SOA-C02 practice questions 161–170

1. Question 161 · 475 in bank

   A company maintains a large set of sensitive data in an Amazon S3 bucket. The company's security team asks a SysOps administrator to help verify that all current objects in the S3 bucket are encrypted. What is the MOST operationally efficient solution that meets these requirements?

   • ACreate a script that runs against the S3 bucket and outputs the status of each object.
   • BCreate an S3 Inventory configuration on the S3 bucket. Include the appropriate status fields.
   • CProvide the security team with an IAM user that has read access to the S3 bucket.
   • DUse the AWS CLI to output a list of all objects in the S3 bucket.

   Show answer

   Answer: B

   Explanation

   You can use Amazon S3 Inventory to help manage your storage. For example, you can use it to audit and report on the replication and encryption status of your objects for business, compliance, and regulatory needs.

   Source: Adapted from community discussion — Christina666

   References

   • AWS documentation

   Next question

2. Question 162 · 475 in bank

   Users are periodically experiencing slow response times from a relational database. The database runs on a burstable Amazon EC2 instance with a 350 GB General Purpose SSD (gp2) Amazon Elastic Block Store (Amazon EBS) volume. A SysOps administrator monitors the EC2 instance in Amazon CloudWatch and observes that the VolumeReadOps metric drops to less than 10% of its peak value during the periods of slow response. What should the SysOps administrator do to ensure consistently high performance?

   • AConvert the gp2 volume to a General Purpose SSD (gp3) EBS volume.
   • BConvert the gp2 volume to a Cold HDD (sc1) EBS volume.
   • CConvert the EC2 instance to a memory optimized instance type.
   • DActivate unlimited mode on the EC2 instance.

   Show answer

   Answer: A

   Explanation

   Option A (Convert the gp2 volume to a General Purpose SSD (gp3) EBS volume) is the correct option. The gp2 EBS volume type is designed for general-purpose workloads and provides a baseline performance and burst credits. The burst credits allow the volume to burst above the baseline performance when needed but are limited in capacity. If the volume depletes its burst credits, the performance can decrease, resulting in slow response times. On the other hand, gp3 is the next-generation general-purpose SSD EBS volume type that provides higher baseline performance, higher burst performance, and a new feature called "provisioned IOPS" that allows you to provision a consistent level of IOPS (Input/Output Operations Per Second) independent of volume size. By converting the gp2 volume to a gp3 volume, you will get higher baseline performance, which can help ensure consistently high performance for the database during periods of increased workload without relying solely on burst credits.

   Source: Adapted from community discussion — Christina666

   References

   • repost.aws documentation
   • AWS documentation
   • AWS documentation

   Next question

3. Question 163 · 475 in bank

   A SysOps administrator is optimizing the cost of a workload. The workload is running in multiple AWS Regions and is using AWS Lambda with Amazon EC2 On-Demand Instances for the computer. The overall usage is predictable. The amount of computer that is consumed in each Region varies, depending on the users' locations. Which approach should the SysOps administrator use to optimize this workload?

   • APurchase Computer Savings Plans based on the usage during the past 30 days.
   • BPurchase Convertible Reserved Instances by calculating the usage baseline.
   • CPurchase EC2 Instance Savings Plans based on the usage during the past 30 days.
   • DPurchase Standard Reserved Instances by calculating the usage baseline.

   Show answer

   Answer: A

   Explanation

   I pick A, because can provide a saving plan for EC2 & Lambda. Also is the only global plan. Given that number of EC2s may vary overtime it’s definitely the right choice.

   Source: Adapted from community discussion — csG13

   References

   • AWS documentation

   Next question

4. Question 164 · 475 in bank

   A software company runs a workload on Amazon EC2 instances behind an Application Load Balancer (ALB). A SysOps administrator needs to define a custom health check for the EC2 instances. What is the MOST operationally efficient solution?

   • ASet up each EC2 instance so that it writes its healthy/unhealthy status into a shared Amazon S3 bucket for the ALB to read.
   • BConfigure the health check on the ALB and ensure that the Health Check Path setting is correct.
   • CSet up Amazon ElastiCache to track the EC2 instances as they scale in and out.
   • DConfigure an Amazon API Gateway health check to ensure custom checks on all of the EC2 instances.

   Show answer

   Answer: B

   References

   • AWS documentation

   Next question

5. Question 165 · 475 in bank

   A SysOps administrator is required to monitor free space on Amazon EBS volumes attached to Microsoft Windows-based Amazon EC2 instances within a company's account. The administrator must be alerted to potential issues. What should the administrator do to receive email alerts before low storage space affects EC2 instance performance?

   • AUse built-in Amazon CloudWatch metrics, and configure CloudWatch alarms and an Amazon SNS topic for email notifications.
   • BUse AWS CloudTrail logs and configure the trail to send notifications to an Amazon SNS topic.
   • CUse the Amazon CloudWatch agent to send disk space metrics, then set up CloudWatch alarms using an Amazon SNS topic.
   • DUse AWS Trusted Advisor and enable email notification alerts for EC2 disk space.

