SOA-C03 practice questions 161–170

1. Question 161 · 189 in bank

   A company has an Amazon S3 bucket where users upload feedback items. The company also has an Amazon API Gateway REST API that processes feedback notifications. The company needs a solution that automatically calls the API Gateway REST API when new feedback items are uploaded to the S3 bucket. Which solution will meet these requirements?

   • AConfigure an event notification for the S3 bucket with API Gateway as the destination. Use the s3:ObjectAcl:Put event.
   • BConfigure an event notification for the S3 bucket with Amazon EventBridge as the destination. Configure an EventBridge rule that monitors for the S3 event and calls the API Gateway REST API.
   • CCreate a Lambda@Edge function that calls the API Gateway REST API when a new feedback item is uploaded. Configure an event notification for the S3 bucket with the Lambda@Edge function as the destination.
   • DCreate an Amazon SQS queue. Configure an event notification for the S3 bucket with the SQS queue as the destination. Configure Amazon SQS to push new events to the API Gateway REST API.

   Show answer

   Answer: B

   Next question

2. Question 162 · 189 in bank

   A company's application consists of AWS Lambda functions that access an Amazon RDS instance. Occasionally, the application load creates an unexpectedly high volume of database connections. The high volume of connections causes the RDS instance to rapidly exhaust its compute resources, leading to downtime for users. A CloudOps Administrator must make the application more resilient to increased load without making modifications to the application code. Which solution will meet these requirements?

   • AUse Amazon ElastiCache (Redis OSS) with Amazon RDS. Point the application to ElastiCache (Redis OSS).
   • BUse Amazon RDS Proxy with Amazon RDS. Point the application to Amazon RDS Proxy.
   • CCreate a Lambda function with that invokes an Amazon EventBridge rule to scale the RDS instance based on usage.
   • DUse Amazon ElastiCache (Memcached) with Amazon RDS. Point the application to ElastiCache (Memcached).

   Show answer

   Answer: B

   Next question

3. Question 163 · 189 in bank

   A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer. The instances are in an Amazon EC2 Auto Scaling group. The application is accessed with a public URL. A CloudOps engineer needs to implement a monitoring solution that checks the availability of the application and follows the same routes and actions as a customer. The CloudOps engineer must receive a notification if less than 95% of the monitoring runs find no errors. Which solution will meet these requirements?

   • ACreate an Amazon CloudWatch Synthetics canary with a script that follows customer routes. Schedule the canary to run on a recurring schedule. Create a CloudWatch alarm that publishes a message to an Amazon SNS topic when the SuccessPercent metric is less than 95%.
   • BCreate Amazon Route 53 health checks that monitor the availability of the endpoint. Create Amazon CloudWatch alarms that publish a message to an Amazon SNS topic when the HealthCheckPercentageHealthy metric is less than 95%.
   • CCreate a single AWS Lambda function to check whether the endpoints are available for each customer path. Schedule the Lambda function by using Amazon EventBridge. Configure the Lambda function to publish a message to an Amazon SNS topic when an endpoint returns an error.
   • DCreate an AWS Lambda function for each customer path to check whether that specific endpoint is available. Schedule the Lambda functions by using Amazon EventBridge. Configure each Lambda function to publish a custom metric to Amazon CloudWatch for the endpoint status. Create CloudWatch alarms based on each custom metric to publish a message to an Amazon SNS topic when an alarm is in the ALARM state.

   Show answer

   Answer: A

   Next question

4. Question 164 · 189 in bank

   A company wants to create an automated solution for all accounts managed by AWS Organizations to detect any security groups that use 0.0.0.0/0 as the source address for inbound traffic. The company also wants to automatically remediate any noncompliant security groups by restricting access to a specific CIDR block that corresponds with the company's intranet. Which set of actions should the CloudOps engineer take to create a solution?

   • ACreate an AWS Config rule to detect noncompliant security groups. Set up automatic remediation to change the 0.0.0.0/0 source address to the approved CIDR block.
   • BCreate an IAM policy to deny the creation of security groups that have 0.0.0.0/0 as the source address. Attach this IAM policy to every user in the company.
   • CCreate an AWS Lambda function to inspect new and existing security groups. Check for a noncompliant 0.0.0.0/0 source address and change the source address to the approved CIDR block.
   • DCreate a service control policy (SCP) for the organizational unit (OU) to deny the creation of security groups that have the 0.0.0.0/0 source address. Set up automatic remediation to change the 0.0.0.0/0 source address to the approved CIDR block.

   Show answer

   Answer: A

   Next question

5. Question 165 · 189 in bank

   A CloudOps engineer needs to ensure that an Amazon RDS for PostgreSQL DB instance has available backups. The DB instance has automated backups turned on with a backup retention period of 7 days. However, no automated backups for the DB instance have been created in the past month. What could be the cause of the lack of automated backups?

   • AThe Amazon S3 bucket that stores the backups is full.
   • BThe DB instance is in the STORAGE_FULL state.
   • CThe DB instance is not configured for Multi-AZ.
   • DThe backup retention period must be 30 days.

