SOA-C03 practice questions 31–40

1. Question 31 · 189 in bank

   A CloudOps engineer has successfully deployed a VPC with an AWS CloudFormation template The CloudOps engineer wants to deploy the same template across multiple accounts that are managed through AWS Organizations. Which solution will meet this requirement with the LEAST operational overhead?

   • AAssume the OrganizationAccountAccessRole IAM role from the management account. Deploy the template in each of the accounts.
   • BCreate an AWS Lambda function to assume a role in each account. Deploy the template by using the AWS CloudFormation CreateStack API call.
   • CCreate an AWS Lambda function to query for a list of accounts. Deploy the template by using the AWS CloudFormation CreateStack API call.
   • DUse AWS CloudFormation StackSets from the management account to deploy the template in each of the accounts.

   Show answer

   Answer: D

   Next question

2. Question 32 · 189 in bank

   A company's application is hosted by an internet provider at app.example.com. The company wants to access the application by using www.company.com, which the company owns and manages with Amazon Route 53. Which Route 53 record should be created to address this?

   • AA record
   • BAlias record
   • CCNAME record
   • DPointer (PTR) record

   Show answer

   Answer: C

   Next question

3. Question 33 · 189 in bank

   A company uses Amazon ElastiCache (Redis OSS) to cache application data. A CloudOps engineer must implement a solution to increase the resilience of the cache. The solution also must minimize the recovery time objective (RTO). Which solution will meet these requirements?

   • AReplace ElastiCache (Redis OSS) with ElastiCache (Memcached).
   • BCreate an Amazon EventBridge rule to initiate a backup every hour. Restore the backup when necessary.
   • CCreate a read replica in a second Availability Zone. Enable Multi-AZ for the ElastiCache (Redis OSS) replication group.
   • DEnable automatic backups. Restore the backups when necessary.

   Show answer

   Answer: C

   Next question

4. Question 34 · 189 in bank

   A company has multiple AWS accounts. A CloudOps engineer uses a sandbox account to create and verify IAM policies for use in a production account. The CloudOps engineer uses AWS CloudFormation to deploy policies to the sandbox account for testing. When tests pass, the CloudOps engineer deploys the policies to production. The CloudOps engineer has configured AWS CloudTrail in both the sandbox account and the production account. The CloudOps engineer wants to detect any changes to the IAM policies after the policies have been deployed by CloudFormation. The CloudOps engineer must receive notifications for any changes to the policies. Which solution will meet these requirements with the LEAST administrative effort?

   • AConfigure CloudTrail to send email notifications to the CloudOps engineer when CloudTrail detects changes to the IAM policies.
   • BCreate an Amazon EventBridge rule to invoke an AWS Lambda function to check the CloudFormation stack for drift. Configure the function to use Amazon Simple Notification Service (Amazon SNS) to notify the CloudOps engineer if the function detects any drift.
   • CUse AWS Identity and Access Management Access Analyzer to generate a policy based on CloudTrail activity for the IAM role that is attached to the IAM policies in the production account. Compare the results to the IAM policies that are in the sandbox account. Send a notification to the CloudOps engineer if the policies are different.
   • DStore the IAM policies as a JSON document in an Amazon S3 bucket. Use an AWS Lambda function to periodically compare the IAM policies with the JSON document that is stored in the S3 bucket.

   Show answer

   Answer: B

   Next question

5. Question 35 · 189 in bank

   A finance company stores confidential data in an Amazon S3 bucket. The company uses Amazon QuickSight to analyze the data and create dashboard reports. The company requires that all data access and connections to QuickSight remain within the company's VPC network boundary. Which solution will meet these requirements?

   • ACreate an interface VPC endpoint for QuickSight. Configure the endpoint to connect to QuickSight within the VPC by using AWS PrivateLink. Create a manifest file that points to the S3 data. Grant QuickSight permission to access the S3 bucket.
   • BSet up a VPC endpoint for QuickSight. Use an Amazon EC2 instance as a proxy to establish a direct connection between the VPC and QuickSight. Create a manifest file that points to the S3 data. Store the manifest on the EC2 instance. Grant QuickSight permission to access the EC2 instance.
   • CConfigure an Amazon S3 VPC gateway endpoint. Route all data from QuickSight through the endpoint to transfer data. Grant QuickSight permission to access the S3 bucket.
   • DConfigure a NAT gateway in the company’s VPC. Route all data from QuickSight through the NAT gateway to transfer data. Grant QuickSight permission to access the S3 bucket.

