SOA-C02 practice questions 221–230

1. Question 221 · 475 in bank

   A SysOps administrator manages the caching of an Amazon CloudFront distribution that serves pages of a website, The SysOps administrator needs to configure the distribution so that the TTL of individual pages can vary. The TTL of the individual pages must remain within the maximum TLL and the minimum TTL that are set for the distribution. Which solution will meet these requirements?

   • ACreate an AWS Lambda function that calls the Createlnvalidation API operation when a change in cache time is necessary.
   • BAdd a Cache-Control: max-age directive to the object at the origin when content is being returned to CloudFront.
   • CAdd a no-cache header through a Lambda@Edge function in response to the Viewer response.
   • DAdd.an Expires header through a CloudFront function in response to the Viewer response.

   Show answer

   Answer: B

   Explanation

   https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Expiration.html#expiration-individual-objects "The Cache-Control max-age directive lets you specify how long (in seconds) that you want an object to remain in the cache before CloudFront gets the object again from the origin server" "The Expires header field lets you specify an expiration date and time using the format specified in RFC 2616, Hypertext Transfer Protocol -- HTTP/1.1 Section 3.3.1, Full Date, for example: Sat, 27 Jun 2015 23:59:59 GMT"

   Source: Adapted from community discussion — TwinSpark

   References

   • AWS documentation

   Next question

2. Question 222 · 475 in bank

   A company has a public web application that experiences rapid traffic increases after advertisements appear on local television. The application runs on Amazon EC2 instances that are in an Auto Scaling group. The Auto Scaling group is not keeping up with the traffic surges after an advertisement runs. The company often needs to scale out to 100 EC2 instances during the traffic surges. The instance startup times are lengthy because of a boot process that creates machine-specific data caches that are unique to each instance. The exact timing of when the advertisements will appear on television is not known. A SysOps administrator must implement a solution so that the application can function properly during the traffic surges. Which solution will meet these requirements?

   • ACreate e warm pool. Keep enough instances in the Stopped state to meet the increased demand.
   • BStart 100 instances. Allow the boot process to finish running. Store this data on the instance store volume before stopping the instances.
   • CIncrease the value of the instance warmup time in the scaling policy
   • DUse predictive scaling for the Auto Scaling group.

   Show answer

   Answer: A

   Explanation

   "A warm pool gives you the ability to decrease latency for your applications that have exceptionally long boot times, for example, because instances need to write massive amounts of data to disk" https://docs.aws.amazon.com/autoscaling/ec2/userguide/ec2-auto-scaling-warm-pools.html I'm confident the answer is not "D" because they the requirements state "The exact timing of when the advertisements will appear on television is not known." That was put there to eliminate Predictive Scaling as an option.

   Source: Adapted from community discussion — Gomer

   References

   • AWS documentation

   Next question

3. Question 223 · 475 in bank

   A company is running a website on Amazon EC2 instances behind an Application Load Balancer (ALB). The company configured an Amazon CloudFront distribution and set the ALB as the origin. The company created an Amazon Route 53 CNAME record to send all traffic through the CloudFront distribution. As an unintended side effect, mobile users are now being served the desktop version of the website. Which action should a SysOps administrator take to resolve this issue?

   • AConfigure the CloudFront distribution behavior to forward the User-Agent header.
   • BConfigure the CloudFront distribution origin settings. Add a User-Agent header to the list of origin custom headers.
   • CEnable IPv6 on the ALB. Update the CloudFront distribution origin settings to use the dualstack endpoint.
   • DEnable IPv6 on the CloudFront distribution. Update the Route 53 record to use the dualstack endpoint.