   Show answer

   Answer: C

   Explanation

   Free disk space is available from Linux OS directly, but you'd have to connect to each machine one by one. For Windows, or to monitor across multiple instances simultaneously (Linux and/or Windows) you need the CloudWatch Agent per this page. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-describing-volumes.html#ebs-view-free-disk-space which states " If you need to monitor disk space usage for multiple instances, you can install and configure the CloudWatch agent on those instances using Systems Manager. For more information, see Installing the CloudWatch agent using Systems Manager."

   Source: Adapted from community discussion — JamesF92

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

6. Question 166 · 475 in bank

   A company applies user-defined tags to resources that are associated with the company's AWS workloads. Twenty days after applying the tags, the company notices that it cannot use the tags to filter views in the AWS Cost Explorer console. What is the reason for this issue?

   • AIt takes at least 30 days to be able to use tags to filter views in Cost Explorer.
   • BThe company has not activated the user-defined tags for cost allocation.
   • CThe company has not created an AWS Cost and Usage Report.
   • DThe company has not created a usage budget in AWS Budgets.

   Show answer

   Answer: B

   References

   • AWS documentation

   Next question

7. Question 167 · 475 in bank

   A company has a critical serverless application that uses multiple AWS Lambda functions. Each Lambda function generates 1 GB of log data daily in its own Amazon CloudWatch Logs log group. The company's security team asks for a count of application errors, grouped by type, across all of the log groups. What should a SysOps administrator do to meet this requirement?

   • APerform a CloudWatch Logs Insights query that uses the stats command and count function.
   • BPerform a CloudWatch Logs search that uses the groupby keyword and count function.
   • CPerform an Amazon Athena query that uses the SELECT and GROUP BY keywords.
   • DPerform an Amazon RDS query that uses the SELECT and GROUP BY keywords.

   Show answer

   Answer: A

   Explanation

   A - https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AnalyzingLogData.html CloudWatch Logs Insights includes a purpose-built query language with a few simple but powerful commands. CloudWatch Logs Insights provides sample queries, command descriptions, query autocompletion, and log field discovery to help you get started. Sample queries are included for several types of AWS service logs.

   Source: Adapted from community discussion — fahadadnan

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

8. Question 168 · 475 in bank

   A SysOps administrator is investigating issues on an Amazon RDS for MariaDB DB instance. The SysOps administrator wants to display the database load categorized by detailed wait events. How can the SysOps administrator accomplish this goal?

   • ACreate an Amazon CloudWatch dashboard.
   • BEnable Amazon RDS Performance Insights.
   • CEnable and configure Enhanced Monitoring.
   • DReview the database logs in Amazon CloudWatch Logs.

   Show answer

   Answer: B

   Explanation

   Correct answer B "With the Performance Insights dashboard, you can visualize the database load on your Amazon RDS DB instance load and filter the load by waits, SQL statements, hosts, or users." https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_PerfInsights.html Instead Enhance monitoring Amazon RDS provides metrics in real time for the operating system (OS) that your DB instance runs on. https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Monitoring.OS.overview.html

   Source: Adapted from community discussion — TwinSpark

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

9. Question 169 · 475 in bank

   A company with multiple AWS accounts needs to obtain recommendations for AWS Lambda functions and identify optimal resource configurations for each Lambda function. How should a SysOps administrator provide these recommendations?

   • ACreate an AWS Serverless Application Repository and export the Lambda function recommendations.
   • BEnable AWS Compute Optimizer and export the Lambda function recommendations.
   • CEnable all features of AWS Organizations and export the recommendations from AWS CloudTrail Insights.
   • DRun AWS Trusted Advisor and export the Lambda function recommendations.

   Show answer

   Answer: B

   References

   • aws.amazon.com documentation
   • AWS documentation

   Next question

10. Question 170 · 475 in bank

    A company uses AWS CloudFormation templates to deploy cloud infrastructure. An analysis of all the company's templates shows that the company has declared the same components in multiple templates. A SysOps administrator needs to create dedicated templates that have their own parameters and conditions for these common components. Which solution will meet this requirement?

    • ADevelop a CloudFormation change set.
    • BDevelop CloudFormation macros.
    • CDevelop CloudFormation nested stacks.
    • DDevelop CloudFormation stack sets.

    Show answer

    Answer: C

    Explanation

    Option C (Develop CloudFormation nested stacks) is the correct option for managing common components in multiple templates. Nested stacks allow you to break down complex templates into smaller, more manageable units, where each nested stack can have its own set of parameters, conditions, and resources. This approach promotes code reusability, simplifies template management, and reduces duplication of common components across templates. By creating dedicated templates as nested stacks, you can define and maintain the common components in a single location and then reference them from other templates. This helps ensure consistency and makes it easier to update and maintain the infrastructure as changes can be made in one place and propagated to all templates that use the nested stack.

    Source: Adapted from community discussion — Christina666

    References

    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SOA-C02 practice, question 161. 475 questions available.