Free Amazon SOA-C02 Exam Questions

Question 1

A company has multiple AWS Site-to-Site VPN connections between a VPC and its branch offices. The company manages an Amazon Elasticsearch Service (Amazon ES) domain that is configured with public access. The Amazon ES domain has an open domain access policy. A SysOps administrator needs to ensure that Amazon ES can be accessed only from the branch offices while preserving existing data.
Which solution will meet these requirements?

A : nfigure an identity-based access policy on Amazon ES. Add an allow statement to the policy that includes the Amazon Resource Name (ARN) for each branch office VPN connection.

B : nfigure an IP-based domain access policy on Amazon ES. Add an allow statement to the policy that includes the private IP CIDR blocks from each branch office network.

C : ploy a new Amazon ES domain in private subnets in a VPC, and import a snapshot from the old domain. Create a security group that allows inbound traffic from the branch office CIDR blocks.

D : configure the Amazon ES domain in private subnets in a VPC. Create a security group that allows inbound traffic from the branch office CIDR blocks.

Answer: B

Question 2

A development team recently deployed a new version of a web application to production. After the release, penetration testing revealed a cross-site scripting vulnerability that could expose user data.
Which AWS service will mitigate this issue?

A : AWS Shield Standard

B : AWS WAF

C : Elastic Load Balancing

D : Amazon Cognito

Answer: B

Question 3

A company needs to implement a managed file system to host Windows file shares for users on premises.Resources in the AWS Cloud also need access to the data on these file shares. A SysOps administrator needs to present the user file shares on premises and make the user file shares available on AWS with minimum latency. What should the SysOps administrator do to meet these requirements?

A : t up an Amazon S3 File Gateway.

B : t up an AWS Direct Connect connection.

C : AWS DataSync to automate data transfers between the existing file servers and AWS.

D : t up an Amazon FSx File Gateway.

Answer: D

Question 4

A company is using AWS to deploy a critical application on a fleet of Amazon EC2 instances Thecompany is rewriting the application because the application failed a security review The applicationwill take 12 months to rewrite While this rewrite happens, the company needs to rotate IAM accesskeys that the application uses.A SysOps administrator must implement an automated solution that finds and rotates IAM access Keys that are at least 30 days old. The solution must then continue to rotate the IAM access Keysevery 30 days.Which solution will meet this requirement with the MOST operational efficiency?

A : Use an AWS Config rule to identify IAM access Keys that are at least 30 days old. Configure AWSConfig to invoKe an AWS Systems Manager Automation runbook to rotate the identified IAM accesskeys.

B : Use AWS Trusted Advisor to identify IAM access Keys that are at least 30 days old. ConfigureTrusted Advisor to invoke an AWS Systems Manager Automation runbook to rotate the identifiedIAM access keys

C : Create a script that checks the age of IAM access Keys and rotates them if they are at least 30 daysold. Launch an EC2 instance. Schedule the script to run as a cron expression on the EC2 instanceevery day.

D : Create an AWS Lambda function that checks the age of IAM access keys and rotates them if theyare at least 30 days old Use an Amazon EventBridge rule to invoke the Lambda function every time anew IAM access key is created.

Answer: D

Question 5

A company has an internal web application that runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto Scaling group in a single Availability Zone. A SysOps administrator must make the application highly available.
Which action should the SysOps administrator take to meet this requirement?

A : crease the maximum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.

B : crease the minimum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.

C : date the Auto Scaling group to launch new instances in a second Availability Zone in the same AWS Region.

D : date the Auto Scaling group to launch new instances in an Availability Zone in a second AWS Region.

Answer: C