SOA-C02 practice questions 231–240

1. Question 231 · 475 in bank

   A company runs a workload on an Amazon EC2 instance. The workload needs a temporary cache that contains data that changes frequently. The workload does not need to retain the cache across instance restarts. Which storage option will provide the HIGHEST performance for the cache?

   • AGeneral Purpose SSD (gp3) Amazon Elastic Block Store (Amazon EBS) volume
   • BProvisioned IOPS SSD (io2) Amazon Elastic Block Store (Amazon EBS) volume
   • CThroughput Optimized HDD (st1) Amazon Elastic Block Store (Amazon EBS) volume
   • DEC2 instance store

   Show answer

   Answer: D

   Explanation

   I'm sure the "Instance Store" volume is actually stored in local memory, which is why it is non-persistent but will also always have higher performance than any attached EBS volume.

   Source: Adapted from community discussion — Gomer

   References

   • AWS documentation

   Next question

2. Question 232 · 475 in bank

   A company runs multiple workloads across an organization in AWS Organizations. The company's finance team needs detailed dashboards to track cost changes and provide detailed cost metrics. The finance team needs to track trends as granular as every hour. What should a SysOps administrator do to meet these requirements in the MOST operationally efficient way?

   • AGenerate Amazon CloudWatch dashboards by using CloudWatch insights and AWS Cost Explorer data.
   • BGenerate an AWS Cost and Usage Report. Store the report in Amazon S3. Use Amazon Athena to query the data. Use Amazon QuickSight to develop dashbosrds based on the data in the AWS Cost and Usage Report.
   • CCreate an AWS Lambda function that runs once a day and assumes a role in every account in the organization. Configure the Lambda function to read AWS Cost Explorer data in each account and to store the cost data in an Amazon S3 bucket. Use Amazon Athena to query the data. Use Amazon QuickSight to display the data in dashboards.
   • DCreate an IAM user for the finance team. Grant permissions to the IAM user to view AWS Cost Explorer data and billing data in the management account.

   Show answer

   Answer: B

   Explanation

   My research suggests that because of the hourly granularity requirement, "B" is right answer. Take a look at the URLs and Cloud Intelligence Dashboards Framework graphic showing all the tools in "B": "You can extract the cost data of applications deployed on AWS through AWS Cost and Usage Report (AWS CUR), which contains the most comprehensive set of cost and usage data available. The CUR can be delivered to a specific Amazon S3 bucket, hourly, daily or weekly based on your selection." https://aws.amazon.com/blogs/mt/choose-create-and-track-your-unit-metrics-for-your-applications/ https://aws.amazon.com/blogs/awsmarketplace/using-cudos-dashboard-visualizations-aws-marketplace-spend-visibility-optimization/ https://wellarchitectedlabs.com/cost/200_labs/200_cloud_intelligence/ https://wellarchitectedlabs.com/Cost/200_Cloud_Intelligence/Images/CIDframework.png?classes=lab_picture_large

   Source: Adapted from community discussion — Gomer

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

3. Question 233 · 475 in bank

   A company has a core application that must run 24 hours a day, 7 days a week. The application uses Amazon EC2. AWS Fargate, and AWS Lambda. The company uses a combination of operating systems across different AWS Regions. The company needs to maximize cost savings while committing to a pricing model that offers flexibility to make changes. What should the company do to meet these requirements?

   • APurchase a Compute Savings Plan that is based on Savings Plans recommendations
   • BPurchase an EC2 Instance Savings Plan that covers the EC2 instance types and the Fargate and Lambda vCPU equivalents.
   • CPurchase a Reserved Instance for the instance types, operating systems, Region, and tenancy,
   • DUse EC2 Spot Instances that match the type and size of existing instances that run in each Region.

   Show answer

   Answer: A

   Explanation

   Savings Plans is another flexible pricing model that provides savings of up to 72% on your AWS compute usage. This pricing model offers lower prices on Amazon EC2 instances usage, regardless of instance family, size, OS, tenancy or AWS Region, and also applies to AWS Fargate and AWS Lambda usage. B is correct answer 100000%

   Source: Adapted from community discussion — 1234ahskes

   References

   • AWS documentation

   Next question

4. Question 234 · 475 in bank

   A company’s architecture team must receive immediate email notification whenever new Amazon EC2 instances are launched in the company's main AWS production account. ‘What should a SysOps administrator do to meet this requirement?

