SOA-C02 practice questions 311–320

1. Question 311 · 475 in bank

   Select 2

   A SysOps administrator notices that the cache hit ratio for an Amazon CloudFront distribution is less than 10%. The SysOps administrator needs to increase the cache hit ratio for the distribution, improve network performance, and reduce the load on the origin. Which combination of actions should the SysOps administrator take to meet these requirements? (Choose two.)

   • AEnable CloudFront Origin Shield for the required AWS Regions.
   • BChange the viewer protocol policy to use HTTPS only.
   • CAdd a second origin. Create an origin group that includes both origins. Activate CloudFront origin failover.
   • DTurn on automatic compression of objects in the cache behavior settings.
   • EIncrease the CloudFront TTL values in the cache behavior settings.

   Show answer

   Answer: AE

   Explanation

   A: Enable CloudFront Origin Shield for the required AWS Regions. Provides: better cache hit ratio, reduced origin load, and better network performance. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/origin-shield.html E: Increase the CloudFront TTL values in the cache behavior settings. Increasing the Time To Live (TTL) values in the cache behavior settings allows CloudFront to cache objects for a longer period, reducing the number of requests that need to go to the origin server. This can significantly improve the cache hit ratio and reduce the load on the origin server. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Expiration.html

   Source: Adapted from community discussion — joshnort

   References

   • AWS documentation
   • AWS documentation

   Next question

2. Question 312 · 475 in bank

   A custom application must be installed on all Amazon EC2 instances. The application is small, updated frequently, and can be installed automatically. How can the application be deployed on new EC2 instances?

   • ALaunch a script that downloads and installs the application using Amazon EC2 user data.
   • BCreate a custom API using Amazon API Gateway to call an installation executable from an AWS CloudFormation template.
   • CUse AWS Systems Manager to inject the application into an AMI.
   • DConfigure AWS CodePipeline to deploy code changes and updates.

   Show answer

   Answer: A

   Explanation

   User data allows you to run scripts or execute commands on an EC2 instance during launch. You can include the script that downloads and installs the application in the user data section when launching an EC2 instance. This allows the application to be automatically deployed when the instance is launched

   Source: Adapted from community discussion — nharaz

   Next question

3. Question 313 · 475 in bank

   A SysOps administrator wants to securely share an object from a private Amazon S3 bucket with a group of users who do not have an AWS account. What is the MOST operationally efficient solution that will meet this requirement?

   • AAttach an S3 bucket policy that only allows object downloads from the users' IP addresses.
   • BCreate an IAM role that has access to the object. Instruct the users to assume the role.
   • CCreate an IAM user that has access to the object. Share the credentials with the users.
   • DGenerate a presigned URL for the object. Share the URL with the users.

   Show answer

   Answer: D

   References

   • AWS documentation

   Next question

4. Question 314 · 475 in bank

   A company is running an ecommerce application on AWS. The application maintains many open but idle connections to an Amazon Aurora DB cluster. During times of peak usage, the database produces the following error message: "Too many connections." The database clients are also experiencing errors. Which solution will resolve these errors?

   • AIncrease the read capacity units (RCUs) and the write capacity units (WCUs) on the database.
   • BConfigure RDS Proxy. Update the application with the RDS Proxy endpoint.
   • CTurn on enhanced networking for the DB instances.
   • DModify the DB cluster to use a burstable instance type.

   Show answer

   Answer: B

   Explanation

   B-->Using RDS Proxy, you can handle unpredictable surges in database traffic that otherwise might cause issues due to oversubscribing connections or creating new connections at a fast rate. RDS Proxy establishes a database connection pool and reuses connections in this pool without the memory and CPU overhead of opening a new database connection each time. To protect the database against oversubscription, you can control the number of database connections that are created. https://aws.amazon.com/rds/proxy/

   Source: Adapted from community discussion — dinuts

   References

   • AWS documentation
   • AWS documentation

   Next question

5. Question 315 · 475 in bank

   A SysOps administrator is troubleshooting a VPC with public and private subnets that leverage custom network ACLs. Instances in the private subnet are unable to access the internet. There is an internet gateway attached to the public subnet. The private subnet has a route to a NAT gateway that is also attached to the public subnet. The Amazon EC2 instances are associated with the default security group for the VPC. What is causing the issue in this scenario?

