SOA-C03 practice questions 151–160

1. Question 151 · 189 in bank

   A company must receive an email notification immediately when new Amazon EC2 instances launch in the company's main AWS production account. Which solution will meet this requirement?

   • ACreate a user data script that sends an email message through an SMTP mail relay. Include the company's email address in the user data script as the recipient. Ensure that all new EC2 instances include the user data script as part of a standardized build process.
   • BCreate an Amazon SNS topic. Configure AWS Systems Manager to publish EC2 events to the SNS topic. Create an AWS Lambda function to poll the SNS topic. Configure the Lambda function to send messages to the company's email address.
   • CCreate an Amazon SNS topic and a subscription that uses the email protocol. Enter the company's email address as the subscriber. Create an Amazon EventBridge rule that reacts when EC2 instances launch. Specify the SNS topic as the rule's target.
   • DCreate an Amazon SNS topic and a subscription that uses the email protocol. Enter the company's email address as the subscriber. Use the EC2 AssociateInstanceEventWindow operation to specify the SNS topic as the event target when EC2 instances launch.

   Show answer

   Answer: C

   Next question

2. Question 152 · 189 in bank

   Select 2

   A company has created an AWS Site-to-Site VPN connection with logging enabled between the company's VPC and an on-premises data center. The company's finance team has begun to experience intermittent connectivity issues when the team tries to access an application that runs in the VPC from the data center. The company needs to implement an automated monitoring solution to receive immediate notifications when a VPN tunnel becomes unavailable. Which combination of steps will meet this requirement? (Choose two.)

   • AUse Amazon CloudWatch Logs to collect and store VPN collection logs. Convert the logs into readable metrics. Create a metric filter to filter the logs for VPN tunnel metrics.
   • BUse AWS CloudTrail to collect VPN logs. Store the logs in an Amazon S3 bucket. Use Amazon Athena to query the data to find site-to-site VPN tunnel connection errors. Store the error files in a second S3 bucket.
   • CUse VPN tunnel metrics to create an Amazon CloudWatch alarm. Use Amazon SNS to send a notification when a VPN tunnel state changes.
   • DUse Amazon EventBridge rules to invoke an AWS Lambda function. Configure the Lambda function to use Amazon SNS to send a notification when a VPN tunnel connection error is detected.
   • EUse AWS Systems Manager to manage the VPN tunnels and to monitor VPN tunnels for any connection errors.

   Show answer

   Answer: AC

   Next question

3. Question 153 · 189 in bank

   A company runs a non-production application on an Amazon EC2 instance. The application logs all error messages to a log file on the local file system. All entries that are written to the log file start with the word "error." A CloudOps engineer must implement a solution that gives the company the ability to search for all occurrences of the error during the previous year. Which solution will meet this requirement?

   • AInstall the Amazon CloudWatch agent on the EC2 instance. Configure the agent to send logs to an Amazon CloudWatch Logs log group. Create a metric filter on the log group for all messages that include the word "error."
   • BInstall the Amazon CloudWatch agent on the EC2 instance. Configure the agent to send an Amazon SNS message to an Amazon CloudWatch Logs log group. Create a metric filter on the log group for all messages that include the word "error."
   • CConfigure the log file to post all messages to an Amazon SQS queue. Create an AWS Lambda function. Configure the Lambda function to determine whether the messages include the word "error."
   • DConfigure the log file to send all messages to an Amazon S3 bucket. Create an event notification on the S3 bucket to publish the contents of the messages to an Amazon SQS queue.

   Show answer

   Answer: A

   Next question

4. Question 154 · 189 in bank

   A company has a large on-premises tape backup solution. The company has started to use AWS Storage Gateway. The company created a Tape Gateway to replace the existing on-premises hardware. The company's backup engineer noticed that some of the backup jobs that were supposed to write to AWS failed to run because of a "Not Enough Space" error. The company does not want these failures to happen again. The company also wants to consistently have enough tape available on AWS. What is the MOST operationally efficient way for a CloudOps engineer to meet these requirements?

   • ACreate an AWS Lambda function that runs on an hourly basis and checks how many tapes have available space. If the available tapes are below a certain threshold, provision more.
   • BInstall the Amazon CloudWatch agent on the on-premises system. Push the log files to a CloudWatch log group. Create an AWS Lambda function that creates more tapes when the "Not Enough Space" error appears. Create a metric filter and a metric alarm that launches the Lambda function.
   • CCreate an additional Tape Gateway with its own set of tapes. Configure Amazon SNS to send a notification to the backup engineer if the tapes that are associated with the primary Tape Gateway do not have available space.
   • DConfigure tape auto-create on the Tape Gateway. In the auto-create settings, configure a minimum number of tapes, an appropriate barcode prefix, and a tape pool.

   Show answer

   Answer: D

   Next question

5. Question 155 · 189 in bank

   A CloudOps engineer manages the security of accounts in an organization in AWS Organizations. The CloudOps engineer must implement a solution that applies a base configuration to all accounts when the accounts join the organization. Which solution will meet this requirement with the LEAST operational overhead?

   • ACreate the configuration in an AWS CloudFormation template. Deploy the template to all accounts in the organization by using StackSets automatic deployments.
   • BTurn on AWS Config in the organization's management account. Use multi-account, multi-Region data aggregation. Review results on the Aggregated Resources page.
   • CCreate an AWS Lambda function in the organization's management account to configure resources. Configure the Lambda function with cross-account access. Run the function when a new account is detected.
   • DCreate the configuration in an AWS CloudFormation template. Deploy the template to all accounts in the organization by using an AWS Lambda function that runs when a new account is detected.

