• Home
  • Articles
  • [2023] New SOA-C02 exam Free Sample Questions to Practice [Q140-Q162]

[2023] New SOA-C02 exam Free Sample Questions to Practice [Q140-Q162]

Share

[2023] New SOA-C02 exam Free Sample Questions to Practice

Cover Real SOA-C02 Exam Questions Make Sure You 100% Pass


The SOA-C02 certification exam is an essential step for individuals who want to advance their careers in AWS SysOps administration. AWS Certified SysOps Administrator - Associate (SOA-C02) certification demonstrates the candidate's ability to effectively manage and operate systems on the AWS platform, which is an increasingly critical skill in today's cloud computing landscape. Moreover, the certification provides a competitive edge to the candidate in the job market and opens up new career opportunities.

 

NEW QUESTION # 140
A SysOps administrator has created an AWS Service Catalog portfolio and has shared the portfolio with a second AWS account in the company. The second account is controlled by a different administrator.
Which action will the administrator of the second account be able to perform?

  • A. Change the launch role for the products contained in the imported portfolio.
  • B. Customize the products in the imported portfolio.
  • C. Add a product from the imported portfolio to a local portfolio.
  • D. Add new products to the imported portfolio.

Answer: C


NEW QUESTION # 141
A company stores files on 50 Amazon S3 buckets in the same AWS Region The company wants to connect to the S3 buckets securely over a private connection from its Amazon EC2 instances The company needs a solution that produces no additional cost Which solution will meet these requirements?

  • A. Create an interface VPC endpoint (or each S3 bucket Attach the interface VPC endpoints to each subnet inside the VPC
  • B. Create one gateway VPC endpoint for all the S3 buckets Add the gateway VPC endpoint to the VPC route table
  • C. Create one interface VPC endpoint for all the S3 buckets Add the interface VPC endpoint to the VPC route table
  • D. Create a gateway VPC endpoint lor each S3 bucket Attach the gateway VPC endpoints to each subnet inside the VPC

Answer: B


NEW QUESTION # 142
A company uses AWS CloudFormation templates to deploy cloud infrastructure. An analysis of all the company's templates shows that the company has declared the same components in multiple templates. A SysOps administrator needs to create dedicated templates that have their own parameters and conditions for these common components.
Which solution will meet this requirement?

  • A. Develop a CloudFormation change set.
  • B. Develop CloudFormation stack sets.
  • C. Develop CloudFormation nested stacks.
  • D. Develop CloudFormation macros.

Answer: C

Explanation:
As your infrastructure grows, common patterns can emerge in which you declare the same components in multiple templates. You can separate out these common components and create dedicated templates for them. Then use the resource in your template to reference other templates, creating nested stacks.


NEW QUESTION # 143
A SysOps administrator is tasked with analyzing database performance. The database runs on a single Amazon RDS DB instance. The SysOps administrator finds that, during times of peak traffic, resources on the database are overutilized due to the amount of read traffic.
Which actions should the SysOps administrator take to improve RDS performance? (Choose two.)

  • A. Upgrade the database to a Multi-AZ deployment.
  • B. Modify the application to use Amazon ElastiCache for Memcached.
  • C. Migrate the database to Amazon EC2 with enhanced networking enabled
  • D. Migrate the database from RDS to Amazon DynamoDB.
  • E. Add a read replica.

Answer: B,E

Explanation:
Migrating to DynamoDB or to an EC2 are clearly irrelevant. Creating a Multi-AZ RDS instance will not improve performance either. A read replica and/or a caching layer in front of the DB will reduce the traffic on the server.


NEW QUESTION # 144
A company plans to launch a static website on its domain example com and subdomain www example.com using Amazon S3. How should the SysOps administrator meet this requirement?

  • A. Create one S3 bucket named example.com for both the domain and subdomain.
  • B. Create two S3 buckets named http//example.com and http//" exampte.com. Configure the wildcard (') bucket to redirect requests to the domain bucket.
  • C. Create two S3 buckets named example.com and www.exdmpte.com. Configure the subdomain bucket to redirect requests to the domain bucket.
  • D. Create one S3 bucket with a wildcard named '.example.com tor both the domain and subdomain.