   Show answer

   Answer: A

   Next question

6. Question 36 · 189 in bank

   A company is migrating its production file server to AWS. All data that is stored on the file server must remain accessible if an Availability Zone becomes unavailable or when system maintenance is performed. Users must be able to interact with the file server through the SMB protocol Users also must have the ability to manage file permissions by using Windows ACLs. Which solution will meet these requirements?

   • ACreate a single AWS Storage Gateway file gateway.
   • BCreate an Amazon FSx for Windows File Server Multi-AZ file system.
   • CDeploy two AWS Storage Gateway file gateways across two Availability Zones. Configure an Application Load Balancer in front of the file gateways.
   • DDeploy two Amazon FSx for Windows File Server Single-AZ 2 file systems Configure Microsoft Distributed File System Replication (DFSR).

   Show answer

   Answer: B

   Next question

7. Question 37 · 189 in bank

   A company has a web application that is experiencing performance problems many times each night. A root cause analysis reveals sudden increases in CPU utilization that last 5 minutes on an Amazon EC2 Linux instance. A CloudOps engineer must find the process ID (PID) of the service or process that is consuming more CPU. What should the CloudOps engineer do to collect the process utilization information with the LEAST amount of effort?

   • AConfigure the Amazon CloudWatch agent procstat plugin to capture CPU process metrics.
   • BConfigure an AWS Lambda function to run every minute to capture the PID and send a notification.
   • CLog in to the EC2 instance by using a .pem key each night. Then run the top command.
   • DUse the default Amazon CloudWatch CPU utilization metric to capture the PID in CloudWatch.

   Show answer

   Answer: A

   Next question

8. Question 38 · 189 in bank

   A company needs to monitor its website's availability to end users. The company needs a solution to provide an Amazon Simple Notification Service (Amazon SNS) notification if the website's uptime decreases to less than 99%. The monitoring must provide an accurate view of the user experience on the website. Which solution will meet these requirements?

   • ACreate an Amazon CloudWatch alarm that is based on the website’s logs that are published to a CloudWatch Logs log group. Configure the alarm to publish an SNS notification if the number of HTTP 4xx errors and 5xx errors exceeds a specified threshold.
   • BCreate an Amazon CloudWatch alarm that is based on the website's published metrics in CloudWatch. Configure the alarm to publish an SNS notification that is based on anomaly detection.
   • CCreate an Amazon CloudWatch Synthetics heartbeat monitoring canary. Associate the canary with the website's URL for end users. Create a CloudWatch alarm for the canary. Configure the alarm to publish an SNS notification if the value of the SuccessPercent metric is less than 99%.
   • DCreate an Amazon CloudWatch Synthetics broken link checker monitoring canary. Associate the canary with the website's URL for end users. Create a CloudWatch alarm for the canary. Configure the alarm to publish an SNS notification if the value of the SuccessPercent metric is less than 99%.

   Show answer

   Answer: C

   Next question

9. Question 39 · 189 in bank

   A company uses Amazon EC2 Auto Scaling across multiple Availability Zones. The company must ensure that EC2 instances are provisioned in private subnets. The company recently optimized its cloud infrastructure by reducing the number of NAT gateways in the company’s VPC to one. Some EC2 instances lost internet connectivity after the infrastructure update. A CloudOps engineer must resolve the connectivity issue. Which solution will meet this requirement?

   • AReplace the existing NAT gateway with a NAT instance in the same subnet.
   • BUpdate VPC route tables to target the existing NAT gateway for internet traffic.
   • CUpdate VPC route tables to target an internet gateway for internet traffic.
   • DAdd secondary IP addresses to the existing NAT gateway.

   Show answer

   Answer: B

   Next question

10. Question 40 · 189 in bank

    A company uses AWS CloudFormation to manage a stack of Amazon EC2 instances on AWS. A CloudOps engineer needs to keep the instances and all of the instances’ data, even if someone deletes the stack. Which solution will meet these requirements?

    • ASet the DeletionPolicy attribute to Snapshot for the EC2 instance resource in the CloudFormation template.
    • BAutomate backups by using Amazon Data Lifecycle Manager (Amazon DLM).
    • CCreate a backup plan in AWS Backup.
    • DSet the DeletionPolicy attribute to Retain for the EC2 instance resource in the CloudFormation template.

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SOA-C03 practice, question 31. 189 questions available.