   • AThere is a network ACL on the private subnet set to deny all outbound traffic.
   • BThere is no NAT gateway deployed in the private subnet of the VPC.
   • CThe default security group for the VPC blocks all inbound traffic to the EC2 instances.
   • DThe default security group for the VPC blocks all outbound traffic from the EC2 instances.

   Show answer

   Answer: A

   Explanation

   There is a network ACL on the private subnet set to deny all outbound traffic. Network ACLs (Access Control Lists) are stateless and operate at the subnet level. If there is a network ACL on the private subnet that is configured to deny all outbound traffic, it would prevent instances in the private subnet from accessing the internet through the NAT gateway.

   Source: Adapted from community discussion — LemonGremlin

   Next question

6. Question 316 · 475 in bank

   A company stores its internal data within an Amazon S3 bucket. All existing data within the S3 bucket is protected by using server-side encryption with Amazon S3 managed encryption keys (SSE-S3). S3 Versioning is enabled. A SysOps administrator must replicate the internal data to another S3 bucket in a different AWS account for disaster recovery. All the existing data is copied from the source S3 bucket to the destination S3 bucket. Which replication solution is MOST operationally efficient?

   • AAdd a replication rule to the source bucket and specify the destination bucket. Create a bucket policy for the destination bucket to allow the owner of the source bucket to replicate objects.
   • BSchedule an AWS Batch job with Amazon EventBridge to copy new objects from the source bucket to the destination bucket. Create a Batch Operations IAM role in the destination account.
   • CConfigure an Amazon S3 event notification for the source bucket to invoke an AWS Lambda function to copy new objects to the destination bucket. Ensure that the Lambda function has cross-account access permissions.
   • DRun a scheduled script on an Amazon EC2 instance to copy new objects from the source bucket to the destination bucket. Assign cross-account access permissions to the EC2 instance's role.

   Show answer

   Answer: A

   Explanation

   https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication-walkthrough-2.html Setting up replication when source and destination buckets are owned by different AWS accounts is similar to setting replication when both buckets are owned by the same account. The only difference is that the destination bucket owner must grant the source bucket owner permission to replicate objects by adding a bucket policy.

   Source: Adapted from community discussion — CofkoCof

   References

   • AWS documentation

   Next question

7. Question 317 · 475 in bank

   A company has a high performance computing (HPC) application that runs on Amazon EC2 instances. The application requires minimum latency and maximum network throughput between nodes. How should a SysOps administrator deploy the EC2 instances to meet these requirements?

   • AUse a cluster placement group in a single Availability Zone.
   • BUse a cluster placement group across multiple Availability Zones.
   • CUse a partition placement group in a single Availability Zone.
   • DUse a partition placement group across multiple Availability Zones.

   Show answer

   Answer: A

   Explanation

   Cluster – Packs instances close together inside an Availability Zone. This strategy enables workloads to achieve the low-latency network performance necessary for tightly-coupled node-to-node communication that is typical of high-performance computing (HPC) applications. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/placement-groups.html

   Source: Adapted from community discussion — nharaz

   References

   • AWS documentation
   • AWS documentation

   Next question

8. Question 318 · 475 in bank

   A company has a stateless application that is hosted on a fleet of 10 Amazon EC2 On-Demand Instances in an Auto Scaling group. A minimum of 6 instances are needed to meet service requirements. Which action will maintain uptime for the application MOST cost-effectively?

   • AUse a Spot Fleet with an On-Demand capacity of 6 instances.
   • BUpdate the Auto Scaling group with a minimum of 6 On-Demand Instances and a maximum of 10 On-Demand Instances.
   • CUpdate the Auto Scaling group with a minimum of 1 On-Demand Instance and a maximum of 6 On-Demand Instances.
   • DUse a Spot Fleet with a target capacity of 6 instances.

