Free Amazon SOA-C02 Exam Questions

Question 1

A company has a workload that runs on several Amazon EC2 instances. The company must retain the workload's system logs and application logs for 13 months. The logs must be available for the entire 13 months. The termination of an EC2 instance must not result in the loss of log information. Which solution will meet these requirements?

A : Create an Amazon S3 bucket Apply a bucket policy to expire objects after 13 months. Schedule a shell script to periodically copy the logs to the S3 bucket Ensure that the attached instance profile has permissions to copy logs to the S3 bucket.

B : Create a log group in Amazon CloudWatch Logs. Specify an Expire Events After value of 13 months. Configure the syslog protocol on the EC2 instances to push the logs to the log group. Ensure that the attached instance profile has permissions to push logs to the log group.

C : Create an Amazon S3 bucket. Apply a bucket policy to expire objects after 13 months. Deploy the unified Amazon CloudWatch agent onto the EC2 instances. Configure the agent to store the logs in the S3 bucket. Ensure that the attached instance profile has permissions to store objects in the S3 bucket,

D : Create a log group in Amazon CloudWatch Logs. Specify an Expire Events After value of 13 months Deploy the unified CloudWatch agent onto the EC2 instances. Configure the agent to push the logs to the log group. Ensure that the attached instance profile has permissions to push logs to the log group.

Answer: D

Question 2

The company’s ecommerce website running on EC2 instances behind an ALB intermittently returns HTTP 500 errors. The Auto Scaling group is only using EC2 status checks.

A : Replace the ALB with a Network Load Balancer.

B : Add Elastic Load Balancing (ELB) health checks to the Auto Scaling group.

C : Update the target group configuration on the ALB. Enable session affinity (sticky sessions).

D : Install the Amazon CloudWatch agent on all the instances. Configure the agent to reboot the instances.

Answer: B

Question 3

The company’s ecommerce website running on EC2 instances behind an ALB intermittently returns HTTP 500 errors. The Auto Scaling group is only using EC2 status checks.

A : Replace the ALB with a Network Load Balancer.

B : Add Elastic Load Balancing (ELB) health checks to the Auto Scaling group.

C : Update the target group configuration on the ALB. Enable session affinity (sticky sessions).

D : Install the Amazon CloudWatch agent on all the instances. Configure the agent to reboot the instances.

Answer: B

Question 4

A company is building a web application on AWS. The company is using Amazon CloudFront with a domain name of www.example.com. All traffic to CloudFront must be encrypted in transit. The company already has provisioned an SSL certificate for www.example.com in AWS Certificate Manager (ACM).

Which combination of steps should a SysOps administrator take to encrypt the traffic in transit? (Choose two.)

A : r each cache behavior in the CloudFront distribution, modify the Viewer Protocol Policy setting to redirect HTTP to HTTPS

B : r each cache behavior in the CloudFront distribution, modify the Viewer Protocol Policy setting to allow HTTP and HTTPS.

C : ter the alternate domain name (CNAME) of www.example.com for the CloudFront distribution. Select the custom SSL certificate.

D : nfigure an AWS WAF web ACL for the CloudFront distribution.

E : nfigure CloudFront Origin Shield for the CloudFront origin.

Answer: A,C

Question 5

A company needs to deploy a new workload on AWS. The company must encrypt all data at rest and must rotate the encryption keys once each year. The workload uses an Amazon RDS for MySQL Multi-AZ database for data storage.

Which configuration approach will meet these requirements?

A : Enable Transparent Data Encryption (TDE) in the MySQL configuration file. Manually rotate the key every 12 months

B : Enable RDS encryption on the database at creation time by using the AWS managed key for Amazon RDS.

C : Create a new AWS Key Management Service (AWS KMS) customer managed key. Enable automatic key rotation. Enable RDS encryption on the database at creation time by using the KMS key.

D : Create a new AWS Key Management Service (AWS KMS) customer managed key. Enable automatic key rotation. Enable encryption on the Amazon Elastic Block Store (Amazon EBS) volumes that are attached to the RDS DB instance.

Answer: C