   Show answer

   Answer: A

   Explanation

   I agree it is A because: 1. B is wrong, since you are modifying origin custom headers that are values that you set unilaterally, independent of the Header of the request that you received from client. As the documentation states, the uses cases for for origin custom headers are: Identifying requests from CloudFront Determining which requests come from a particular distribution Enabling cross-origin resource sharing (CORS) Controlling access to content (https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/add-origin-custom-headers.html)

   Source: Adapted from community discussion — Pepepep

   References

   • AWS documentation
   • AWS documentation
   • repost.aws documentation
   • AWS documentation

   Next question

4. Question 224 · 475 in bank

   A user working in the Amazon EC2 console increased the size of an Amazon Elastic Block Store (Amazon EBS) volume attached to an Amazon EC2 Windows instance. The change is not reflected in the file system. What should a SysOps administrator do to resolve this issue?

   • AExtend the file system with operating system-level tools to use the new storage capacity.
   • BReattach the EBS volume to the EC2 instance.
   • CReboot the EC2 instance that is attached to the EBS volume.
   • DTake a snapshot of the EBS volume. Replace the original volume with a volume that is created from the snapshot.

   Show answer

   Answer: A

   Explanation

   After you increase the size of an EBS volume, use the Windows Disk Management utility or PowerShell to extend the disk size to the new size of the volume. You can begin resizing the file system as soon as the volume enters the optimizing state. https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/recognize-expanded-volume-windows.html

   Source: Adapted from community discussion — princajen

   References

   • AWS documentation

   Next question

5. Question 225 · 475 in bank

   A company hosts an internal application on Amazon EC2 On-Demand Instances behind an Application Load Balancer (ALB). The instances are in an Amazon EC2 Auto Scaling group. Employees use the application to provide product prices to potential customers. The Auto Scaling group is configured with a dynamic scaling policy and tracks average CPU utilization of the instances. Employees have noticed that sometimes the application becomes slow or unresponsive. A SysOps administrator finds that some instances are experiencing a high CPU load. The Auto Scaling group cannot scale out because the company is reaching the EC2 instance service quota. The SysOps administrator needs to implement a solution that provides a notification when the company reaches 70% or more of the EC2 instance service quota. Which solution will meet these requirements in the MOST operationally efficient manner?

   • ACreate an AWS Lambda function that lists the EC2 instances, counts the EC2 instances, and compares the total number against the applied quota value by using the Service Quotas API. Configure the Lambda function to publish an Amazon Simple Notification Service (Amazon SNS) notification if the quota utilization is equal to or greater than 70%. Create an Amazon EventBridge rule to invoke the Lambda function.
   • BCreate an AWS Lambda function that lists the EC2 instances, counts the EC2 instances, and compares the total number against the applied quota value by using the Amazon CloudWatch Metrics API. Configure the Lambda function to publish an Amazon Simple Notification Service (Amazon SNS) notification if the quota utilization is equal to or greater than 70%. Create an Amazon EventBridge rule to invoke the Lambda function.
   • CUse the Service Quotas console to create an Amazon CloudWatch alarm for the EC2 instances. Configure the alarm with quota utilization equal to or greater than 70%. Configure the alarm to publish an Amazon Simple Notification Service (Amazon SNS) notification when the alarm enters ALARM state.
   • DCreate an Amazon CloudWatch alarm. Configure the alarm with a threshold of 70% for the CPUUtilization metric for the EC2 instances. Configure the alarm to publish an Amazon Simple Notification Service (Amazon SNS) notification when the alarm enters ALARM state.

   Show answer

   Answer: C

   Explanation

   https://docs.aws.amazon.com/servicequotas/latest/userguide/configure-cloudwatch.html You can create Amazon CloudWatch alarms to notify you when you're close to a quota value threshold. Setting an alarm can help alert you if you need to request a quota increase. To create a CloudWatch alarm for a quota Sign in to the AWS Management Console and open the Service Quotas console at https://console.aws.amazon.com/servicequotas/home. In the navigation pane, choose AWS services and then select a service. Select a quota that supports CloudWatch alarms. If you actively use the quota, utilization appears beneath the quota description. If CloudWatch alarms are supported, the CloudWatch alarms section appears at the bottom of the page. In Amazon CloudWatch alarms, choose Create. For Alarm threshold, choose a threshold. For Alarm name, enter a name for the alarm. This name must be unique within the AWS account. Choose Create.

