SOA-C02 practice questions 241–250

1. Question 241 · 475 in bank

   A company decides to stop non-production Amazon EC2 instances during the EC2 instances. The company's IT manager must receive notification in near real time whenever an EC2 instance that has an environment type tag value of non-production is started during the night. Which solution will meet this requirement with the MOST operational efficiency?

   • AConfigure an AWS Lambda function with an SMTP client library. Subscribe the Lambda function to the AWS Health Dashboard to receive notification whenever an EC2 instance is in the running state. Configure the Lambda function to use Amazon Pinpoint to send email notifications to the IT manager. Deploy a second Lambda function to throttle calls from the first Lambda function during the daytime.
   • BDeploy an AWS Lambda function that queries the Amazon EC2 API to determine the state of each EC2 instance. Use the EC2 instance scheduler to configure the Lambda function to run every minute during the night and to send an email notification to the IT manager for each non-production EC2 instance that is in the running state.
   • CCreate an Amazon EventBridge rule that includes the EC2 Instance State-change Notification event type. Filter the event to capture only the running state. Create an AWS Lambda function as a target of the rule. Configure the Lambda function to check the current time and the EC2 instances’ tags to determine the environment type. Create an Amazon Simple Notification Service (Amazon SNS) topic as a target of the Lambda function for notifications. Subscribe the IT manager's email address to the SNS topic.
   • DStore the EC2 instance metadata, including the environment type, in an Amazon DynamoDB table. Deploy a custom application to an EC2 instance. Configure the custom application to poll the DynamoDB data every minute during the night and to query the Amazon EC2 API to determine the state of each instance. Additionally, configure the custom application to send an email notification to the IT manager for each non-production EC2 instance that is in the running state.

   Show answer

   Answer: C

   Explanation

   C Options A and B involve continuously running Lambda functions or custom applications that poll the EC2 instances, which is less efficient and cost-effective than event-driven solutions. Option D involves storing EC2 instance metadata in DynamoDB and continuously polling, which is also less efficient and more complex than using event-driven services like EventBridge and Lambda.

   Source: Adapted from community discussion — xile1021

   Next question

2. Question 242 · 475 in bank

   Select 2

   A company’s SysOps administrator manages a fleet of Windows Amazon EC2 instances that run in a single AWS account. The instances have a tag that includes a key of “OS" and a value of "Windows." The company uses AWS Systems Manager to patch the instances. The company has installed the Amazon CloudWatch agent on the instances, but the configuration is inconsistent. The SysOps administrator needs to reconfigure every instance to use the same predefined CloudWatch configuration. Which combination of steps will meet these requirements? (Choose two.)

   • AStore the CloudWatch agent configuration file in an Amazon S3 bucket.
   • BStore the contents of the CloudWatch agent configuration file in Systems Manager OpsCenter.
   • CStore the contents of the CloudWatch agent configuration file in Systems Manager Parameter Store.
   • DCreate a Systems Manager State Manager association to run the AmazonCloudWatch-ManageAgent Systems Manager Run Command document. Select Systems Manager as an optional configuration source. Target the instances based on tag values.
   • ECreate a Systems Manager State Manager association to run the AmazonCloudWatch-ManageAgent Systems Manager Run Command document. Configure the document to use the S3 bucket location as the configuration source. Target the instances based on tag value.

   Show answer

   Answer: CD

   Explanation

   I don't know if S3 option works, but I do know AWS documents using Parameter Store to store a CloudWatch agent configuration file, and to start the agent using the config stored in Parameter Store, therefore I know C & D are valid. Here are references: "Uploading the CloudWatch agent configuration file to Systems Manager Parameter Store" https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Agent-Configuration-File-Details.html Command to start CloudWatch agent by loading configuration file previously saved in Systems Manager Parameter store: sudo /opt/aws/amazon-cloudwatch-agent/bin/amazon-cloudwatch-agent-ctl -a fetch-config -m ec2 -s -c ssm:configuration-parameter-store-name https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/install-CloudWatch-Agent-on-EC2-Instance-fleet.html

   Source: Adapted from community discussion — Gomer

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

3. Question 243 · 475 in bank

   A company is experiencing issues with legacy software running on Amazon EC2 instances. Errors occur when the total CPU utilization on the EC2 instances exceeds 80%. A short-term solution is required while the software is being rewritten. A SysOps administrator is tasked with creating a solution to restart the instances when the CPU utilization rises above 80%. Which solution meets these requirements with the LEAST operational overhead?