   Show answer

   Answer: A

   Explanation

   To ensure that you always have instance capacity, you can include a request for On-Demand capacity in your Spot Fleet request. In your Spot Fleet request, you specify your desired target capacity and how much of that capacity must be On-Demand. The balance comprises Spot capacity, which is launched if there is available Amazon EC2 capacity and availability. For example, if in your Spot Fleet request you specify the target capacity as 10 and the On-Demand capacity as 8, Amazon EC2 launches 8 capacity units as On-Demand, and 2 capacity units (10-8=2) as Spot. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/on-demand-in-spot.html

   Source: Adapted from community discussion — Learning4life

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

9. Question 319 · 475 in bank

   Select 2

   A company has developed a service that is deployed on a fleet of Linux-based Amazon EC2 instances that are in an Auto Scaling group. The service occasionally fails unexpectedly because of an error in the application code. The company's engineering team determines that resolving the underlying cause of the service failure could take several weeks. A SysOps administrator needs to create a solution to automate recovery if the service crashes on any of the EC2 instances. Which solutions will meet this requirement? (Choose two.)

   • AInstall the Amazon CloudWatch agent on the EC2 instances. Configure the CloudWatch agent to monitor the service. Set the CloudWatch action to restart if the service health check fails.
   • BTag the EC2 instances. Create an AWS Lambda function that uses AWS Systems Manager Session Manager to log in to the tagged EC2 instances and restart the service. Schedule the Lambda function to run every 5 minutes.
   • CTag the EC2 instances. Use AWS Systems Manager State Manager to create an association that uses the AWS-RunShellScript document. Configure the association command with a script that checks if the service is running and that starts the service if the service is not running. For targets, specify the EC2 instance tag. Schedule the association to run every 5 minutes.
   • DUpdate the EC2 user data that is specified in the Auto Scaling group's launch template to include a script that runs on a cron schedule every 5 minutes. Configure the script to check if the service is running and to start the service if the service is not running. Redeploy all the EC2 instances in the Auto Scaling group with the updated launch template.
   • EUpdate the EC2 user data that is specified in the Auto Scaling group's launch template to ensure that the service runs during startup. Redeploy all the EC2 instances in the Auto Scaling group with the updated launch template.

   Show answer

   Answer: AC

   Explanation

   A and C are straight forward however is too complex. Use Systems Manager state - >Tag the EC2 instances for targeted management.>Use AWS Systems Manager State Manager to create an association that uses the AWS-RunShellScript document.>Configure the association to run a script that checks if the service is running and starts the service if it's not.>Schedule the association to run at regular intervals (e.g., every 5 minutes) to ensure continuous monitoring and recovery.

   Source: Adapted from community discussion — nharaz

   Next question

10. Question 320 · 475 in bank

    A company's web application runs on Amazon EC2 instances in a single AWS Region. The infrastructure must be designed so the application remains available with no performance degradation in the event of an Availability Zone (AZ) failure. To ensure optimal performance, the application must maintain a minimum of 12 instances at all times. Which solution will meet the requirements with the fewest running instances possible?

    • A2 AZs with 6 instances in each AZ
    • B2 AZs with 12 instances in each AZ
    • C3 AZs with 4 instances in each AZ
    • D3 AZs with 6 instances in each AZ

    Show answer

    Answer: D

    Explanation

    D. 3 AZs with 6 instances in each AZ. Here's why this solution is optimal: High Availability: Distributing instances across three AZs provides high availability. In the event of a failure in one AZ, the remaining two AZs can continue to serve the application without performance degradation. Load Distribution: With 6 instances in each of the 3 AZs, the application maintains a total of 18 instances. This setup exceeds the minimum requirement of 12 instances, ensuring that even if one AZ fails, there are still 12 instances available (6 in each of the remaining two AZs) to handle the load without performance issues. Fewest Running Instances: This solution provides a balance between high availability and cost-efficiency. It ensures that there are enough instances to handle an AZ failure without unnecessarily doubling the number of instances.

    Source: Adapted from community discussion — jerry8964

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SOA-C02 practice, question 311. 475 questions available.