   Source: Adapted from community discussion — Christina666

   References

   • AWS documentation
   • aws.amazon.com documentation

   Next question

6. Question 226 · 475 in bank

   A SysOps administrator needs to update an AWS account name. What should the SysOps administrator do to accomplish this goal?

   • AAdd the AdministratorAccess policy to the SysOps administrator’s IAM user.
   • BAdd the AWS_ConfigureRole policy to the SysOps administrator’s IAM user.
   • CChange the AWS account name through the AWS Trusted Advisor interface.
   • DSign in as the AWS account root user to make the change.

   Show answer

   Answer: D

   Explanation

   "To edit your AWS account name, root user password, or root user email address" "Minimum permissions" "To perform the following steps, you must have at least the following IAM permissions:" "You must sign in as the AWS account root user, which requires no additional IAM permissions. You can't perform these steps as an IAM user or role." https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-update-root-user.html

   Source: Adapted from community discussion — Gomer

   References

   • AWS documentation

   Next question

7. Question 227 · 475 in bank

   A team of developers is using several Amazon S3 buckets as centralized repositories. Users across the world upload large sets of files to these repositories. The development team's applications later process these files. A SysOps administrator sets up a new S3 bucket, DOC-EXAMPLE-BUCKET, to support a new workload, The rew S3 bucket also receives regular uploads cf large sets of files from users worldwide. When the new S3 bucket is put into production, the upload performance from certain geographic areas is lower than the upload performance that the existing $3 buckets provide What should the SysOps administrator do to remediate this issue?

   • AProvision an Amazon ElastiCache for Redis cluster for the new S3 bucket. Provide the developers with the configuration endpoint of the cluster for use in their API calls
   • BAdd the new S3 bucket to a new Amazon CloudFront distribution. Provide the developers with the domain name of the new distribution for use in their API calls.
   • CEnable S3 Transfer Acceleration for the new S3 bucket. Verify that the developers are using the DOC-EXAMPLE-BUCKET.s3-accelerate.amazonaws.com endpoint name in their API calls.
   • DUse S3 multipart upload for the new S3 bucket. Verify that the developers are using Region-specific S3 endpoint names such as DOC-EXAMPLE-BUCKETS3, [Region] amazonaws.com in their API calls.

   Show answer

   Answer: C

   Explanation

   After researching this realize that the "s3-accelerate" domain in the special URL (e.g.: "acloudguru.s3-accelerate.amazonaws.com") will resolve to the nearest edge globally, and therefore there is only one url that can be used globally to make use of transfer acceleration, albeit at some additional cost for the data transfer. Setting must be enabled on bucket though. The URLs are worth reviewing (at least they were to me) https://docs.aws.amazon.com/AmazonS3/latest/userguide/transfer-acceleration-examples.html https://www.javatpoint.com/aws-s3-transfer-acceleration etc.

   Source: Adapted from community discussion — Gomer

   References

   • AWS documentation

   Next question

8. Question 228 · 475 in bank

   A SysOps administrator wants to use AWS Systems Manager Patch Manager to automate the process of patching Amazon EC2 Windows instances. The SysOps administrator wants to ensure that patches are auto-approved 2 days after the release date for development instances. Patches also must be auto-approved 5 days after the release date for production instances. Maintenance must occur only during a 2-hour window for all instances. Which solution will meet these requirements?

   • AUse tags to identify development instances and production instances. In Patch Manager, create two patch groups and one patch baseline. Add an auto-approval delay to each patch group. Create a single maintenance window.
   • BUse tags to identify development instances and production instances. In Patch Manager, create two patch groups and two patch baselines. Specify an auto-approval delay in each of the patch baselines. Create a single maintenance window.
   • CUse tags to identity development instances and production instances. In Patch Manager, create two patch groups and one patch baseline, Create two separate maintenance windows, each with an auto-approval delay.
   • DUse tags to identify development instances. In Patch Manager, create one patch group and one patch baseline. Specify auto-approval delays in the patch baseline, Add development instances to the new patch group. Use predefined Patch Manager patch baselines for all remaining instances. Create a single maintenance window.

