SOA-C03 practice questions 121–130

1. Question 121 · 189 in bank

   A company experiences increased production incidents. A CloudOps engineer must provide developers with secure access to Amazon EC2 instances from the AWS Management Console. The developers must be able to successfully connect by using EC2 Instance Connect for real-time troubleshooting. The EC2 instances are based on the latest Amazon Linux 2023 AMIs. The EC2 instances are publicly accessible. The EC2 instances have been properly configured with security groups that allow inbound SSH traffic. The developers will use the default ec2-user account to access the instances from the console. Which step should the CloudOps engineer perform NEXT to ensure that the developers can successfully connect by using EC2 Instance Connect?

   • ACreate an IAM role with EC2 access. Attach the role to the EC2 instances.
   • BDownload and install the EC2 Instance Connect agent on the production instances.
   • CGrant IAM permissions to the developers to use EC2 Instance Connect and describe the EC2 instances.
   • DEnable AWS CloudTrail logging. Create a VPC endpoint for EC2 Instance Connect.

   Show answer

   Answer: C

   Next question

2. Question 122 · 189 in bank

   A company asks a CloudOps engineer to provision an additional environment for an application in four additional AWS Regions. The application is running on more than 100 Amazon EC2 instances in the us-east-1 Region, using fully configured Amazon Machine Images (AMIs). The company has an AWS CloudFormation template to deploy resources in us-east-1. What should the CloudOps engineer do to provision the application in the MOST operationally efficient manner?

   • ACopy the AMI to each Region by using the aws ec2 copy-image command. Update the CloudFormation template to include mappings for the copied AMIs.
   • BCreate a snapshot of the running instance. Copy the snapshot to the other Regions. Create an AMI from the snapshots. Update the CloudFormation template for each Region to use the new AMI.
   • CRun the existing CloudFormation template in each additional Region based on the success of the template that is used currently in us-east-1.
   • DUpdate the CloudFormation template to include the additional Regions in the Auto Scaling group. Update the existing stack in us-east-1.

   Show answer

   Answer: A

   Next question

3. Question 123 · 189 in bank

   A CloudOps engineer maintains the security and compliance of a company's AWS account. To ensure the company's Amazon EC2 instances are following company policy, a CloudOps engineer wants to terminate any EC2 instances that do not contain a department tag. Noncompliant resources must be terminated in near real time. Which solution will meet these requirements?

   • ACreate an AWS Config rule with the required-tags managed rule to identify noncompliant resources. Configure automatic remediation to run the AWS-TerminateEC2Instance automation runbook to terminate noncompliant resources.
   • BCreate a new Amazon EventBridge rule to monitor when new EC2 instances are created. Send the event to an Amazon SNS topic for automatic remediation.
   • CEnsure all users who can create EC2 instances also have the permissions to use the ec2:CreateTags and ec2:DescribeTags actions. Change the instance's shutdown behavior to terminate.
   • DEnsure AWS Systems Manager Compliance is configured to manage the EC2 instances. Call the AWS-StopEC2Instances automation runbook to stop noncompliant resources.

   Show answer

   Answer: A

   Next question

4. Question 124 · 189 in bank

   A company has an application that processes events sequentially by using an Amazon SQS FIFO queue. The company needs a solution that automatically sends notifications to the SQS queue when new objects are uploaded to an Amazon S3 bucket. The solution must maintain message ordering. Which solution will meet these requirements with the LEAST operational overhead?

   • ACreate an AWS Lambda function that polls the objects by using the ListObjectsV2 command and detects new objects when the objects are added. Configure the Lambda function to add a message to the SQS queue when new objects are detected.
   • BCreate an event notification on the S3 bucket. Use the FIFO delivery option. Route the notifications to the existing SQS queue.
   • CCreate an Amazon SNS FIFO topic. Create an event notification on the S3 bucket. Configure the event to send messages to the SNS topic. Subscribe the existing SQS queue to the SNS topic.
   • DCreate an access point in Amazon S3 Access Points. Configure the access point to send new items to the existing SQS queue.

   Show answer

   Answer: C

   Next question

5. Question 125 · 189 in bank

   A company runs on-premises workloads that need to use AWS hosted DNS services. The company requires high availability for DNS queries to ensure continuous DNS resolution for critical applications. Which solution will meet these requirements?

