Amazon AWS Certified SysOps Administrator - Associate (SOA-C02) - SOA-C02 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Users of a company's internal web application recently experienced application performance issues for a brief period. The application includes frontend web servers that run in an Amazon Elastic Kubernetes Service (Amazon EKS) cluster. The application also includes a backend Amazon Aurora PostgreSQL DB cluster that includes one DB instance.
A SysOps administrator determines that the source of the performance issues was high utilization of the DB cluster. The single writer instance experienced more than 90% utilization for 11 minutes. The cause of the high utilization was an automated report that is scheduled to run one time each week.
What should the SysOps administrator do to ensure that users do not experience performance issues each week when the report runs?

A. Add another writer instance. Change the database connection string of the report application to use the newly created writer instance. B. Increase the size of the DB instance. Monitor the performance during the next scheduled run of the report. C. Add a reader instance. Change the database connection string of the report application to use the newly created reader instance. D. Configure auto scaling for the DB cluster. Set the minimum capacity units, maximum capacity units, and target utilization.

Discussion 0

Correct Answer: B Vote an answer

Question 2

ASysOps administrator configures an application to run on Amazon EC2 instances behind an Application Load Balancer (ALB) in a simple scaling Auto Scaling group with the default settings.
The Auto Scaling group is configured to use the RequestCountPerTarget metric for scaling. The SysOps administrator notices that the RequestCountPerTarget metric exceeded the specified limit twice in 180 seconds.
How will the number of EC2 instances in this Auto Scaling group be affected in this scenario?

A. The Auto Scaling group will launch one EC2 instance and will wait for the default cooldown period before launching another instance. B. The Auto Scaling group will send an alert to the ALB to rebalance the traffic and not add new EC2 instances until the load is normalized. C. The Auto Scaling group will try to distribute the traffic among all EC2 instances before launching another instance. D. The Auto Scaling group will launch an additional EC2 instance every time the RequestCountPerTarget metric exceeds the predefined limit.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

A company has internal hybrid applications that have resources in the AWS Cloud and on premises. Users report that the applications sometimes are not available. The company has configured an Amazon CloudWatch alarm to monitor the tunnel status of its AWS Site-to-Site VPN connection.
A SysOps administrator must implement a solution that creates a high-priority ticket in an internal ticketing tool when the VPN tunnel is down.
Which solution will meet this requirement?

A. Create an Amazon Simple Notification Service (Amazon SNS) topic for the CloudWatch alarm.
Subscribe the ticketing tool's endpoint to the SNS topic. B. Create an Amazon EventBridge rule that monitors the VPN tunnel directly. Configure the ticketing tool's endpoint as the target of the rule. C. Create an AWS Lambda function. Configure the CloudWatch alarm to directly invoke the Lambda function to create individual tickets in the ticketing tool. D. Create an Amazon Simple Queue Service (Amazon SQS) queue as the target for the CloudWatch alarm. Configure the queue to transform messages into tickets and to post the tickets to the ticketing tool's endpoint.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

A company uses AWS CloudFormation to deploy its infrastructure. The company recently retired an application. A cloud operations engineer initiates CloudFormation stack deletion, and the stack gets stuck in DELETE_FAILED status.
A SysOps administrator discovers that the stack had deployed a security group. The security group is referenced by other security groups in the environment. The SysOps administrator needs to delete the stack without affecting other applications.
Which solution will meet these requirements in the MOST operationally efficient manner?

A. Create a CloudFormation change set to delete the security group. Deploy the change set. B. Create a new security group that has a different name. Apply identical rules to the new security group. Replace all other security groups that reference the new security group Delete the stack. C. Delete the stack again. Specify that the security group be retained. D. Perform CloudFormation drift detection. Delete the stack.

Discussion 0

Correct Answer: B Vote an answer

Question 5

A company runs hundreds of Amazon EC2 instances in a single AWS Region. Each EC2 instance has two attached 1 GiB General Purpose SSD (gp2) Amazon Elastic Block Store (Amazon EBS) volumes. A critical workload is using all the available IOPS capacity on the EBS volumes.
According to company policy, the company cannot change instance types or EBS volume types without completing lengthy acceptance tests to validate that the company's applications will function properly. A SysOps administrator needs to increase the I/O performance of the EBS volumes as quickly as possible.
Which action should the SysOps administrator take to meet these requirements?

A. Add all the EC2 instances to a cluster placement group. B. Turn on Transfer Acceleration on the EBS volumes in the Region. C. Add two additional elastic network interfaces on each EC2 instance. D. Increase the size of the 1 GiB EBS volumes.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

An Amazon EC2 instance is running an application that uses Amazon Simple Queue Service (Amazon SQS) queues.
A SysOps administrator must ensure that the application can read, write, and delete messages from the SQS queues.
Which solution will meet these requirements in the MOST secure manner?

A. Create and associate an IAM role that allows EC2 instances to call AWS services. Attach an IAM policy to the role that allows the sqs:SendMessage permission, the sqs:ReceiveMessage permission, and the sqs:DeleteMessage permission to the appropriate queues. B. Create and associate an IAM role that allows EC2 instances to call AWS services. Attach an IAM policy to the role that allows sqs:* permissions to the appropriate queues. C. Create an IAM user with an IAM policy that allows the sqs:SendMessage permission, the sqs:ReceiveMessage permission, and the sqs:DeleteMessage permission to the appropriate queues.
Export the IAM user's access key and secret access key as environment variables on the EC2 instance. D. Create an IAM user with an IAM policy that allows the sqs:SendMessage permission, the sqs:ReceiveMessage permission, and the sqs:DeleteMessage permission to the appropriate queues.
Embed the IAM user's credentials in the application's configuration.

