SOA-C02 practice questions 401–410

1. Question 401 · 475 in bank

   A SysOps administrator is troubleshooting an AWS CloudFormation stack creation that failed. Before the SysOps administrator can identify the problem, the stack and its resources are deleted. For future deployments, the SysOps administrator must preserve any resources that CloudFormation successfully created. What should the SysOps administrator do to meet this requirement?

   • ASet the value of the DisableRollback parameter to False during stack creation
   • BSet the value of the OnFailure parameter to DO_NOTHING during stack creation
   • CSpecify a rollback configuration that has a rollback trigger of DO_NOTHING during stack creation
   • DSet the value of the OnFailure parameter to ROLLBACK during stack creation

   Show answer

   Answer: B

   Explanation

   Answer B is correct. You can prevent automatic stack rollback and preserve successfully provisioned resources using the console, or specifying the --disable-rollback or --on-failure DO_NOTHING parameters to the aws cloudformation create-stack, aws cloudformation update-stack, or aws cloudformation execute-change-set commands.

   Source: Adapted from community discussion — vaa2020

   Next question

2. Question 402 · 475 in bank

   A company needs to implement a solution to install specific software on Amazon EC2 instances when the instances launch. Which solution will meet this requirement?

   • AConfigure AWS Systems Manager State Manager associations to bootstrap the EC2 instances with the required software at launch.
   • BUse the Amazon CloudWatch agent to detect EC2 InstanceStart events and to inject the required software. Modify the InstanceRole IAM role to add permissions for the StartTask API operation.
   • CUse Amazon Inspector to detect EC2 launch events. Configure Amazon Inspector to install the required software as part of lifecycle hooks for theEC2launch events.
   • DUse AWS Security Hub remediation actions to install the required software at launch.

   Show answer

   Answer: A

   Explanation

   Using AWS Systems Manager can effectively automate the installation of software on EC2 instances as part of their launch process, making it a straightforward and efficient solution.

   Source: Adapted from community discussion — BryRob

   Next question

3. Question 403 · 475 in bank

   A company is using Amazon CloudWatch alarms to monitor Amazon Elastic Kubernetes Service (Amazon EKS) workloads. The alarms are initiated through a threshold definition and are not helping the EKS cluster operate more efficiently. A SysOps administrator must implement a solution that identifies anomalies and generates recommendations for how to address the anomalies. Which solution will meet these requirements?

   • AUse CloudWatch anomaly detection to identify anomalies and provide recommendations
   • BUse CloudWatch Container Insights with Amazon DevOps Guru to identify anomalies and provide recommendations.
   • CUse CloudWatch Container Insights to identify anomalies and provide recommendations
   • DUse CloudWatch anomaly detection with CloudWatch Container Insights to identify anomalies and provide recommendations

   Show answer

   Answer: B

   Explanation

   https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/ContainerInsights.html https://docs.aws.amazon.com/devops-guru/latest/userguide/welcome.html Combining CloudWatch Container Insights for monitoring with Amazon DevOps Guru for anomaly detection and recommendations provides a comprehensive solution. CloudWatch Container Insights offers detailed insights into your EKS workloads, while DevOps Guru analyzes these insights to detect anomalies and offer actionable recommendations.

   Source: Adapted from community discussion — BryRob

   References

   • AWS documentation
   • AWS documentation

   Next question

4. Question 404 · 475 in bank

   Select 2

   A company has an application that uses Amazon DynamoDB tables. The tables are spread across AWS accounts and AWS Regions. The company uses AWS CloudFormation to deploy AWS resources. A new team at the company is deleting unused AWS resources. The team accidentally deletes several production DynamoDB tables by running an AWS Lambda function that makes a DynamoDB DeleteTable API call. The table deletions cause an application outage. A SysOps administrator must implement a solution that minimizes the chance of accidental deletions of tables. The solution also must minimize data loss that results from accidental deletions. Which combination of steps will meet these requirements? (Choose two.)

   • AEnable termination protection for the CloudFormation stacks that deploy the DynamoDB tables.
   • BEnable deletion protection for the DynamoDB tables.
   • CEnable point-in-time recovery for the DynamoDB tables. Restore the tables if they are accidentally deleted.
   • DSchedule daily backups of the DynamoDB tables. Restore the tables if they are accidentally deleted.
   • EExport the DynamoDB tables to Amazon S3 every day. Use Import from Amazon S3 to restore data for tables that are accidentally deleted.

   Show answer

   Answer: BC

   Next question

5. Question 405 · 475 in bank

   A company has created an AWS CloudFormation template that consists of the AWS::EC2::Instance resource and a custom CloudFormation resource. The custom CloudFormation resource is an AWS Lambda function that attempts to run automation on the Amazon EC2 instance. During testing, the Lambda function fails because the Lambda function tries to run before the EC2 instance is launched. Which solution will resolve this issue?

   • AAdd a DependsOn attribute to the custom resource. Specify the EC2 instance in the DependsOn attribute.
   • BUpdate the custom resource's service token to point to a valid Lambda function.
   • CUpdate the Lambda function to use the cfn-response module to send a response to the custom resource.
   • DUse the Fn::If intrinsic function to check for the EC2 instance before the custom resource runs.

   Show answer

   Answer: A

   Next question

6. Question 406 · 475 in bank

   A SysOps administrator needs to ensure that an Amazon RDS for PostgreSQL DB instance has available backups. The DB instance has automated backups turned on with a backup retention period of 7 days. However, no automated backups for the DB instance have been created in the past month. What could be the cause of the lack of automated backups?

