissions to copy logs to the S3 bucket.

B : Create a log group in Amazon CloudWatch Logs. Specify an Expire Events After value of 13 months. Configure the syslog protocol on the EC2 instances to push the logs to the log group. Ensure that the attached instance profile has permissions to push logs to the log group.

C : Create an Amazon S3 bucket. Apply a bucket policy to expire objects after 13 months. Deploy the unified Amazon CloudWatch agent onto the EC2 instances. Configure the agent to store the logs in the S3 bucket. Ensure that the attached instance profile has permissions to store objects in the S3 bucket,

D : Create a log group in Amazon CloudWatch Logs. Specify an Expire Events After value of 13 months Deploy the unified CloudWatch agent onto the EC2 instances. Configure the agent to push the logs to the log group. Ensure that the attached instance profile has permissions to push logs to the log group.

Answer: D

Question 4

A company has several member accounts that are in an organization in AWS Organizations. The company recently discovered that administrators have been using account root user credentials. The company must prevent the administrators from using root user credentials to perform any actions on Amazon EC2 instances.

What should a SysOps administrator do to meet this requirement?

A : Create an identity-based IAM policy in each member account to deny actions on EC2 instances by the root user.

B : In the organization's management account, create a service control policy (SCP) to deny actions on EC2 instances by the root user in all member accounts.

C : Use AWS Config to prevent any actions on EC2 instances by the root user.

D : Use Amazon Inspector in each member account to scan for root user logins and to prevent any actions on EC2 instances by the root user.

Answer: B

Question 5

A company has an Amazon RDS DB instance. The company wants to implement a caching service while maintaining high availability.
Which combination of actions will meet these requirements? (Choose two.)

A : Auto Discovery to the data store.

B : Create an Amazon ElastiCache for Memcached data store.

C : eate an Amazon ElastiCache for Redis data store.

D : able Multi-AZ for the data store.

E : able Multi-threading for the data store.

Answer: C,D