SOA-C02 practice questions 251–260

1. Question 251 · 475 in bank

   A company’s financial department needs to view the cost details of each project in an AWS account. A SysOps administrator must perform the initial configuration that is required to view cost for each project in Cost Explorer. Which solution will meet this requirement?

   • AActivate cost allocation tags. Add a project tag to the appropriate resources.
   • BConfigure consolidated billing. Create AWS Cost and Usage Reports.
   • CUse AWS Budgets. Create AWS Budgets reports.
   • DUse cost categories to define custom groups that are based on AWS cost and usage dimensions.

   Show answer

   Answer: A

   Explanation

   Cost allocation tags are used to track AWS costs on a detailed level. By activating cost allocation tags and adding a project tag to the appropriate resources, the financial department will be able to view the cost details of each project in Cost Explorer. https://wa.aws.amazon.com/wat.concept.costalloctag.en.html#:~:text=You%20can%20use%20tags%20to,and%20track%20your%20AWS%20costs.

   Source: Adapted from community discussion — [Removed]

   References

   • aws.amazon.com documentation

   Next question

2. Question 252 · 475 in bank

   A SysOps administrator is managing a web application that runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances run in an EC2 Auto Scaling group. The administrator wants to set an alarm for when all target instances associated with the ALB are unhealthy. Which condition should be used with the alarm?

   • AAWS/ApplicationELB HealthyHostCount <= 0
   • BAWS/ApplicationELB UnhealthyHostCount >= 1
   • CAWS/EC2 StatusCheckFailed <= 0
   • DAWS/EC2 StatusCheckFailed >= 1

   Show answer

   Answer: A

   Explanation

   The question states: The administrator wants to set an alarm for when all target instances associated with the ALB are unhealthy. A. AWS/ApplicationELB HealthyHostCount <= 0 would trigger the Alarm because all the host are unhealthy. Option B: would trigger if one or more is unhealthy but you would still could have healthy host!

   Source: Adapted from community discussion — rev2211

   Next question

3. Question 253 · 475 in bank

   A company uses AWS Organizations to manage its multi-account environment. The organization contains a dedicated account for security and a dedicated account for logging. A SysOps administrator needs to implement a centralized solution that provides alerts when a resource metric in any account crosses a standard defined threshold. Which solution will meet these requirements?

   • ADeploy an AWS CloudFormation stack set to the accounts in the organization. Use a template that creates the required Amazon CloudWatch alarms and references an Amazon Simple Notification Service (Amazon SNS) topic in the logging account with publish permissions for all the accounts.
   • BDeploy an AWS CloudFormation stack in each account. Use the stack to deploy the required Amazon CloudWalch alarms and the required Amazon Simple Notification Service (Amazon SNS) topic.
   • CDeploy an AWS Lambda function on a cron job in each account. Configure the Lambda function to read resources that are in the account and to invoke an Amazon Simple Notification Service (Amazon SNS) topic if any metrics cross the defined threshold.
   • DDeploy an AWS CloudFormation change set to the organization. Use a template to create the required Amazon CloudWatch alarms and to send alerts to a verified Amazon Simple Email Service (Amazon SES) identity.

   Show answer

   Answer: A

   Explanation

   The correct answer is A To implement a centralized solution for monitoring resource metrics and receiving alerts across multiple accounts in an AWS Organizations environment, using AWS CloudFormation stack sets is a suitable approach

   Source: Adapted from community discussion — jlmadvig

   Next question

4. Question 254 · 475 in bank

   A company has an application that uses a scheduled AWS Lambda function to retrieve datasets from external sources over the internet. The function is not associated with a VPC. The company is modifying the application to store the information that the Lambda function retrieves on an Amazon RDS DB instance in a private subnet. The VPC has two public subnets and two private subnets. A SysOps administrator must deploy a solution that allows the Lambda function to access the new database and continue to access the internet. Which solution meets these requirements?