   Show answer

   Answer: B

   Explanation

   Based requirements and my analyzis of link, I concluded "B" was only plausible solution: Two patch groups using same maintenance window (the patch groups defines maintenance Windows) - Development 2-hour maintenance window (same as Production) - Production 2-hour maintenance window (same as Development) Two patch baselines with individual Auto-Approval rules with unique Auto-Approval Delays (the patch baseline defines rules for auto-approving patches, which rules can contain auto-approval delays) - Development Auto-approval Rule to auto-approved 2 days after the release date development instances (unique Auto-Approval Delay) - Producton Production Auto-approval Rule to auto-approved 5 days after the release date development instances (unique Auto-Approval Delay) https://aws.amazon.com/blogs/mt/patching-your-windows-ec2-instances-using-aws-systems-manager-patch-manager/

   Source: Adapted from community discussion — Gomer

   References

   • AWS documentation

   Next question

9. Question 229 · 475 in bank

   A SysOps administrator must analyze Amazon CloudWatch logs across 10 AWS Lambda functions for historical errors. The logs are in JSON format and are stored in Amazon S3. Errors sometimes do not appear in the same field, but all errors begin with the same string prefix. What is the MOST operationally efficient way for the SysOps administrator to analyze the log files?

   • AUse S3 Select to write a query to search for errors. Run the query across all log groups of interest.
   • BCreate an AWS Glue processing job to index the logs of interest. Run a query in Amazon Athena to search for errors.
   • CUse Amazon CloudWatch Logs Insights to write a query to search for errors. Run the query across all log groups of interest.
   • DUse Amazon CloudWatch Contributor Insights to create a rule. Apply the rule across all log groups of interest.

   Show answer

   Answer: B

   Explanation

   I vote for B. Seems to me this is the right answer. https://docs.aws.amazon.com/athena/latest/ug/glue-athena.html Why not A Looks like S3 select has several limitations. https://docs.aws.amazon.com/AmazonS3/latest/userguide/selecting-content-from-objects.html According to the question "Errors sometimes do not appear in the same field". So I assume we need more advanced tool. Why not C,D Both Amazon CloudWatch Logs Insights and Amazon CloudWatch Contributor Insights process logs from AWS CloudWatch log groups. But in our case we have logs stored on S3. https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/ContributorInsights-CreateRule.html https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AnalyzingLogData.html

   Source: Adapted from community discussion — xSohox

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

10. Question 230 · 475 in bank

    A company has a policy that all Amazon EC2 instance logs must be published to Amazon CloudWatch Logs. A SysOps administrator is troubleshooting an EC2 instance that is running Amazon Linux 2. The EC2 instance is not publishing logs to CloudWatch Logs. The Amazon CloudWatch agent is running on the EC2 instance, and the agent configuration file is correct. What should the SysOps administrator do to resolve the issue?

    • AConfigure the AWS CLI on the EC2 instance. Create a cron job that calls the PutLogEvents API operation to push the log files to CloudWatch every 5 minutes.
    • BInspect the retention period of the CloudWatch Logs log group. Ensure that the retention period is set to a value that is greater than 1 day.
    • CSet up an Amazon Kinesis data stream that is running in the same AWS Region as the EC2 instance. Configure the CloudWatch agent on the EC2 instance to send CloudWatch events to the data stream.
    • DEnsure that the IAM role that is attached to the EC2 instance has permissions in CloudWatch Logs for the CreateLogGroup, CreateLogStream, PutLogEvents, and DescribeLogStreams actions.

    Show answer

    Answer: D

    Explanation

    D Amazon EC2 instances need the appropriate permissions to interact with Amazon CloudWatch Logs. These permissions are granted through an IAM (Identity and Access Management) role attached to the EC2 instance.

    Source: Adapted from community discussion — xile1021

    References

    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SOA-C02 practice, question 221. 475 questions available.