   • ACreate a user data script that sends an email message through a smart host connector. Include the architecture team's email address in the user data script as the recipient. Ensure that all new EC2 instances include the user data script as part of a standardized build process.
   • BCreate an Amazon Simple Notification Service (Amazon SNS) topic and a subscription that uses the email protocol. Enter the architecture team's email address as the subscriber. Create an Amazon EventBridge rule that reacts when EC2 instances are launched. Specify the SNS topic as the rule's target.
   • CCreate an Amazon Simple Queue Service (Amazon SQS) queue and a subscription that uses the email protocol. Enter the architecture team's email address as the subscriber. Create an Amazon EventBridge rule that reacts when EC2 instances are launched. Specify the SQS queue as the rule's target.
   • DCreate an Amazon Simple Notification Service (Amazon SNS) topic. Configure AWS Systems Manager to publish EC2 events to the SNS topic. Create an AWS Lambda function to poll the SNS topic. Configure the Lambda function to send any messages to the architecture team's email address.

   Show answer

   Answer: B

   Next question

5. Question 235 · 475 in bank

   A SysOps administrator is using Amazon EC2 instances to host an application. The SysOps administrator needs to grant permissions for the application to access an Amazon DynamoDB table. Which solution will meet this requirement?

   • ACreate access keys to access the DynamoDB table. Assign the access keys to the EC2 instance profile.
   • BCreate an EC2 key pair to access the DynamoDB table. Assign the key pair to the EC2 instance profile.
   • CCreate an IAM user to access the DynamoDB table. Assign the IAM user to the EC2 instance profile.
   • DCreate an IAM role to access the DynamoDB table. Assign the IAM role to the EC2 instance profile.

   Show answer

   Answer: D

   Explanation

   Access to Amazon DynamoDB requires credentials. Those credentials must have permissions to access AWS resources, such as an Amazon DynamoDB table or an Amazon Elastic Compute Cloud (Amazon EC2) instance. The following sections provide details on how you can use AWS Identity and Access Management (IAM) and DynamoDB to help secure access to your resources. https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/authentication-and-access-control.html

   Source: Adapted from community discussion — princajen

   References

   • AWS documentation

   Next question

6. Question 236 · 475 in bank

   A SysOps administrator manages an AWS account where developers run CPU-intensive tasks on Amazon EC2 instances. The tasks can take several days to finish running and sometimes need to be repeated several times. The developers often forget to terminate the instances when the tasks are complete. The SysOps administrator needs to implement a solution to monitor EC2 CPU utilization and automatically terminate underutilized instances. Which solution will meet these requirements?

   • AConfigure an Amazon GuardDuty finding that is based on EC2 CPU utilization. Associate an AWS Lambda function with the GuardDuty finding to terminate any instances that are identified as idle.
   • BConfigure an Amazon Simple Notification Service (Amazon SNS) topic to receive EC2 utilization messages from the AWS Health Dashboard. Create an AWS Lambda function. Subscribe the Lambda function to the SNS topic. Use the ec2.stop_instances operation to terminate idle instances.
   • CConfigure a Low Utilization Amazon EC2 Instances check in AWS Trusted Advisor to publish status changes to an Amazon Simple Notification Service (Amazon SNS) topic. Create an AWS Lambda function. Subscribe the Lambda function to the SNS topic. Use the ec2.stop_instances operation to terminate idle instances.
   • DConfigure an Amazon EventBridge rule for the Low Utilization Amazon EC2 Instances check in AWS Trusted Advisor. Select the EC2 Terminatelnstances API call as the target.

   Show answer

   Answer: D

   Explanation

   I concur with D based on the link. I know there other/better ways to do this without trusted advisor, but they are not listed in the choices. The other choices are essentially convoluted gibberish. https://docs.aws.amazon.com/awssupport/latest/user/cloudwatch-events-ta.html

   Source: Adapted from community discussion — Gomer

   References

   • AWS documentation

   Next question

7. Question 237 · 475 in bank

   A company has several business units that want to use Amazon EC2. The company wants to require all business units to provision their EC2 instances by using only approved EC2 instance configurations. What should a SysOps administrator do to implement this requirement?

   • ACreate an EC2 instance launch configuration. Allow the business units to launch EC2 instances by specifying this launch configuration in the AWS Management Console.
   • BDevelop an IAM policy that limits the business units to provision EC2 instances only. Instruct the business units to launch instances by using an AWS CloudFormation template.
   • CPublish a product and launch constraint role for EC2 instances by using AWS Service Catalog. Allow the business units to perform actions in AWS Service Catalog only.
   • DShare an AWS CloudFormation template with the business units. Instruct the business units to pass a role to AWS CloudFormation to allow the service to manage EC2 instances.

   Show answer

   Answer: C

   Explanation

   Im going with service catalogue on this one. https://docs.aws.amazon.com/servicecatalog/latest/adminguide/what-is_concepts.html#what-is_concepts-product A product is an IT service that you want to make available for deployment on AWS. A product consists of one or more AWS resources, such as EC2 instances, storage volumes, databases, monitoring configurations, and networking components, or packaged AWS Marketplace products. A product can be a single compute instance running AWS Linux, a fully configured multi-tier web application running in its own environment, or anything in between.

