SOA-C02 practice questions 111–120

1. Question 111 · 475 in bank

   A company runs an application on Amazon EC2 instances. The EC2 instances are in an Auto Scaling group and run behind an Application Load Balancer (ALB). The application experiences errors when total requests exceed 100 requests per second. A SysOps administrator must collect information about total requests for a 2-week period to determine when requests exceeded this threshold. What should the SysOps administrator do to collect this data?

   • AUse the ALB’s RequestCount metric. Configure a time range of 2 weeks and a period of 1 minute. Examine the chart to determine peak traffic times and volumes.
   • BUse Amazon CloudWatch metric math to generate a sum of request counts for all the EC2 instances over a 2-week period. Sort by a 1-minute interval.
   • CCreate Amazon CloudWatch custom metrics on the EC2 launch configuration templates to create aggregated request metrics across all the EC2 instances.
   • DCreate an Amazon EventBridge (Amazon CloudWatch Events) rule. Configure an EC2 event matching pattern that creates a metric that is based on EC2 requests. Display the data in a graph.

   Show answer

   Answer: A

   Explanation

   A. Use the ALB's RequestCount metric. Configure a time range of 2 weeks and a period of 1 minute. Examine the chart to determine peak traffic times and volumes. Explanation: The ALB's RequestCount metric provides the total number of requests processed by the ALB. By configuring a time range of 2 weeks with a 1-minute period, you can collect detailed data on request counts for each minute over the 2-week period. This will allow the SysOps administrator to visualize the traffic patterns and identify peak times when the requests exceeded the threshold of 100 requests per second.

   Source: Adapted from community discussion — Christina666

   Next question

2. Question 112 · 475 in bank

   A company hosts a website on multiple Amazon EC2 instances that run in an Auto Scaling group. Users are reporting slow responses during peak times between 6 PM and 11 PM every weekend. A SysOps administrator must implement a solution to improve performance during these peak times. What is the MOST operationally efficient solution that meets these requirements?

   • ACreate a scheduled Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function to increase the desired capacity before peak times.
   • BConfigure a scheduled scaling action with a recurrence option to change the desired capacity before and after peak times.
   • CCreate a target tracking scaling policy to add more instances when memory utilization is above 70%.
   • DConfigure the cooldown period for the Auto Scaling group to modify desired capacity before and after peak times.

   Show answer

   Answer: B

   Explanation

   Answer is B - "Scheduled scaling helps you to set up your own scaling schedule according to predictable load changes. For example, let's say that every week the traffic to your web application starts to increase on Wednesday, remains high on Thursday, and starts to decrease on Friday. You can configure a schedule for Amazon EC2 Auto Scaling to increase capacity on Wednesday and decrease capacity on Friday." https://docs.aws.amazon.com/autoscaling/ec2/userguide/schedule_time.html

   Source: Adapted from community discussion — Finger41

   References

   • AWS documentation

   Next question

3. Question 113 · 475 in bank

   A company uses an AWS CloudFormation template to provision an Amazon EC2 instance and an Amazon RDS DB instance. A SysOps administrator must update the template to ensure that the DB instance is created before the EC2 instance is launched. What should the SysOps administrator do to meet this requirement?

   • AAdd a wait condition to the template. Update the EC2 instance user data script to send a signal after the EC2 instance is started.
   • BAdd the DependsOn attribute to the EC2 instance resource, and provide the logical name of the RDS resource.
   • CChange the order of the resources in the template so that the RDS resource is listed before the EC2 instance resource.
   • DCreate multiple templates. Use AWS CloudFormation StackSets to wait for one stack to complete before the second stack is created.

   Show answer

   Answer: B

   Explanation

   B is the answer With the DependsOn attribute you can specify that the creation of a specific resource follows another. When you add a DependsOn attribute to a resource, that resource is created only after the creation of the resource specified in the DependsOn attribute.

   Source: Adapted from community discussion — RicardoD

   References

   • AWS documentation

   Next question

4. Question 114 · 475 in bank

   A company recently migrated its application to a VPC on AWS. An AWS Site-to-Site VPN connection connects the company’s on-premises network to the VPC. The application retrieves customer data from another system that resides on premises. The application uses an on-premises DNS server to resolve domain records. After the migration, the application is not able to connect to the customer data because of name resolution errors. Which solution will give the application the ability to resolve the internal domain names?

   • ALaunch EC2 instances in the VPC. On the EC2 instances, deploy a custom DNS forwarder that forwards all DNS requests to the on-premises DNS server. Create an Amazon Route 53 private hosted zone that uses the EC2 instances for name servers.
   • BCreate an Amazon Route 53 Resolver outbound endpoint. Configure the outbound endpoint to forward DNS queries against the on-premises domain to the on-premises DNS server.
   • CSet up two AWS Direct Connect connections between the AWS environment and the on-premises network. Set up a link aggregation group (LAG) that includes the two connections. Change the VPC resolver address to point to the on-premises DNS server.
   • DCreate an Amazon Route 53 public hosted zone for the on-premises domain. Configure the network ACLs to forward DNS requests against the on-premises domain to the Route 53 public hosted zone.

