SOA-C03 practice questions 111–120

1. Question 111 · 189 in bank

   A company uses a custom Amazon Machine Image (AMI) as part of an EC2 Image Builder pipeline. A CloudOps engineer notices that the custom AMI will reach the end of its support lifespan in few months. The CloudOps engineer needs to update the EC2 Image Builder pipeline to use the latest AMI ID. Which solution will meet this requirement?

   • ACreate a new version of the existing EC2 Image Builder recipe. Update the AMI ID details. Update the pipeline to use the new recipe version.
   • BDisable the AMI in the lifecycle rules for the existing AMI. Update the existing EC2 Image Builder recipe with the latest AMI ID details. Rerun the pipeline.
   • CUpdate the build component to use the latest AMI ID details.
   • DReplace the AMI ID in the launch template for the pipeline.

   Show answer

   Answer: A

   Next question

2. Question 112 · 189 in bank

   A company is attempting to manage its costs in the AWS Cloud. A CloudOps engineer needs specific company-defined tags that are assigned to resources to appear on the billing report. What should the CloudOps engineer do to meet this requirement?

   • AActivate the tags as AWS generated cost allocation tags.
   • BActivate the tags as user-defined cost allocation tags.
   • CCreate a new cost category. Select the account billing dimension.
   • DCreate a new AWS Cost and Usage Report. Include the resource IDs.

   Show answer

   Answer: B

   Next question

3. Question 113 · 189 in bank

   A company uses AWS Systems Manager to automate tasks across AWS accounts. The company uses monitoring tools to detect issues. The company creates a Systems Manager Automation runbook that runs an AWS Lambda function to remediate the issues. Initially, the company runs the runbook manually. Now, the company wants to automate running the runbook whenever the monitoring tools detect issues. Which solution will meet this requirement?

   • AConfigure the monitoring tools to publish findings to Amazon EventBridge. Create an EventBridge rule that invokes the runbook in response to events from the monitoring tools.
   • BConfigure the monitoring tools to send findings to an Amazon SNS topic. Subscribe the runbook to the SNS topic. Invoke the runbook when a message is received.
   • CConfigure the monitoring tools to write findings to Amazon CloudWatch Logs. Create a CloudWatch Logs subscription filter that invokes the runbook when new log entries are detected.
   • DConfigure AWS Config to assess the resources and publish configuration changes to Amazon EventBridge. Create a rule to invoke the runbook in response to configuration change events.

   Show answer

   Answer: A

   Next question

4. Question 114 · 189 in bank

   A CloudOps engineer monitors and maintains the availability of resources in an AWS environment. The CloudOps engineer notices that the CPU utilization of an Amazon EC2 instance that runs web server software peaks above 80% at various times during each day. The CPU spikes correlate with peak daily loads. The high CPU load has resulted in performance issues for customers. The CloudOps engineer needs to resolve the system performance issue without causing any service disruptions. Which solution will meet these requirements?

   • AConfigure an Amazon CloudWatch alarm that invokes an AWS Systems Manager Automation runbook to vertically scale the EC2 instance when the CPU utilization exceeds 80%.
   • BConfigure an AWS Systems Manager Automation runbook to run a script that automatically restarts the application when CPU utilization exceeds 80%.
   • CConfigure an Amazon EventBridge rule that invokes an AWS Systems Manager Automation document. Configure the document to increase the EC2 instance size when CPU utilization exceeds 80%.
   • DSet up an Auto Scaling group with an Amazon CloudWatch alarm that triggers a scaling policy to launch additional EC2 instances when the CPU utilization exceeds 80%.

   Show answer

   Answer: D

   Next question

5. Question 115 · 189 in bank

   A company has a new security policy that requires all Amazon EBS volumes to be encrypted at rest. The company needs to use a custom key policy to manage access to the encryption keys. The company must rotate the keys once each year. Which solution will meet these requirements with the LEAST operational overhead?

   • ACreate AWS KMS symmetric customer managed keys. Enable automatic key rotation.
   • BUse AWS owned AWS KMS keys across the company's AWS environment.
   • CCreate AWS KMS asymmetric customer managed keys. Enable automatic key rotation.
   • DCreate AWS KMS symmetric customer managed keys by using imported key material. Rotate the keys on a yearly basis.

   Show answer

   Answer: A

   Next question

6. Question 116 · 189 in bank

   A school uses a web application to track student attendance. The application uses an Amazon API Gateway REST API and backend AWS Lambda functions. The application stores data in an Amazon DynamoDB table that is in on-demand capacity mode. Teachers report slow application performance at the same time every weekday. A CloudOps engineer notices that the performance problems happen only when the application demand suddenly increases. The application can handle the peak load if the load increases gradually. The CloudOps engineer must modify the application to resolve the performance issue. Which solution will meet this requirement?