   • AThe Amazon S3 bucket that stores the backups is full.
   • BThe DB instance is in the STORAGE_FULL state.
   • CThe DB instance is not configured for Multi-AZ.
   • DThe backup retention period must be 30 days.

   Show answer

   Answer: B

   Next question

7. Question 407 · 475 in bank

   A company has a list of pre-approved Amazon Machine Images (AMIs) for developers to use to launch Amazon EC2 instances. However, developers are still launching EC2 instances from unapproved AMIs. A SysOps administrator must implement a solution that automatically terminates any instances that are launched from unapproved AMIs. Which solution will meet this requirement?

   • ASet up an AWS Config managed rule to check if instances are running from AMIs that are on the list of pre-approved AMIs. Configure an automatic remediation action so that an AWS Systems Manager Automation runbook terminates any instances that are noncompliant with the rule.
   • BStore the list of pre-approved AMIs in an Amazon DynamoDB global table that is replicated to all AWS Regions that the developers use. Create Regional EC2 launch templates. Configure the launch templates to check AMIs against the list and to terminate any instances that are not on the list.
   • CSelect the Amazon CloudWatch metric that shows all running instances and the AMIs that the instances were launched from. Create a CloudWatch alarm that terminates an instance if the metric shows the use of an unapproved AMI.
   • DCreate a custom Amazon Inspector finding to compare a running instance's AMI against the list of pre-approved AMIs. Create an AWS Lambda function that terminates instances. Configure Amazon Inspector to report findings of unapproved AMIs to an Amazon Simple Queue Service (Amazon SQS) queue to invoke the Lambda function.

   Show answer

   Answer: A

   Next question

8. Question 408 · 475 in bank

   Users of a company's internal web application recently experienced application performance issues for a brief period. The application includes frontend web servers that run in an Amazon Elastic Kubernetes Service (Amazon EKS) cluster. The application also includes a backend Amazon Aurora PostgreSQL DB cluster that includes one DB instance. A SysOps administrator determines that the source of the performance issues was high utilization of the DB cluster. The single writer instance experienced more than 90% utilization for 11 minutes. The cause of the high utilization was an automated report that is scheduled to run one time each week. What should the SysOps administrator do to ensure that users do not experience performance issues each week when the report runs?

   • AIncrease the size of the DB instance. Monitor the performance during the next scheduled run of the report.
   • BAdd a reader instance. Change the database connection string of the report application to use the newly created reader instance.
   • CAdd another writer instance. Change the database connection string of the report application to use the newly created writer instance.
   • DConfigure auto scaling for the DB cluster. Set the minimum capacity units, maximum capacity units, and target utilization.

   Show answer

   Answer: B

   Explanation

   Adding a reader instance will offload read-heavy operations (such as generating reports) from the writer instance, which is responsible for handling write transactions. This will prevent the report from overloading the writer instance during its execution. Changing the connection string of the report application to use the reader instance ensures that the report runs against the read replica, leaving the primary writer instance available for regular transactional operations without causing high utilization issues.

   Source: Adapted from community discussion — Slays

   Next question

9. Question 409 · 475 in bank

   A data analytics application is running on an Amazon EC2 instance. A SysOps administrator must add custom dimensions to the metrics collected by the Amazon CloudWatch agent. How can the SysOps administrator meet this requirement?

   • ACreate a custom shell script to extract the dimensions and collect the metrics using the Amazon CloudWatch agent.
   • BCreate an Amazon EventBridge (Amazon CloudWatch Events) rule to evaluate the required custom dimensions and send the metrics to Amazon Simple Notification Service (Amazon SNS).
   • CCreate an AWS Lambda function to collect the metrics from AWS CloudTrail and send the metrics to an Amazon CloudWatch Logs group.
   • DCreate an append_dimensions field in the Amazon CloudWatch agent configuration file to collect the metrics.

   Show answer

   Answer: D

   Explanation

   In custom metrics, the --dimensions parameter is common. A dimension further clarifies what the metric is and what data it stores. You can have up to 30 dimensions assigned to one metric, and each dimension is defined by a name and value pair https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/publishingMetrics.html

   Source: Adapted from community discussion — princajen

   References

   • AWS documentation

   Next question

10. Question 410 · 475 in bank

    A company is using AWS to deploy a critical application on a fleet of Amazon EC2 instances. The company is rewriting the application because the application failed a security review. The application will take 12 months to rewrite. While this rewrite happens, the company needs to rotate IAM access keys that the application uses. A SysOps administrator must implement an automated solution that finds and rotates IAM access keys that are at least 30 days old. The solution must then continue to rotate the IAM access keys every 30 days. Which solution will meet this requirement with the MOST operational efficiency?

    • AUse an AWS Config rule to identify IAM access keys that are at least 30 days old. Configure AWS Config to invoke an AWS Systems Manager Automation runbook to rotate the identified IAM access keys.
    • BUse AWS Trusted Advisor to identify IAM access keys that are at least 30 days old. Configure Trusted Advisor to invoke an AWS Systems Manager Automation runbook to rotate the identified IAM access keys.
    • CCreate a script that checks the age of IAM access keys and rotates them if they are at least 30 days old. Launch an EC2 instance. Schedule the script to run as a cron expression on the EC2 instance every day.
    • DCreate an AWS Lambda function that checks the age of IAM access keys and rotates them if they are at least 30 days old. Use an Amazon EventBridge rule to invoke the Lambda function every time a new IAM access key is created.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SOA-C02 practice, question 401. 475 questions available.