   Show answer

   Answer: B

   References

   • AWS documentation

   Next question

5. Question 115 · 475 in bank

   A company’s web application is available through an Amazon CloudFront distribution and directly through an internet-facing Application Load Balancer (ALB). A SysOps administrator must make the application accessible only through the CloudFront distribution and not directly through the ALB. The SysOps administrator must make this change without changing the application code. Which solution will meet these requirements?

   • AModify the ALB type to internal. Set the distribution’s origin to the internal ALB domain name.
   • BCreate a Lambda@Edge function. Configure the function to compare a custom header value in the request with a stored password and to forward the request to the origin in case of a match. Associate the function with the distribution.
   • CReplace the ALB with a new internal ALB. Set the distribution’s origin to the internal ALB domain name. Add a custom HTTP header to the origin settings for the distribution. In the ALB listener, add a rule to forward requests that contain the matching custom header and the header’s value. Add a default rule to return a fixed response code of 403.
   • DAdd a custom HTTP header to the origin settings for the distribution. In the ALB listener, add a rule to forward requests that contain the matching custom header and the header’s value. Add a default rule to return a fixed response code of 403.

   Show answer

   Answer: D

   Explanation

   Add a custom HTTP header to the origin settings for the distribution. In the ALB listener, add a rule to forward requests that contain the matching custom header and the header’s value. Add a default rule to return a fixed response code of 403. Configure CloudFront to add a custom HTTP header to requests that it sends to the Application Load Balancer. Configure the Application Load Balancer to only forward requests that contain the custom HTTP header. (Optional) Require HTTPS to improve the security of this solution. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/restrict-access-to-load-balancer.html

   Source: Adapted from community discussion — noahsark

   References

   • AWS documentation
   • repost.aws documentation
   • AWS documentation

   Next question

6. Question 116 · 475 in bank

   A company runs several workloads on AWS. The company identifies five AWS Trusted Advisor service quota metrics to monitor in a specific AWS Region. The company wants to receive email notification each time resource usage exceeds 60% of one of the service quotas. Which solution will meet these requirements?

   • ACreate five Amazon CloudWatch alarms, one for each Trusted Advisor service quota metric. Configure an Amazon Simple Notification Service (Amazon SNS) topic for email notification each time that usage exceeds 60% of one of the service quotas.
   • BCreate five Amazon CloudWatch alarms, one for each Trusted Advisor service quota metric. Configure an Amazon Simple Queue Service (Amazon SQS) queue for email notification each time that usage exceeds 60% of one of the service quotas.
   • CUse the AWS Service Health Dashboard to monitor each Trusted Advisor service quota metric. Configure an Amazon Simple Queue Service (Amazon SQS) queue for email notification each time that usage exceeds 60% of one of the service quotas.
   • DUse the AWS Service Health Dashboard to monitor each Trusted Advisor service quota metric. Configure an Amazon Simple Notification Service (Amazon SNS) topic for email notification each time that usage exceeds 60% of one of the service quotas.

   Show answer

   Answer: A

   Explanation

   Amazon CloudWatch allows you to set up alarms on various metrics, including service quota metrics from AWS Trusted Advisor. In this case, the company wants to monitor five Trusted Advisor service quota metrics in a specific AWS Region and receive email notifications when resource usage exceeds 60% of any of these quotas. Option D is incorrect because it mentions using the AWS Service Health Dashboard to monitor service quota metrics. While the Service Health Dashboard provides information about the overall health of AWS services, it does not provide specific monitoring capabilities for individual service quota metrics as required in this scenario.

   Source: Adapted from community discussion — Christina666

   Next question

7. Question 117 · 475 in bank

   A company needs to implement a managed file system to host Windows file shares for users on premises. Resources in the AWS Cloud also need access to the data on these file shares. A SysOps administrator needs to present the user file shares on premises and make the user file shares available on AWS with minimum latency. What should the SysOps administrator do to meet these requirements?

   • ASet up an Amazon S3 File Gateway.
   • BSet up an AWS Direct Connect connection.
   • CUse AWS DataSync to automate data transfers between the existing file servers and AWS.
   • DSet up an Amazon FSx File Gateway.