   • AWrite a script that monitors the CPU utilization of the EC2 instances and reboots the instances when utilization exceeds 80%. Run the script as a cron job.
   • BAdd an Amazon CloudWatch alarm for CPU utilization and configure the alarm action to reboot the EC2 instances.
   • CCreate an Amazon EventBridge rule using the predefined patterns for CPU utilization of the EC2 instances. When utilization exceeds 80%, invoke an AWS Lambda function to restart the instances.
   • DAdd an Amazon CloudWatch alarm for CPU utilization and configure an AWS Systems Manager Automation runbook to reboot the EC2 instances when utilization exceeds 80%.

   Show answer

   Answer: B

   Explanation

   I'm inclined to change my vote to "B" because I found a URLl detailing the process just using CloudWatch alarms (no SSM). I do know AWS Config can reboot EC2 using the SSM RestartEC2Instance runbook. Would seem cleaner if CloudWatch alarm could call a runbook like AWS Config. It's possible CloudWatch actually calling the runbook in the background. see: "Adding reboot actions to Amazon CloudWatch alarms" in... https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/UsingAlarmActions.html

   Source: Adapted from community discussion — Gomer

   References

   • AWS documentation

   Next question

4. Question 244 · 475 in bank

   A SysOps administrator launches an Amazon EC2 instance in a private subnet of a VPC. When the SysOps administrator attempts a curl command from the command line of the EC2 instance, the SysOps administrator cannot connect to https:www.example.com. What should the SysOps administrator do to resolve this issue?

   • AEnsure that there is an outbound security group for port 443 to 0.0.0.0/0.
   • BEnsure that there is an inbound security group for port 443 from 0.0.0.0/0.
   • CEnsure that there is an outbound network ACL for ephemeral ports 1024-66535 to 0.0.0.0/0.
   • DEnsure that there is an outbound network ACL for port 80 to 0.0.0.0/0.

   Show answer

   Answer: A

   Explanation

   Inbound security group rules control the inbound traffic to an EC2 instance. Since the SysOps administrator is attempting a curl command from the EC2 instance to access a website on port 443 (HTTPS), an inbound security group rule needs to be added to allow incoming traffic on port 443. Option B suggests adding an inbound security group rule for port 443 from 0.0.0.0/0, which allows traffic from any IP address to access the EC2 instance on port 443. This will enable the SysOps administrator to establish an outbound connection from the EC2 instance to www.example.com on port 443 and access the website successfully. Therefore, by adding an inbound security group rule for port 443 from 0.0.0.0/0, the SysOps administrator can resolve the issue and establish a connection to https://www.example.com.

   Source: Adapted from community discussion — Shoppe

   References

   • repost.aws documentation

   Next question

5. Question 245 · 475 in bank

   A SysOps administrator needs to implement a backup strategy for Amazon EC2 resources and Amazon RDS resources. The backup strategy must meet the following retention requirements: • Daily backups: must be kept for 6 days • Weekly backups: must be kept for 4 weeks: • Monthly backups: must be kept for 11 months • Yearly backups: must be kept for 7 years Which backup strategy will meet these requirements with the LEAST administrative effort?