   Show answer

   Answer: B

   Next question

6. Question 166 · 189 in bank

   A CloudOps engineer must ensure that all of a company's Amazon S3 buckets have versioning enabled. Which solution will meet this requirement?

   • AEnable AWS Config. Set up the s3-bucket-versioning-enabled AWS Config managed rule. Specify the configuration changes trigger type. Configure an automatic remediation action that uses an AWS Lambda function to enable versioning on noncompliant S3 buckets.
   • BEnable AWS Config. Set up the s3-bucket-versioning-enabled AWS Config managed rule. Specify the configuration changes trigger type. Configure an automatic remediation action that uses the AWS-ConfigureS3BucketVersioning AWS Systems Manager Automation runbook to enable versioning on noncompliant S3 buckets.
   • CEnable Amazon GuardDuty. Use GuardDuty to identify S3 buckets that have versioning disabled. Create an Amazon EventBridge rule that sends the GuardDuty findings to AWS Systems Manager Automation. Specify the AWS-ConfigureS3BucketVersioning Systems Manager Automation runbook to enable versioning on noncompliant S3 buckets.
   • DEnable Amazon GuardDuty. Use GuardDuty to identify S3 buckets that have versioning disabled. Create an Amazon EventBridge rule that sends the GuardDuty findings to a target AWS Lambda function. Configure the Lambda function to enable versioning on noncompliant S3 buckets.

   Show answer

   Answer: B

   Next question

7. Question 167 · 189 in bank

   A company runs an application on Amazon EC2 instances. The instances are in three Availability Zones behind an Auto Scaling group and an Application Load Balancer (ALB). The ALB maps to an Amazon Route 53 alias record. Amazon CloudWatch metrics show healthy instances in all three Availability Zones. However, instances in only two of the Availability Zones receive traffic. Which solution will resolve this issue?

   • AEnable cross-zone load balancing on the ALB.
   • BEnsure that all the required subnets are correctly associated with the ALB.
   • CDisable cross-zone load balancing on the ALB.
   • DUpdate the ALB's DNS mapping in Route 53 to use a CNAME record instead of an alias.

   Show answer

   Answer: B

   Next question

8. Question 168 · 189 in bank

   A company has an Amazon EC2 instance that has high CPU utilization. The EC2 instance is a t3.large instance and is running a test web application. The company discovers that the web application would operate better on a compute optimized large instance. What should a CloudOps engineer do to make this change?

   • AMigrate the EC2 instance to a compute optimized instance by using AWS VM Import/Export.
   • BEnable hibernation on the EC2 instance. Change the instance type to a compute optimized instance. Disable hibernation on the EC2 instance.
   • CStop the EC2 instance. Change the instance type to a compute optimized instance. Start the EC2 instance.
   • DChange the instance type to a compute optimized instance while the EC2 instance is running.

   Show answer

   Answer: C

   Next question

9. Question 169 · 189 in bank

   Select 3

   A company needs to monitor the disk utilization of Amazon EBS volumes. The EBS volumes are attached to Amazon EC2 Linux instances. A CloudOps engineer must set up an Amazon CloudWatch alarm that provides an alert when disk utilization increases to more than 80%. Which combination of steps must the CloudOps engineer take to meet these requirements? (Choose three.)

   • ACreate an IAM role that includes the CloudWatchAgentServerPolicy AWS managed policy. Attach the role to the instances.
   • BCreate an IAM role that includes the CloudWatchApplicationInsightsReadOnlyAccess AWS managed policy. Attach the role to the instances.
   • CInstall and start the CloudWatch agent by using AWS Systems Manager or the command line.
   • DInstall and start the CloudWatch agent by using an IAM role. Attach the CloudWatchAgentServerPolicy AWS managed policy to the role.
   • EConfigure a CloudWatch alarm to enter ALARM state when the disk_used_percent CloudWatch metric is greater than 80%.
   • FConfigure a CloudWatch alarm to enter ALARM state when the disk_used CloudWatch metric is greater than 80% or when the disk_free CloudWatch metric is less than 20%.

   Show answer

   Answer: ACE

   Next question

10. Question 170 · 189 in bank

    A company stores critical files in an Amazon S3 bucket in the us-east-1 AWS Region. To comply with disaster recovery requirements, all new objects in the bucket must automatically replicate to a bucket in the us-west-2 Region. Which solution will meet this requirement with the LEAST operational overhead?

    • AEnable Cross-Region Replication (CRR) on the source bucket. Specify the destination bucket in the us-west-2 Region. Enable versioning on the source bucket.
    • BEnable Cross-Origin Resource Sharing (CORS) on both the us-east-1 bucket and the us-west-2 bucket.
    • CCreate an AWS Lambda function that copies the object to the destination bucket. Configure an Amazon EventBridge rule to run the Lambda function for each object that is created.
    • DEnable S3 Lifecycle policies to transition objects to a different storage class in the us-west-2 Region.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SOA-C03 practice, question 161. 189 questions available.