Answer: C


NEW QUESTION # 145
A SysOps administrator must configure a resilient tier of Amazon EC2 instances for a high performance computing (HPC) application.
The HPC application requires minimum latency between nodes.
Which actions should the SysOps administrator take to meet these requirements? (Choose two.)

  • A. Launch the EC2 instances into a partition placement group.
  • B. Place the EC2 instances in an Auto Scaling group within a single subnet.
  • C. Launch the EC2 instances into a cluster placement group.
  • D. Create a Multi-AZ Network Load Balancer in front of the EC2 instances.
  • E. Create an Amazon Elastic File System (Amazon EPS) file system.
    Mount the file system to the EC2 instances by using user data.

Answer: B,C

Explanation:
Cluster - packs instances close together inside an Availability Zone. This strategy enables workloads to achieve the low-latency network performance necessary for tightly-coupled node-to- node communication that is typical of high-performance computing (HPC) applications.
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/placement-groups.html


NEW QUESTION # 146
A company has a stateful web application that is hosted on Amazon EC2 instances in an Auto Scaling group. The instances run behind an Application Load Balancer (ALB) that has a single target group. The ALB is configured as the origin in an Amazon CloudFront distribution. Users are reporting random logouts from the web application.
Which combination of actions should a SysOps administrator take to resolve this problem? (Select TWO.)

  • A. Configure header forwarding in the CloudFront distribution cache behavior.
  • B. Enable sticky sessions on the ALB target group.
  • C. Configure cookie forwarding in the CloudFront distribution cache behavior.
  • D. Change to the least outstanding requests algorithm on the ALB target group.
  • E. Enable group-level stickiness on the ALB listener rule.

Answer: B,C


NEW QUESTION # 147
A company needs to take an inventory of applications that are running on multiple Amazon EC2 instances. The company has configured users and roles with the appropriate permissions for AWS Systems Manager. An updated version of Systems Manager Agent has been installed and is running on every instance. While configuring an inventory collection, a SysOps administrator discovers that not all the instances in a single subnet are managed by Systems Manager.
What must the SysOps administrator do to fix this issue?

  • A. Ensure that all the EC2 instances have the correct tags for Systems Manager access.
  • B. Configure AWS Identity and Access Management Access Analyzer to determine and automatically remediate the issue.
  • C. Configure Systems Manager to use an interface VPC endpoint.
  • D. Ensure that all the EC2 instances have an instance profile with Systems Manager access.

Answer: D


NEW QUESTION # 148
An ecommerce company uses an Amazon ElastiCache for Memcached cluster for in-memory caching of popular product queries on the shopping site. When viewing recent Amazon CloudWatch metrics data for the ElastiCache cluster, the SysOps administrator notices a large number of evictions.
Which of the following actions will reduce these evictions? (Choose two.)

  • A. Use Amazon Simple Queue Service (Amazon SQS) to decouple the ElastiCache cluster.
  • B. Put an Elastic Load Balancer in front of the ElastiCache cluster.
  • C. Add an additional node to the ElastiCache cluster.
  • D. Increase the ElastiCache time to live (TTL).
  • E. Increase the individual node size inside the ElastiCache cluster.

Answer: C,E

Explanation:
Scale Out and or Scale Up.
https://d1.awsstatic.com/training-and-certification/docs-sysops-associate/AWS-Certified-SysOps- Administrator-Associate_Sample-Questions_C02.pdf


NEW QUESTION # 149
A company runs a web application on three Amazon EC2 instances behind an Application Load Balancer (ALB). The company notices that random periods of increased traffic cause a degradation in the application's performance. A SysOps administrator must scale the application to meet the increased traffic.
Which solution meets these requirements?

  • A. Create an Amazon CloudWatch alarm to monitor application latency and increase the size of each EC2 instance If the desired threshold is reached.
  • B. Deploy the application to an Auto Scaling group of EC2 instances with a target tracking scaling policy. Attach the ALB to the Auto Scaling group.
  • C. Deploy the application to an Auto Scaling group of EC2 instances with a scheduled scaling policy. Attach the ALB to the Auto Scaling group.
  • D. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to monitor application latency and add an EC2 instance to the ALB if the desired threshold is reached.