   Show answer

   Answer: A

   Next question

6. Question 156 · 189 in bank

   A company hosts an application on AWS that uses a 5 TB Amazon RDS for MySQL database. The company performs frequent micro updates that cannot be interrupted. Sometimes structural changes to the database cause issues for the application. When an issue occurs, the company immediately receives a notification through automated monitoring. The company wants to undo the problematic database changes as soon as possible. The company wants to transition from RDS for MySQL to an Amazon Aurora MySQL-Compatible Edition cluster. Which solution will meet these requirements?

   • ACreate a DB cluster snapshot immediately before the update begins. If the update fails, restore the DB snapshot and modify the application to use the new DB cluster endpoint.
   • BCreate a database record in an Amazon Route 53 private zone that points to the cluster endpoint. Create a DB cluster snapshot immediately before the update begins. If the update fails, restore the DB snapshot and modify DNS accordingly.
   • CActivate the backtrack feature in the Aurora cluster during the initial creation or restoration of the Aurora cluster from the RDS for MySQL database. Use backtrack to roll back the database to the point in time right before the update began.
   • DCreate an RDS Proxy in front of the Aurora cluster. If the update fails, restore the DB snapshot and modify the RDS Proxy to use the new DB cluster endpoint.

   Show answer

   Answer: C

   Next question

7. Question 157 · 189 in bank

   A company hosts its website on Amazon EC2 instances in the us-east-1 Region. The company is preparing to extend its website into the eu-central-1 Region, but the database must remain only in us-east-1. After deployment, the EC2 instances in eu-central-1 are unable to connect to the database in us-east-1. What is the MOST operationally efficient solution that will resolve this connectivity issue?

   • ACreate a VPC peering connection between the two Regions. Add the private IP address range of the instances to the inbound rule of the database security group.
   • BCreate a VPC peering connection between the two Regions. Add the security group of the instances in eu-central-1 to the outbound rule of the database security group.
   • CCreate a VPN connection between the two Regions. Add the private IP address range of the instances to the outbound rule of the database security group.
   • DCreate a VPN connection between the two Regions. Add the security group of the instances in eu-central-1 to the inbound rule of the database security group.

   Show answer

   Answer: A

   Next question

8. Question 158 · 189 in bank

   A company uses AWS Organizations to manage its AWS accounts. The company is implementing a CostCenter tag for business units to track costs and prevent noncompliant actions. The company needs to prevent users from launching Amazon EC2 instances with a CostCenter tag unless the tag has specified values. Which solution will meet this requirement with the LEAST administrative effort?

   • ACreate a service control policy (SCP) for the CostCenter tag in Organizations. Define the specified values in the policy. Attach the policy to all the company's organizational units (OUs).
   • BConfigure inventory collection for the EC2 instances in AWS Systems Manager Inventory. Attach the CostCenter tag to the managed instances.
   • CCreate an Amazon Machine Image (AMI) for each of the company's business units. Include a user data script that tags instances when they are launched.
   • DCreate an Amazon EventBridge rule that invokes an AWS Lambda function when a user launches an EC2 instance. Configure the Lambda function to apply the appropriate CostCenter tag for each user's IAM role or to terminate the instance if the tag lacks the specified values.

   Show answer

   Answer: A

   Next question

9. Question 159 · 189 in bank

   A CloudOps engineer needs to implement a backup strategy for Amazon EC2 resources and Amazon RDS resources. The backup strategy must meet the following retention requirements: • Daily backups: must be kept for 6 days • Weekly backups: must be kept for 4 weeks • Monthly backups: must be kept for 11 months • Yearly backups: must be kept for 7 years Which backup strategy will meet these requirements with the LEAST administrative effort?

   • AUse Amazon Data Lifecycle Manager to create an Amazon EBS snapshot policy. Create tags on each resource that needs to be backed up. Create multiple schedules according to the requirements within the policy. Set the appropriate frequency and retention period.
   • BUse AWS Backup to create a new backup plan for each retention requirement with a backup frequency of daily, weekly, monthly, or yearly. Set the retention period to match the requirement. Create tags on each resource that needs to be backed up. Set up resource assignment by using the tags.
   • CCreate an AWS Lambda function. Program the Lambda function to use native tooling to take backups of file systems in Amazon EC2 and to make copies of databases in Amazon RDS. Create an Amazon EventBridge rule to invoke the Lambda function.
   • DUse Amazon Data Lifecycle Manager to create an Amazon EBS snapshot policy. Create tags on each resource that needs to be backed up. Set up resource assignment by using the tags. Create multiple schedules according to the requirements within the policy. Set the appropriate frequency and retention period. In Amazon RDS, activate automated backups on the required DB instances.

   Show answer

   Answer: B

   Next question

10. Question 160 · 189 in bank

    An ecommerce company runs a microservices application on Amazon ECS. Customers sometimes experience high latency when the customers attempt to complete a purchase through the application. A CloudOps engineer needs a solution to track individual transactions across multiple services to identify where latency is occurring. The solution must require minimal code changes and must provide a visual representation of service dependencies. Which solution will meet these requirements?

    • ASet up the AWS X-Ray daemon as a sidecar container. Instrument the application code by using the X-Ray SDK. Use the service map to visualize request flows to identify latency.
    • BConfigure an Amazon CloudWatch agent on ECS containers as a sidecar container. Create custom metrics for each service. Set up CloudWatch dashboards to monitor response times.
    • CUse Amazon VPC Flow Logs to collect logs for microservices that run on the ECS container. Monitor network traffic, and use the service map to identify latency between microservices.
    • DUse Amazon CloudWatch Container Insights as a sidecar container to collect container metrics. Monitor response times, and visualize request flows to identify latency.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SOA-C03 practice, question 151. 189 questions available.