   Source: Adapted from community discussion — DeaconStJohn

   References

   • AWS documentation
   • AWS documentation

   Next question

8. Question 238 · 475 in bank

   A SysOps administrator needs to secure the credentials for an Amazon RDS database that is created by an AWS CloudFormation template. The solution must encrypt the credentials and must support automatic rotation. Which solution will meet these requirements?

   • ACreate an AWS::SecretsManager::Secret resource in the CloudF ormation template. Reference the credentials in the AWS::RDS::DBInstance resource by using the resolve:secretsmanager dynamic reference.
   • BCreate an AWS::SecretsManager::Secret resource in the CloudFormation template. Reference the credentials in the AWS::RDS::DBInstance resource by using the resolve:ssm-secure dynamic reference.
   • CCreate an AWS::SSM::Parameter resource in he CloudFormation template. Reference the credentias in the AWS::RDS::DBInstance resource by using the resolve:ssm dynamic reference.
   • DCreate parameters for the database credentials in the CloudFormation template. Use the Ref intrinsic function to provide the credentials to the AWS::RDS::DBInstance resource.

   Show answer

   Answer: A

   References

   • AWS documentation
   • AWS documentation

   Next question

9. Question 239 · 475 in bank

   A company wants to track its expenditures for Amazon EC2 and Amazon RDS within AWS. The company decides to implement more rigorous tagging requirements for resources in its AWS accounts. A SysOps administrator needs to identify all noncompliant resources. What is the MOST operationally efficient solution that meets this requirement?

   • ACreate a rule in Amazon EventBridge that invokes a custom AWS Lambda function that will evaluate all created or updated resources for the specified tags.
   • BCreate a rule in AWS Config that invokes a custom AWS Lambda function that will evaluate all resources for the specified tags.
   • CCreate a rule in AWS Config with the required-tags managed rule to evaluate all resources for the specified tags.
   • DCreate a rule in Amazon EventBridge with a managed rule to evaluate all created or updated resources for the specified tags.

   Show answer

   Answer: C

   Explanation

   required-tags "Checks if your resources have the tags that you specify. For example, you can check whether your Amazon EC2 instances have the CostCenter tag." https://docs.aws.amazon.com/config/latest/developerguide/required-tags.html

   Source: Adapted from community discussion — Gomer

   References

   • AWS documentation
   • AWS documentation

   Next question

10. Question 240 · 475 in bank

    Select 2

    A company creates a new Amazon FSx for Windows File Server file system. To help manage costs, the company configures the storage capacity for the file system with minimal room for growth. The company creates an Amazon Simple Notification Service (Amazon SNS) topic in the same AWS account whore the file system resides. The company subscribes a SysOps administrator's email address to the SNS topic. The SysOps administrator needs to receive email notification when the file system has less than 100 GB of space available. Which combination of steps should the SysOps administrator take to meet this requirement? (Choose two.)

    • ACreate an Amazon EventBridge rule for when the FreeStorageCapacity metric is less than or equal to 100,000,000,000 bytes (100 GB).
    • BCreate an Amazon CloudWatch alarm for when the FreeStorageCapacity metric is less than or equal to 100,000,000,000 bytes (100 GB).
    • CCreate an AWS Lambda function that will run when the Amazon CloudWatch alarm enters ALARM state. Configure the Lambda function to publish to the SNS topic.
    • DConfigure the Amazon EventBridge rule's alarm action to publish to the SNS topic when the rule enters ALARM state.
    • EConfigure the Amazon CloudWatch alarm action to publish to the SNS topic when the alarm enters ALARM state.

    Show answer

    Answer: BE

    Explanation

    The following are the steps involved in creating an Amazon CloudWatch alarm and configuring it to publish to an Amazon SNS topic: Go to the Amazon CloudWatch console. In the navigation pane, choose Alarms. Choose Create alarm. In the Alarm details section, do the following: For Metric, choose Amazon FSx for Windows File Server. For Namespace, choose FSxWindowsFileServer. For Metric name, choose FreeStorageCapacity. For Statistic, choose Average. For Threshold, enter 100,000,000,000. For Evaluation period, choose 1 minute. For Alarm actions, choose Add action and then choose SNS topic. In the Select an SNS topic dialog box, choose the SNS topic that you created for the SysOps administrator. Choose Create alarm. Once the alarm is created, it will start monitoring the FreeStorageCapacity metric for the Amazon FSx for Windows File Server file system. If the metric falls below the threshold that you specified, the alarm will enter ALARM state and publish a notification to the SNS topic. The SysOps administrator will then receive an email notification that the file system is running low on space.

    Source: Adapted from community discussion — Shoppe

    References

    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SOA-C02 practice, question 231. 475 questions available.