   • ADeploy Amazon Route 53 Resolver inbound endpoints to multiple Availability Zones. Configure on-premises DNS resolvers to use the endpoint IP addresses in a failover configuration.
   • BUse Amazon Route 53 latency-based routing to ensure that DNS queries from on-premises systems are directed to the closest resolver endpoint.
   • CConfigure an Amazon Route 53 private hosted zone. Associate the private hosted zone with the on-premises network.
   • DDeploy Amazon Route 53 Resolver outbound endpoints to multiple Availability Zones. Associate the endpoints with the on-premises DNS resolvers.

   Show answer

   Answer: A

   Next question

6. Question 126 · 189 in bank

   A company runs an application on a fleet of Amazon EC2 Windows instances in a Multi-AZ deployment. The company needs a solution that will give the instances access to shared files. The solution must be highly available, must use native Windows storage capabilities, and must maximize consistency for all file requests. Which solution will meet these requirements?

   • ACreate an Amazon FSx for Windows File Server Multi-AZ file system. Map file shares on the instances by using the file system's DNS name.
   • BGrant the instances access to a shared Amazon S3 bucket. Use Windows Task Scheduler to synchronize the contents of the S3 bucket locally to each instance periodically.
   • CCreate an Amazon EFS file system that uses the EFS Standard storage class. Mount the file system to the instances by using the file system's DNS name and the EFS mount helper.
   • DCreate a new Amazon EBS Multi-Attach volume. Attach the EBS volume as an additional drive to each instance.

   Show answer

   Answer: A

   Next question

7. Question 127 · 189 in bank

   A CloudOps engineer is troubleshooting a VPC with public and private subnets that leverage custom network ACLs. Instances in the private subnet are unable to access the internet. There is an internet gateway attached to the public subnet. The private subnet has a route to a NAT gateway that is also attached to the public subnet. The Amazon EC2 instances are associated with the default security group for the VPC. What is causing the issue in this scenario?

   • AThere Is a network ACL on the private subnet set to deny all outbound traffic.
   • BThere is no NAT gateway deployed in the private subnet of the VPC.
   • CThe default security group for the VPC blocks all inbound traffic to the EC2 instances.
   • DThe default security group for the VPC blocks all outbound traffic from the EC2 instances.

   Show answer

   Answer: A

   Next question

8. Question 128 · 189 in bank

   A CloudOps engineer configured AWS Backup to capture snapshots from a single Amazon EC2 instance that has one Amazon EBS volume attached. On the first snapshot, the EBS volume has 10 GiB of data. On the second snapshot, the EBS volume still contains 10 GiB of data, but 4 GiB have changed. On the third snapshot, 2 GiB of data have been added to the volume, for a total of 12 GiB. How much total storage is required to store these snapshots?

   • A12 GIB
   • B16 GiB
   • C26 GiB
   • D32 GIB

   Show answer

   Answer: B

   Next question

9. Question 129 · 189 in bank

   A company needs to deploy a MySQL database on AWS to support an application. The database must be highly available and recoverable. The database must meet a recovery time objective (RTO) of 15 minutes. The database must meet a recovery point objective (RPO) of 5 minutes. Which solution will meet these requirements in the MOST operationally effective manner?

   • ADeploy a MySQL database in a single Availability Zone by using Amazon RDS. Enable automated backups.
   • BDeploy a MySQL database across two Availability Zones by using Amazon RDS with a Multi-AZ deployment. Enable point-in-time restore.
   • CDeploy a MySQL database across two Availability Zones by using Amazon EC2 instances. Configure database replication and Amazon EBS volume snapshots.
   • DDeploy a MySQL database across two Availability Zones by using Amazon RDS. Enable automated backups and database replication.

   Show answer

   Answer: B

   Next question

10. Question 130 · 189 in bank

    A company runs a web application on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer (ALB). A CloudOps engineer must implement deployments without any service interruptions. The company needs the ability to shift traffic between application versions and quickly revert to the previous version by redirecting traffic if issues occur. Which deployment approach will meet these requirements?

    • AUse AWS CodeDeploy blue/green deployment with two ALB target groups. Deploy the new version to a separate fleet. Shift traffic gradually to the new target group. Maintain the original fleet for immediate rollback if necessary.
    • BImplement an in-place rolling update by using Auto Scaling instance refresh on the existing target group. Configure connection draining for each instance. Update the launch template. Rely on health checks during the replacement process.
    • CCreate a new AMI by using the updated application. Modify the Auto Scaling launch template. Temporarily increase desired capacity to add new instances. Then terminate old instances while using ALB connection draining to manage the transition.
    • DDesign an AWS Step Functions workflow that creates a parallel Auto Scaling group and updates monitoring configurations. Configure the workflow to change instance registrations on the ALB and automatically terminate the previous fleet after a verification period.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SOA-C03 practice, question 121. 189 questions available.