   • ACreate a new Lambda function with VPC access and an Elastic IP address. Attach the function to public subnets in two Availability Zones. Associate a security group with the Elastic IP address. Configure the security group outbound rules to allow Lambda to access the required resources.
   • BCreate a new Lambda function with VPC access and two public IP addresses. Attach the function to public subnets in the same Availability Zones that the database uses. Associate a security group with the function. Configure the security group inbound rules to allow Lambda to access the required resources.
   • CReconfigure the Lambda function for VPC access. Add NAT gateways to the public subnets in the VPAdd route table entries in the private subnets to route through the NAT gateways to the internet. Attach the function to the private subnets that support the database. Associate a security group with the function. Configure the security group outbound rules to allow Lambda to access the internet.
   • DReconfigure the Lambda function for VPC access. Attach the function to the private subnets. Add route table entries in the private subnets to route through the internet gateway to the internet. Associate a security group with the subnets. Configure the security group inbound rules to allow Lambda to access the required resources through the internet gateway.

   Show answer

   Answer: C

   Explanation

   The only sane answer is C. Yes, you do not need to reconfigure a Lambda function whenever you want to attach a VPC. Hence, A and B are out. There are already limited Public IPv4 addresses out there, hence the cost effective way is to use NAT gateway/instance (in fact is the only option). Hence, D is out as well.

   Source: Adapted from community discussion — habros

   Next question

5. Question 255 · 475 in bank

   A company is running production workloads that use a Multi-AZ deployment of an Amazon RDS for MySQL db.m6g.xlarge (general purpose) standard DB instance. Users report that they are frequently encountering a “too many connections” error. A SysOps administrator observes that the number of connections on the database is high. The SysOps administrator needs to resolve this issue while keeping code changes to a minimum. Which solution will meet these requirements MOST cost-effectively?

   • AModify the RDS for MySQL DB instance to a larger instance size.
   • BModify the RDS for MySQL DB instance to Amazon DynamoDB.
   • CConfigure RDS Proxy. Modify the application configuration file to use the RDS Proxy endpoint.
   • DModify the RDS for MySQL DB instance to a memory optimized DB instance.

   Show answer

   Answer: C

   Explanation

   The correct answer is C The "too many connections" error indicates that the Amazon RDS for MySQL DB instance is reaching its maximum allowed connections, causing users to encounter issues. RDS Proxy is a highly recommended solution to manage database connections and improve scalability and availability. By implementing RDS Proxy and updating the application's configuration to use the proxy endpoint, you can effectively manage connections and alleviate the "too many connections" issue without making significant code changes.

   Source: Adapted from community discussion — jlmadvig

   Next question

6. Question 256 · 475 in bank

   A company has multiple Amazon EC2 instances that run a resource-intensive application in a development environment. A SysOps administrator is implementing a solution to stop these EC2 instances when they are not in use. Which solution will meet this requirement?

   • AAssess AWS CloudTrail logs to verify that there is no EC2 API activity. Invoke an AWS Lambda function to stop the EC2 instances.
   • BCreate an Amazon CloudWatch alarm to stop the EC2 instances when the average CPU utilization is lower than 5% for a 30-minute period.
   • CCreate an Amazon CloudWatch metric to stop the EC2 instances when the VolumeReadBytes metric is lower than 500 for a 30-minute period.
   • DUse AWS Config to invoke an AWS Lambda function to stop the EC2 instances based on resource configuration changes.

   Show answer

   Answer: B

   Explanation

   Option B, creating an Amazon CloudWatch alarm based on CPU utilization, is a suitable solution for stopping EC2 instances when they are not in use. Here's how it works: Create a CloudWatch alarm: Set up a CloudWatch alarm with the desired configuration, specifying the metric to monitor (CPU utilization) and the threshold to trigger the alarm (average CPU utilization lower than 5% for a 30-minute period). Define the action: Configure the alarm to stop the EC2 instances when the threshold is breached. This can be done by specifying an Amazon EC2 action to stop the instances associated with the alarm. By implementing this solution, the EC2 instances will be automatically stopped when their average CPU utilization falls below 5% for a continuous 30-minute period. This indicates that the instances are not being actively utilized and can be safely stopped to save costs and resources.

   Source: Adapted from community discussion — Pete987

   Next question

7. Question 257 · 475 in bank

   A company has an application that customers use to search for records on a website. The application's data is stored in an Amazon Aurora DB cluster. The application's usage varies by season and by day of the week. The website's popularity is increasing, and the website is experiencing slower performance because of increased load on the DB cluster during periods of peak activity. The application logs show that the performance issues occur when users are searching for information. The same search is rarely performed multiple times. A SysOps administrator must improve the performance of the platform by using a solution that maximizes resource efficiency. Which solution will meet these requirements?