Answer: B

Explanation:
docs.aws.amazon.com/autoscaling/ec2/userguide/as-scaling-target-tracking.html


NEW QUESTION # 150
A company has a VPC with public and private subnets. An Amazon EC2 based application resides in the private subnets and needs to process raw .csv files stored in an Amazon S3 bucket. A SysOps administrator has set up the correct IAM role with the required permissions for the application to access the S3 bucket, but the application is unable to communicate with the S3 bucket.
Which action will solve this problem while adhering to least privilege access?

  • A. Add a bucket policy to the S3 bucket permitting access from the IAM role.
  • B. Configure the route table to allow the instances on the private subnet access through the internet gateway.
  • C. Attach an S3 gateway endpoint to the VPC. Configure the route table for the private subnet.
  • D. Create a NAT gateway in a private subnet and configure the route table for the private subnets.

Answer: C

Explanation:
Reference:
Technology to use is a VPC endpoint - "A VPC endpoint enables private connections between your VPC and supported AWS services and VPC endpoint services powered by AWS PrivateLink. AWS PrivateLink is a technology that enables you to privately access services by using private IP addresses. Traffic between your VPC and the other service does not leave the Amazon network." S3 is an example of a gateway endpoint. We want to see services in AWS while not leaving the VPC.


NEW QUESTION # 151
A SysOps administrator is notified that an Amazon EC2 instance has stopped responding.
The AWS Management Console indicates that the system checks are failing.
What should the administrator do first to resolve this issue?

  • A. Reboot the EC2 instance so it can be launched on a new host.
  • B. Stop and then start the EC2 instance so that it can be launched on a new host.
  • C. Terminate the EC2 instance and relaunch it.
  • D. View the AWS CloudTrail log to investigate what changed on the EC2 instance.

Answer: B

Explanation:
system status check -- stop and restart
instance status check -- reboot
https://acloud.guru/forums/aws-certified-sysops-administrator-associate/discussion/- K9I3MvysRcTvbNJHKLj/status_checks


NEW QUESTION # 152
A company wants to be alerted through email when IAM CreateUser API calls are made within its AWS account.
Which combination of actions should a SysOps administrator take to meet this requirement? (Choose two.)

  • A. Use an Amazon Simple Notification Service (Amazon SNS) topic as an event target with an email subscription.
  • B. Create an Amazon EventBridge (Amazon CloudWatch Events) rule with AWS CloudTrail as the event source and IAM CreateUser as the specific API call for the event pattern.
  • C. Create an Amazon EventBridge (Amazon CloudWatch Events) rule with AWS IAM Access Analyzer as the event source and IAM CreateUser as the specific API call for the event pattern.
  • D. Use an Amazon Simple Email Service (Amazon SES) notification as an event target with an email subscription.
  • E. Create an Amazon EventBridge (Amazon CloudWatch Events) rule with Amazon CloudSearch as the event source and IAM CreateUser as the specific API call for the event pattern.

Answer: A,B

Explanation:
Reference:
https://aws.amazon.com/blogs/security/how-to-receive-alerts-when-your-iam-configuration-changes/


NEW QUESTION # 153
A company is using Amazon Elastic File System (Amazon EFS) to share a file system among several Amazon EC2 instances. As usage increases, users report that file retrieval from the EFS file system is slower than normal.
Which actions should a SysOps administrator take to improve the performance of the file system?

  • A. Configure the file system for Provisioned Throughput.
  • B. Enable encryption in transit on the file system.
  • C. Identify any unused files in the file system, and remove the unused files.
  • D. Resize the Amazon Elastic Block Store (Amazon EBS) volume of each of the EC2 instances.

Answer: A

Explanation:
https://docs.aws.amazon.com/efs/latest/ug/performance.html


NEW QUESTION # 154
A company hosts a database on an Amazon RDS Multi-AZ DB instance. The database is not encrypted. The company's new security policy requires all AWS resources to be encrypted at rest and in transit.
What should a SysOps administrator do to encrypt the database?