Discussion 0

Correct Answer: A Vote an answer

Question 7

A company hosts an online shopping portal in the AWS Cloud. The portal provides HTTPS security by using a TLS certificate on an Elastic Load Balancer (ELB). Recently, the portal suffered an outage because the TLS certificate expired. A SysOps administrator must create a solution to automatically renew certificates to avoid this issue in the future. What is the MOST operationally efficient solution that meets these requirements?

A. Register a certificate with a third-party certificate authority (CA).
Configure the ELB to import the certificate directly from the CA.
Set the certificate refresh cycle on the ELB to refresh when the certificate is within 3 months of the expiration date. B. Register a certificate with a third-party certificate authority (CA).
Import this certificate into AWS Certificate Manager (ACM).
Associate the certificate from ACM with the ELB.
ACM will automatically manage the renewal of the certificate. C. Request a public certificate by using AWS Certificate Manager (ACM).
Associate the certificate from ACM with the ELB.
ACM will automatically manage the renewal of the certificate. D. Request a public certificate by using AWS Certificate Manager (ACM).
Associate the certificate from ACM with the ELB.
Write a scheduled AWS Lambda function to renew the certificate every 18 months.

Discussion 0

Correct Answer: C Vote an answer

Question 8

A company decides to stop non-production Amazon EC2 instances during the EC2 instances.
The company's IT manager must receive notification in near real time whenever an EC2 instance that has an environment type tag value of non-production is started during the night.
Which solution will meet this requirement with the MOST operational efficiency?

A. Create an Amazon EventBridge rule that includes the EC2 Instance State-change Notification event type. Filter the event to capture only the running state. Create an AWS Lambda function as a target of the rule. Configure the Lambda function to check the current time and the EC2 instances' tags to determine the environment type. Create an Amazon Simple Notification Service (Amazon SNS) topic as a target of the Lambda function for notifications. Subscribe the IT manager's email address to the SNS topic. B. Deploy an AWS Lambda function that queries the Amazon EC2 API to determine the state of each EC2 instance. Use the EC2 instance scheduler to configure the Lambda function to run every minute during the night and to send an email notification to the IT manager for each non- production EC2 instance that is in the running state. C. Store the EC2 instance metadata, including the environment type, in an Amazon DynamoDB table. Deploy a custom application to an EC2 instance. Configure the custom application to poll the DynamoDB data every minute during the night and to query the Amazon EC2 API to determine the state of each instance. Additionally, configure the custom application to send an email notification to the IT manager for each non-production EC2 instance that is in the running state. D. Configure an AWS Lambda function with an SMTP client library. Subscribe the Lambda function to the AWS Health Dashboard to receive notification whenever an EC2 instance is in the running state. Configure the Lambda function to use Amazon Pinpoint to send email notifications to the IT manager. Deploy a second Lambda function to throttle calls from the first Lambda function during the daytime.

Discussion 0

Correct Answer: A Vote an answer

Question 9

A company plans to create many AWS accounts. Each account requires a VPC that has a unique IPv4 CIDR allocation. The company has an organization with all features enabled in AWS Organizations. The company uses Amazon VPC IP Address Manager (IPAM) and has deployed an IPAM.
A SysOps administrator must automate the VPC creation process. The SysOps administrator creates an AWS CloudFormation template that contains the VPC resources. The SysOps administrator deploys the template as a stack set with the organization root as a deployment target.
Which set of steps will complete the automation process?

A. Create an IPAM pool. Update the CloudFormation template to include an AWS::EC2::IPAMAllocation resource that references the IPAM pool. Reference the AWS::EC2::IPAMAllocation resource in the AWS::EC2::VPC resource in the template. B. Configure trusted access for AWS Resource Access Manager (AWS RAM) and IPAM. Create an IPAM pool. Create an AWS RAM resource share for the IPAM pool. Specify the organization as the principal. Update the AWS::EC2::VPC resource in the CloudFormation template to reference the IPAM pool. C. Create an IPAM pool. Create an AWS Resource Access Manager (AWS RAM) resource share for the IPAM. Specify the organization as the principal. Update the CloudFormation template to reference the IPAM in the AWS::EC2::VPC resource. D. Configure trusted access for AWS Resource Access Manager (AWS RAM) and IPAM. Create a CloudFormation macro that invokes an AWS Lambda function to retrieve the CIDR allocation from the IPAM. Deploy the macro to the organization's management account. Create an AWS RAM resource share for the macro. Specify the organization as the principal. Update the CloudFormation template to invoke the macro.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 10

A company stores files on 50 Amazon S3 buckets in the same AWS Region. The company wants to connect to the S3 buckets securely over a private connection from its Amazon EC2 instances.
The company needs a solution that produces no additional cost.
Which solution will meet these requirements?

A. Create an interface VPC endpoint for each S3 bucket. Attach the interface VPC endpoints to each subnet inside the VPC. B. Create a gateway VPC endpoint for each S3 bucket. Attach the gateway VPC endpoints to each subnet inside the VPC. C. Create one gateway VPC endpoint for all the S3 buckets. Add the gateway VPC endpoint to the VPC route table. D. Create one interface VPC endpoint for all the S3 buckets. Add the interface VPC endpoint to the VPC route table.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).