   Show answer

   Answer: D

   Explanation

   Vote for D To meet the requirements of presenting user file shares on premises and making the file shares available on AWS with minimum latency, the SysOps administrator should set up an Amazon FSx File Gateway. Amazon FSx for Windows File Server provides a fully managed native Microsoft Windows file system so that users can access their files over the Server Message Block (SMB) protocol. The Amazon FSx File Gateway allows access to the file shares from on-premises Windows environments or from Windows instances running in the AWS Cloud with low latency. This solution avoids the need for using AWS Direct Connect, which is more suitable for high-throughput workloads, and eliminates the need for using AWS DataSync to move data between the on-premises file servers and AWS, as the file shares are natively hosted on AWS. Amazon S3 File Gateway, on the other hand, is used for providing a file interface to S3 object storage and does not natively support the SMB protocol, making it unsuitable for this scenario.

   Source: Adapted from community discussion — awsguru1998

   Next question

8. Question 118 · 475 in bank

   A company is hosting applications on Amazon EC2 instances. The company is hosting a database on an Amazon RDS for PostgreSQL DB instance. The company requires all connections to the DB instance to be encrypted. What should a SysOps administrator do to meet this requirement?

   • AAllow SSL connections to the database by using an inbound security group rule.
   • BEncrypt the database by using an AWS Key Management Service (AWS KMS) encryption key.
   • CEnforce SSL connections to the database by using a custom parameter group.
   • DPatch the database with SSL/TLS by using a custom PostgreSQL extension.

   Show answer

   Answer: C

   Explanation

   C. Enforce SSL connections to the database by using a custom parameter group. Explanation: Enforcing SSL connections to the database is the appropriate way to ensure that all connections between the application and the Amazon RDS for PostgreSQL DB instance are encrypted. This can be achieved using a custom parameter group, which allows you to configure specific database settings. When you enforce SSL connections, the PostgreSQL server will require clients to use SSL when connecting. This ensures that all data transmitted between the application and the database is encrypted, providing an additional layer of security for sensitive information. Options A, B, and D are not directly related to enforcing SSL connections for the database:

   Source: Adapted from community discussion — Christina666

   References

   • AWS documentation
   • AWS documentation

   Next question

9. Question 119 · 475 in bank

   A company recently purchased Savings Plans. The company wants to receive email notification when the company’s utilization drops below 90% for a given day. Which solution will meet this requirement?

   • ACreate an Amazon CloudWatch alarm to monitor the Savings Plan check in AWS Trusted Advisor. Configure an Amazon Simple Queue Service (Amazon SQS) queue for email notification when the utilization drops below 90% for a given day.
   • BCreate an Amazon CloudWatch alarm to monitor the SavingsPlansUtilization metric under the AWS/SavingsPlans namespace in CloudWatch. Configure an Amazon Simple Queue Service (Amazon SQS) queue for email notification when the utilization drops below 90% for a given day.
   • CCreate a Savings Plans alert to monitor the daily utilization of the Savings Plans. Configure an Amazon Simple Notification Service (Amazon SNS) topic for email notification when the utilization drops below 90% for a given day.
   • DUse AWS Budgets to create a Savings Plans budget to track the daily utilization of the Savings Plans. Configure an Amazon Simple Notification Service (Amazon SNS) topic for email notification when the utilization drops below 90% for a given day.

   Show answer

   Answer: D

   Explanation

   It's D. You need to use AWS Budgets to manage savings plans. Thresholds and recipients are specified in the settings of your created budget. https://docs.aws.amazon.com/savingsplans/latest/userguide/sp-usingBudgets.html

   Source: Adapted from community discussion — Domdom120

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

10. Question 120 · 475 in bank

    A company uses an Amazon Simple Queue Service (Amazon SQS) standard queue with its application. The application sends messages to the queue with unique message bodies. The company decides to switch to an SQS FIFO queue. What must the company do to migrate to an SQS FIFO queue?

    • ACreate a new SQS FIFO queue. Turn on content-based deduplication on the new FIFO queue. Update the application to include a message group ID in the messages.
    • BCreate a new SQS FIFO queue. Update the application to include the DelaySeconds parameter in the messages.
    • CModify the queue type from SQS standard to SQS FIFO. Turn off content-based deduplication on the queue. Update the application to include a message group ID in the messages.
    • DModify the queue type from SQS standard to SQS FIFO. Update the application to send messages with identical message bodies and to include the DelaySeconds parameter in the messages.

    Show answer

    Answer: A

    Explanation

    A. Create a new SQS FIFO queue: SQS FIFO queues have a different structure and ordering mechanism compared to SQS standard queues, so a new queue needs to be created with the FIFO configuration. Turn on content-based deduplication on the new FIFO queue: SQS FIFO queues support content-based deduplication. Enabling this feature ensures that identical messages (messages with the same message body) are not duplicated in the queue, which is an essential feature of FIFO queues.

    Source: Adapted from community discussion — Christina666

    References

    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SOA-C02 practice, question 111. 475 questions available.