  • A. Encrypt the standby replica in a secondary Availability Zone. Promote the standby replica to the primary DB instance.
  • B. Configure encryption on the existing DB instance.
  • C. Take a snapshot of the DB instance. Copy and encrypt the snapshot. Create a new DB instance by restoring the encrypted copy.
  • D. Take a snapshot of the DB instance. Encrypt the snapshot. Restore the snapshot to the same DB instance.

Answer: D


NEW QUESTION # 155
A SysOps administrator configured AWS Backup to capture snapshots from a single Amazon EC2 instance that has one Amazon Elastic Block Store (Amazon EBS) volume attached. On the first snapshot, the EBS volume has 10 GiB of data. On the second snapshot, the EBS volume still contains 10 GiB of data, but 4 GiB have changed. On the third snapshot, 2 GiB of data have been added to the volume, for a total of 12 GiB.
How much total storage is required to store these snapshots?

  • A. 16 GiB
  • B. 12 GiB
  • C. 26 GiB
  • D. 32 GiB

Answer: A

Explanation:
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSSnapshots.html#how_snapshots_ work


NEW QUESTION # 156
An environment consists of 100 Amazon EC2 Windows instances The Amazon CloudWatch agent Is deployed and running on at EC2 instances with a baseline configuration file to capture log files There is a new requirement to capture the DHCP tog tiles that exist on 50 of the instances What is the MOST operational efficient way to meet this new requirement?

  • A. Run the CloudWatch agent configuration file wizard on each EC2 instance and select the advanced detail level. This wifi capture the operating system log files.
  • B. Create an additional CloudWatch agent configuration file to capture the DHCP logs Use the AWS Systems Manager Run Command to restart the CloudWatch agent on each EC2 instance with the append-config option to apply the additional configuration file
  • C. Log in to each EC2 instance with administrator rights Create a PowerShell script to push the needed baseline log files and DHCP log files to CloudWatch
  • D. Run the CloudWatch agent configuration file wizard on each EC2 instance Verify that the base the log files are included and add the DHCP tog files during the wizard creation process

Answer: B


NEW QUESTION # 157
A company is storing backups in an Amazon S3 bucket. The backups must not be deleted for at least 3 months after the backups are created.
What should a SysOps administrator do to meet this requirement?

  • A. Enable S3 Versioning on the existing S3 bucket. Configure S3 Lifecycle rules to protect the backups.
  • B. Enable S3 Object Lock on a new S3 bucket in governance mode. Place all backups in the new S3 bucket with a retention period of 3 months.
  • C. Enable S3 Object Lock on a new S3 bucket in compliance mode. Place all backups in the new S3 bucket with a retention period of 3 months.
  • D. Configure an IAM policy that denies the s3:DeleteObject action for all users. Three months after an object is written, remove the policy.

Answer: B

Explanation:
To meet the requirements of the workload, a SysOps administrator should enable S3 Object Lock on a new S3 bucket in governance mode and place all backups in the new S3 bucket with a retention period of 3 months. This will ensure that the backups are not deleted for at least 3 months after they are created. The other solutions (configuring an IAM policy that denies the s3:DeleteObject action for all users, enabling S3 Object Lock on a new S3 bucket in compliance mode, or enabling S3 Versioning on the existing S3 bucket and configuring S3 Lifecycle rules to protect the backups) will not meet the requirements, as they do not provide a way to ensure that the backups are not deleted for at least 3 months after they are created.


NEW QUESTION # 158
A company has mandated the use of multi-factor authentication (MFA) for all IAM users, and requires users to make all API calls using the CLI. However. users are not prompted to enter MFA tokens, and are able to run CLI commands without MFA. In an attempt to enforce MFA, the company attached an IAM policy to all users that denies API calls that have not been authenticated with MFA.
What additional step must be taken to ensure that API calls are authenticated using MFA?