   • AUse Amazon Data Lifecycle Manager to create an Amazon Elastic Block Store (Amazon EBS) snapshot policy. Create tags on each resource that needs to be backed up. Create multiple schedules according to the requirements within the policy. Set the appropriate frequency and retention period.
   • BUse AWS Backup to create a new backup plan for each retention requirement with a backup frequency of daily, weekly, monthly, or yearly. Set the retention period to match the requirement. Create tags on each resource that needs to be backed up. Set up resource assignment by using the tags.
   • CCreate an AWS Lambda function. Program the Lambda function to use native tooling to take backups of file systems in Amazon EC2 and to make copies of databases in Amazon RDS. Create an Amazon EventBridge rule to invoke the Lambda function.
   • DUse Amazon Data Lifecycle Manager to create an Amazon Elastic Block Store (Amazon EBS) snapshot policy. Create tags on each resource that needs to be backed up. Set up resource assignment by using the tags. Create multiple schedules according to the requirements within the policy. Set the appropriate frequency and retention period. In Amazon RDS, activate automated backups on the required DB instances.

   Show answer

   Answer: B

   Explanation

   Has to be AWS Backup since "EBS snapshot" isn't mentioned in requirements. "Use Amazon Data Lifecycle Manager when you want to automate the creation, retention, and deletion of EBS snapshots. Use AWS Backup to manage and monitor backups across the AWS services you use, including EBS volumes, from a single plac" https://aws.amazon.com/backup/faqs/

   Source: Adapted from community discussion — Gomer

   References

   • AWS documentation
   • AWS documentation

   Next question

6. Question 246 · 475 in bank

   A SysOps administrator wants to protect objects in an Amazon S3 bucket from accidental overwrite and deletion. Noncurrent objects must be kept for 90 days and then must be permanently deleted. Objects must reside within the same AWS Region as the original S3 bucket. Which solution meets these requirements?

   • ACreate an Amazon Data Lifecycle Manager (Amazon DLM) lifecycle policy for the S3 bucket. Add a rule to the lifecycle policy to delete noncurrent objects after 90 days.
   • BCreate an AWS Backup policy for the S3 bucket. Create a backup rule that includes a lifecycle to expire noncurrent objects after 90 days.
   • CEnable S3 Cross-Region Replication on the S3 bucket. Create an S3 Lifecycle policy for the bucket to expire noncurrent objects after 90 days.
   • DEnable S3 Versioning on the S3 bucket. Create an S3 Lifecycle policy for the bucket to expire noncurrent objects after 90 days.

   Show answer

   Answer: D

   Explanation

   Enabling Versioning on the S3 bucket will protect accidental overwritten and deletion of data. Versioning is same as 'Soft-delete' in an Azure!

   Source: Adapted from community discussion — Anthony053

   Next question

7. Question 247 · 475 in bank

   An application team uses an Amazon Aurora MySQL DB cluster with one Aurora Replica. The application team notices that the application read performance degrades when user connections exceed 200. The number of user connections is typically consistent around 180, with occasional sudden increases above 200 connections. The application team wants the application to automatically scale as user demand increases or decreases. Which solution will meet these requirements?

   • AMigrate to a new Aurora multi-master DB cluster. Modify the application database connection string.
   • BModify the DB cluster by changing to serverless mode whenever user connections exceed 200.
   • CCreate an auto scaling policy with a target metric of 195 DatabaseConnections.
   • DModify the DB cluster by increasing the Aurora Replica instance size.

   Show answer

   Answer: C

   References

   • AWS documentation

   Next question

8. Question 248 · 475 in bank

   A company hosts a production database on an Amazon Elastic Block Store (Amazon EBS) backed Amazon EC2 instance. As part of an annual disaster recovery exercise, the company needs to restore recent EBS snapshots to a new EC2 instance in a second Availability Zone. After the snapshots are restored to EBS volumes, the resulting volumes must deliver all of their provisioned performance. The company must perform validation tests on the restored data as quickly as possible. Which configuration will meet these requirements?

   • AEnable EBS fast snapshot restore (FSR) on the snapshots for the second Availability Zone. Create new EBS volumes in the second Availability Zone from the snapshots. Attach the new EBS volumes to a new EC2 instance.
   • BEnable EBS fast snapshot restore (FSR) on the snapshots for the current Availability Zone. Create new EBS volumes in the second Availability Zone from the snapshots, Attach the new EBS volumes to a new EC2 instance.
   • CSpecify Provisioned IOPS on the snapshots, Create new EBS volumes in the second Availability Zone from the snapshots. Attach the new EBS volumes to a new EC2 instance.
   • DSpecify Provisioned IOPS on the existing EBS volumes. Create the snapshots. After the snapshots are completed, create new EBS volumes in the second Availability Zone from the snapshots. Attach the new EBS volumes to a new EC2 instance.