   • ADeploy an Amazon ElastiCache for Redis cluster in front of the DB cluster. Modify the application to check the cache before the application issues new queries to the database. Add the results of any queries to the cache.
   • BDeploy an Aurora Replica for the DB cluster. Modify the application to use the reader endpoint for search operations. Use Aurora Auto Scaling to scale the number of replicas based on load.
   • CUse Provisioned IOPS on the storage volumes that support the DB cluster to improve performance sufficiently to support the peak load on the application.
   • DIncrease the instance size in the DB cluster to a size that is sufficient to support the peak load on the application. Use Aurora Auto Scaling to scale the instance size based on load.

   Show answer

   Answer: B

   Explanation

   B. Caching will not solve the performance issue in this scenario, as the same search is rarely performed multiple times. Thus read replicas will be better.

   Source: Adapted from community discussion — Surferbolt

   Next question

8. Question 258 · 475 in bank

   A company has a web application with a database tier that consists of an Amazon EC2 instance that runs MySQL. A SysOps administrator needs to minimize potential data loss and the time that is required to recover in the event of a database failure. What is the MOST operationally efficient solution that meets these requirements?

   • ACreate an Amazon CloudWatch alarm for the StatusCheckFailed_System metric to invoke an AWS Lambda function that stops and starts the EC2 instance.
   • BCreate an Amazon RDS for MySQL Multi-AZ DB instance. Use a MySQL native backup that is stored in Amazon S3 to restore the data to the new database. Update the connection string in the web application.
   • CCreate an Amazon RDS for MySQL Single-AZ DB instance with a read replica. Use a MySQL native backup that is stored in Amazon S3 to restore the data to the new database. Update the connection string in the web application
   • DUse Amazon Data Lifecycle Manager (Amazon DLM) to take a snapshot of the Amazon Elastic Block Store (Amazon EBS) volume every hour. In the event of an EC2 instance failure, restore the EBS volume from a snapshot.

   Show answer

   Answer: B

   Explanation

   D is incorrect why: While using Amazon DLM for EBS snapshots provides backups, it's not as comprehensive for database use as RDS. In the event of a failure, recovery time would be longer as you would have to manually restore the EBS volume from a snapshot and then attach it to a new EC2 instance.

   Source: Adapted from community discussion — Debugs_Bunny

   Next question

9. Question 259 · 475 in bank

   A company uses AWS CloudFormation to manage a stack of Amazon EC2 instances on AWS. A SysOps administrator needs to keep the instances and all of the instances’ data, even if someone deletes the stack. Which solution will meet these requirements?

   • ASet the DeletionPolicy attribute to Snapshot for the EC2 instance resource in the CloudFormation template.
   • BAutomate backups by using Amazon Data Lifecycle Manager (Amazon DLM).
   • CCreate a backup plan in AWS Backup.
   • DSet the DeletionPolicy attribute to Retain for the EC2 instance resource in the CloudFormation template.

   Show answer

   Answer: D

   References

   • AWS documentation

   Next question

10. Question 260 · 475 in bank

    Accompany wants to monitor the number of Amazon EC2 instances that it is running. The company also wants to automate a service quota increase when the number of instances reaches a specific threshold. Which solution meets these requirements?

    • ACreate an Amazon CloudWatch alarm to monitor Service Quotas. Configure the alarm to invoke an AWS Lambda function to request a quota increase when the alarm reaches the threshold.
    • BCreate an AWS Config rule to monitor Service Quotas. Call an AWS Lambda function to remediate the action and increase the quota.
    • CCreate an Amazon CloudWateh alarm to monitor the AWS Health Dashboard. Configure the alarm to invoke an AWS Lambda function to request a quota increase when the alarm reaches the threshold.
    • DCreate an Amazon CloudWatch alarm to monitor AWS Trusted Advisor service quotas. Configure the alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to increase the quota.

    Show answer

    Answer: A

    Explanation

    Option A leverages Amazon CloudWatch alarms to monitor the Service Quotas metric related to the number of EC2 instances. When the alarm's threshold is breached, it triggers an action to invoke an AWS Lambda function. This Lambda function can be programmed to automatically request a quota increase for the EC2 instances, based on the predetermined conditions set in the alarm.

    Source: Adapted from community discussion — ctd983

    References

    • AWS documentation
    • AWS documentation
    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SOA-C02 practice, question 251. 475 questions available.