  • A. Require users to use temporary credentials from the get-session token command to sign API calls.
  • B. Enable MFA on IAM roles, and require IAM users to use role credentials to sign API calls.
  • C. Restrict the IAM users to use of the console, as MFA is not supported for CLI use.
  • D. Ask the IAM users to log into the AWS Management Console with MFA before making API calls using the CLI.

Answer: A

Explanation:
The most appropriate step to ensure that API calls are authenticated using MFA is to require users to use temporary credentials from the get-session token command to sign API calls. This is because the get-session token command returns temporary security credentials consisting of an access key ID, a secret access key, and a session token that are valid only for a limited period of time. These credentials can be used to make API calls with MFA authentication.
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_configure-api- require.html


NEW QUESTION # 159
A SysOps administrator is evaluating Amazon Route 53 DNS options to address concerns about high availability for an on-premises website. The website consists of two servers: a primary active server and a secondary passive server. Route 53 should route traffic to the primary server if the associated health check returns 2xx or 3xx HTTP codes. All other traffic should be directed to the secondary passive server. The failover record type, set ID, and routing policy have been set appropriately for both primary and secondary servers.
Which next step should be taken to configure Route 53?

  • A. Create an alias record for each server with evaluate target health set to yes. Associate the records with the Route 53 TCP health check.
  • B. Create an A record for each server. Associate the records with the Route 53 TCP health check.
  • C. Create an alias record for each server with evaluate target health set to yes. Associate the records with the Route 53 HTTP health check.
  • D. Create an A record for each server. Associate the records with the Route 53 HTTP health check.

Answer: C

Explanation:
"Evaluate health of an AWS resource (alias records)"
"If you're using alias records to route traffic to selected AWS resources, such as ELB load balancers, you can configure Route 53 to evaluate the health of the resource and to route traffic only to resources that are healthy."
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-failover-simple-configs.html


NEW QUESTION # 160
A SysOps administrator uses AWS Systems Manager Session Manager to connect to instances.
After the SysOps administrator launches a new Amazon EC2 instance the EC2 instance does not appear in the Session Manager list of systems that are available for connection. The SysOps administrator verities that Systems Manager Agent is installed updated and running on the EC2 instance. What is the reason for this issue?

  • A. The SysOps administrator has not attached a security group to the EC2 instance to allow SSH on port 22.
  • B. The EC2 instance ID has not been entered into the Session Manager configuration
  • C. The SysOps administrator does not have access to the key pair that is required for connection
  • D. The EC2 instance does not have an attached IAM role that allows Session Manager to connect to the EC2 instance.

Answer: D


NEW QUESTION # 161
A company has a stateful web application that is hosted on Amazon EC2 instances in an Auto Scaling group. The instances run behind an Application Load Balancer (ALB) that has a single target group. The ALB is configured as the origin in an Amazon CloudFront distribution. Users are reporting random logouts from the web application.
Which combination of actions should a SysOps administrator take to resolve this problem?
(Choose two.)

  • A. Configure header forwarding in the CloudFront distribution cache behavior.
  • B. Enable sticky sessions on the ALB target group.
  • C. Configure cookie forwarding in the CloudFront distribution cache behavior.
  • D. Change to the least outstanding requests algorithm on the ALB target group.
  • E. Enable group-level stickiness on the ALB listener rule.

Answer: B,C

Explanation:
Application Load Balancers support both duration-based cookies and application-based cookies.
The key to managing sticky sessions is determining how long your load balancer should consistently route the user's request to the same target. Sticky sessions are enabled at the target group level. You can use a combination of duration-based stickiness, application-based stickiness, and no stickiness across all of your target groups.
https://docs.aws.amazon.com/elasticloadbalancing/latest/application/sticky-sessions.html


NEW QUESTION # 162
......

Real SOA-C02 Quesions Pass Certification Exams Easily: https://www.verifieddumps.com/SOA-C02-valid-exam-braindumps.html

SOA-C02 dumps Accurate Questions and Answers with Free: https://drive.google.com/open?id=1BTWGhzgsIcwpIVXb03p-eop90ASmEEMD

Related Articles

more
Amazon SOA-C02 Certification Practice Exam