   Show answer

   Answer: A

   Explanation

   I think the point is that a fast snapshot restore must be enabled on the snapshot in same AZ where the new volume will be "To get started, enable fast snapshot restore for specific snapshots in specific Availability Zones. Each snapshot and Availability Zone pair refers to one fast snapshot restore." "When you create a volume from one of these snapshots in one of its enabled Availability Zones, the volume is restored using fast snapshot restore." https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-fast-snapshot-restore.html https://aws.amazon.com/blogs/aws/new-amazon-ebs-fast-snapshot-restore-fsr/

   Source: Adapted from community discussion — Gomer

   References

   • AWS documentation
   • AWS documentation

   Next question

9. Question 249 · 475 in bank

   A SysOps administrator is responsible for a legacy, CPU-heavy application. The application can only be scaled vertically. Currently, the application is deployed on a single t3.large Amazon EC2 instance. The system is showing 90% CPU usage and significant performance latency after a few minutes. What change should be made to alleviate the performance problem?

   • AChange the Amazon EBS volume to Provisioned IOPs.
   • BUpgrade to a compute-optimized instance.
   • CAdd additional t2.large instances to the application.
   • DPurchase Reserved Instances.

   Show answer

   Answer: B

   Explanation

   B. Upgrade to a compute-optimized instance. The issue here is that the current t3.large instance is hitting 90% CPU usage and experiencing significant performance latency, indicating that the workload is CPU-bound. So upgrading to a compute-optimized instance would likely provide more CPU power, which is what the application needs. Compute-optimized instances are designed for applications that require a higher ratio of vCPUs to memory. Changing the Amazon EBS volume to Provisioned IOPS (option A) would improve disk performance, but in this scenario, the bottleneck seems to be the CPU, not disk I/O. Adding additional t2.large instances (option C) would distribute the load but might not solve the underlying issue of the application being CPU-bound on a single instance. Purchasing Reserved Instances (option D) would save costs but wouldn't directly address the performance issue. https://aws.amazon.com/ec2/instance-types/#Compute_Optimized

   Source: Adapted from community discussion — joshnort

   References

   • AWS documentation

   Next question

10. Question 250 · 475 in bank

    A user is connected to an Amazon EC2 instance in a private subnet. The user is unable to access the internet from the instance by using the following curl command: curl http:/www.example.com. A SysOps administrator reviews the VPC configuration and learns the following information: • The private subnet has a route to a NAT gateway for CIDR 0.0.0.0/0 • The outbound security group for the EC2 instance contains one rule: outbound for port 443 to CIDR 0.0.0.0/0 • The inbound security group for the EC2 instance allows ports 22 and 443 from the user's IP address. • The inbound network ACL for the subnet allows port 22 and port range 1024-65535 from CIDR 0.0.0.0/0 Which action will allow the user to complete the curl request successfully?

    • AAdd an additional inbound network ACL rule for port 80 to CIDR 0.0.0.0/0.
    • BAdd an additional inbound security group rule for port 80 to CIDR 0.0.0.0/0.
    • CAdd an additional outbound security group rule for port 80 to CIDR 0.0.0.0/0.
    • DAdd an additional outbound security group rule for port 80 to the user's IP address.

    Show answer

    Answer: C

    Explanation

    The curl command is trying to access a website using HTTP, which uses port 80. The outbound security group for the EC2 instance currently only allows outbound traffic on port 443, which is used for HTTPS. To allow the user to complete the curl request successfully, an additional outbound security group rule for port 80 to CIDR 0.0.0.0/0 should be added. So, the correct answer would be C. Add an additional outbound security group rule for port 80 to CIDR 0.0.0.0/0.

    Source: Adapted from community discussion — [Removed]

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SOA-C02 practice, question 241. 475 questions available.