   • AConfigure provisioned concurrency with scheduled auto scaling for the Lambda functions.
   • BConfigure reserved concurrency with scheduled auto scaling for the Lambda functions.
   • CChange the DynamoDB table from on-demand capacity mode to provisioned capacity mode with auto scaling.
   • DChange the DynamoDB table from on-demand capacity mode to provisioned capacity mode. Set the provisioned capacity to match peak usage.

   Show answer

   Answer: D

   Next question

7. Question 117 · 189 in bank

   A company is hosting a public website on Amazon EC2 instances behind an Application Load Balancer (ALB). The company needs the website to support HTTPS connections. Which solution will meet this requirement?

   • AReplace the ALB with a Network Load Balancer.
   • BUse AWS Certificate Manager (ACM) to issue a public SSL/TLS certificate. Configure the ALB to use the certificate.
   • CImport a public SSL/TLS certificate into AWS KMS. Configure the ALB to retrieve the certificate from AWS KMS.
   • DAttach a public SSL/TLS certificate to the target group that is associated with the ALB.

   Show answer

   Answer: B

   Next question

8. Question 118 · 189 in bank

   A CloudOps engineer needs to quickly resolve issues in an application that runs in a production environment on Amazon EC2 instances. The application uses an Amazon RDS database. To resolve the issues, the CloudOps engineer needs a centralized solution to collect and query logs for both the EC2 instances and the RDS database. Which solution will meet these requirements?

   • AInstall and configure the Amazon CloudWatch agent on the EC2 instances to forward ERROR log events to Amazon CloudWatch Logs. Configure the RDS database to export log events to CloudWatch Logs. Use CloudWatch Logs Insights to query the logs.
   • BInstall and configure the Amazon CloudWatch agent on the EC2 instances to forward INFO log events to an Amazon S3 bucket. Install the CloudWatch agent on the RDS database. Forward ERROR log events to the S3 bucket. Configure S3 Event Notifications to invoke AWS Lambda functions to analyze the logs.
   • CInstall and configure the Amazon CloudWatch agent on the EC2 instances to forward ERROR log events to Amazon CloudWatch Logs. Use the Logs & events menu to examine log events for the RDS database. Use CloudWatch Logs Insights to query logs only for the EC2 instances.
   • DInstall and configure the AWS X-Ray agent on the EC2 instances to forward INFO, DEBUG, and latency log events to Amazon CloudWatch Logs. Configure the RDS database to export log events to Amazon CloudWatch Logs. Use CloudWatch Logs Insights to query the logs.

   Show answer

   Answer: A

   Next question

9. Question 119 · 189 in bank

   A company has business-critical resources in one of its AWS accounts. The company wants to receive an email notification every time an AWS Management Console root user sign-in event occurs in the account. Which solution will meet this requirement with the MOST operational efficiency?

   • ACreate an Amazon CloudWatch alarm that detects AWS Management Console root user sign-in events. Configure the alarm to send email notifications directly through AWS Trusted Advisor.
   • BLaunch an Amazon EC2 instance. Schedule a script to run every hour to analyze AWS CloudTrail events. Configure the script to send email notifications to an Amazon SNS topic when AWS Management Console root user sign-in events occur.
   • CCreate an Amazon EventBridge rule that reacts to AWS Management Console root user sign-in events. Configure the rule to send email notifications to an Amazon SQS queue.
   • DCreate an Amazon EventBridge rule that reacts to AWS Management Console root user sign-in events. Configure the rule to send email notifications to an Amazon SNS topic.

   Show answer

   Answer: D

   Next question

10. Question 120 · 189 in bank

    A company's developers deploy applications to multiple AWS accounts. The developers are able to create any AWS resource within the AWS accounts. A security team wants to audit the resources that the developers created in the company's AWS accounts. Which solution will meet this requirement?

    • ACreate an AWS account for the security team. Configure AWS Audit Manager in the security team's account. Create an Audit Manager assessment. Include the company's AWS accounts in the assessment scope. Generate an assessment report for the security team.
    • BConfigure an AWS Config recorder in each AWS account. In the security team's AWS account, create an AWS Config aggregator. Authorize the aggregator in every AWS account. Use Amazon Quick Suite and Amazon Athena to generate a report for the security team.
    • CCreate a trail in AWS CloudTrail in every AWS account. Create an Amazon RDS DB instance in the security team's account. Configure CloudTrail in every account to write logs to the DB instance. Use Amazon Quick Suite to query the DB instance and generate a report for the security team.
    • DEnable AWS Trusted Advisor in every AWS account. Create a scheduled Amazon EventBridge rule to periodically refresh the Trusted Advisor checks. Use the Trusted Advisor console to generate a report for the security team.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SOA-C03 practice, question 111. 189 questions available.