SOA-C02 practice questions 461–470

1. Question 461 · 475 in bank

   A company wants to prohibit its developers from using a particular family of Amazon EC2 instances. The company uses AWS Organizations and wants to apply the restriction across multiple accounts. What is the MOST operationally efficient way for the company to apply service control policies (SCPs) to meet these requirements?

   • AAdd the accounts to an organizational unit (OU). Apply the SCPs to the OU.
   • BAdd the accounts to resource groups in AWS Resource Groups. Apply the SCPs to the resource groups.
   • CApply the SCPs to each developer account
   • DEnroll the accounts with AWS Control Tower. Apply the SCPs to the AWS Control Tower management account.

   Show answer

   Answer: A

   Explanation

   Question says Most Operationally Efficient. If they do not already use CT it adds another layer of complexity. They will still need to create OU's for the Developers anyway.

   Source: Adapted from community discussion — Kinetix

   References

   • AWS documentation

   Next question

2. Question 462 · 475 in bank

   An application is running on an Amazon EC2 instance in a VPC with the default DHCP option set. The application connects to an on-premises Microsoft SQL Server database with the DNS name mssql.example.com. The application is unable to resolve the database DNS name. Which solution will fix this problem?

   • ACreate an Amazon Route 53 Resolver inbound endpoint. Add a forwarding rule for the domain example.com. Associate the forwarding rule with the VPC.
   • BCreate an Amazon Route 53 Resolver inbound endpoint. Add a system rule for the domain example.com. Associate the system rule with the VPC.
   • CCreate an Amazon Route 53 Resolver outbound endpoint. Add a forwarding rule for the domain example.com. Associate the forwarding rule with the VPC.
   • DCreate an Amazon Route 53 Resolver outbound endpoint. Add a system rule for the domain example.com. Associate the system rule with the VPC.

   Show answer

   Answer: C

   Explanation

   A Inbound endpoints are used to forward DNS queries from your network to Route 53 Resolver within your VPC. They specify the IP addresses that DNS resolvers on your network should forward DNS queries to. This is the opposite of what the scenario requires. The scenario involves resolving DNS queries originating from an Amazon EC2 instance within a VPC. Therefore, the correct approach is to configure outbound forwarding, not inbound forwarding. Option A correctly describes the solution by suggesting the creation of an outbound endpoint and adding a forwarding rule for the domain example.com to forward DNS queries from the VPC to DNS resolvers on the network.

   Source: Adapted from community discussion — Nazzhassan

   References

   • AWS documentation
   • AWS documentation
   • AWS documentation

   Next question

3. Question 463 · 475 in bank

   A company's application is hosted by an internet provider at app.example.com. The company wants to access the application by using www.company.com, which the company owns and manages with Amazon Route 53. Which Route 53 record should be created to address this?

   • AA record
   • BAlias record
   • CCNAME record
   • DPointer (PTR) record

   Show answer

   Answer: C

   Explanation

   A record: Domain → IP address Alias record: Domain → AWS resource CNAME record: Domain → Another domain PTR record: IP address → Domain (reverse lookup)

   Source: Adapted from community discussion — OlehKom

   References

   • AWS documentation

   Next question

4. Question 464 · 475 in bank

   A company expanded its web application to serve a worldwide audience. A SysOps administrator has implemented a multi-Region AWS deployment for all production infrastructure. The SysOps administrator must route traffic based on the location of resources. Which Amazon Route 53 routing policy should the SysOps administrator use to meet this requirement?

   • AGeolocation routing policy
   • BGeoproximity routing policy
   • CLatency-based routing policy
   • DMultivalue answer routing policy

   Show answer

   Answer: B

   Explanation

   Should be B because it states "based on location of resources". Geolocation is used for based on location of users. https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html

   Source: Adapted from community discussion — haxaffee

   References

   • AWS documentation

   Next question

5. Question 465 · 475 in bank

   A SysOps administrator is deploying an application on 10 Amazon EC2 instances. The application must be highly available. The instances must be placed on distinct underlying hardware. What should the SysOps administrator do to meet these requirements?

   • ALaunch the instances into a cluster placement group in a single AWS Region.
   • BLaunch the instances into a partition placement group in multiple AWS Regions.
   • CLaunch the instances into a spread placement group in multiple AWS Regions.
   • DLaunch the instances into a spread placement group in a single AWS Region.

   Show answer

   Answer: D

   Explanation

   answer D: Spread works only in 1 region. Max instace per avalibility zone 7. if 3 availibility zone = 21 Istance. ( Question=10 istance) "A spread placement group is a group of instances that are each placed on distinct racks, with each rack having its own network and power source." All istance are placed on different racks for a maximun of 7 istance for Availability Zone. "A spread placement group can span multiple Availability Zones in the same Region. You can have a maximum of seven running instances per Availability Zone per group." https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/placement-groups.html#placement-groups-spread

   Source: Adapted from community discussion — MrkJobs

   References

   • AWS documentation

   Next question

6. Question 466 · 475 in bank

   A SysOps administrator wants to upload a file that is 1 TB in size from on-premises to an Amazon S3 bucket using multipart uploads. What should the SysOps administrator do to meet this requirement?

   • AUpload the file using the S3 console.
   • BUse the s3api copy-object command.
   • CUse the s3api put-object command.
   • DUse the s3 cp command

   Show answer

   Answer: D

   Explanation

   I vote for D! It's a best practice to use aws s3 commands (such as aws s3 cp) for multipart uploads and downloads, because these aws s3 commands automatically perform multipart uploading and downloading based on the file size. By comparison, aws s3api commands, such as aws s3api create-multipart-upload, should be used only when aws s3 commands don't support a specific upload need, such as when the multipart upload involves multiple servers, a multipart upload is manually stopped and resumed later, or when the aws s3 command doesn't support a required request parameter. https://aws.amazon.com/premiumsupport/knowledge-center/s3-multipart-upload-cli/

   Source: Adapted from community discussion — princajen

   References

   • AWS documentation
   • AWS documentation

   Next question

7. Question 467 · 475 in bank

   An application team is working with a SysOps administrator to define Amazon CloudWatch alarms for an application. The application team does not know the application's expected usage or expected growth. Which solution should the SysOps administrator recommend?

   • ACreate CloudWatch alarms that are based on anomaly detection.
   • BCreate CloudWatch alarms by using a set of composite alarms.
   • CCreate CloudWatch alarms by using static thresholds.
   • DCreate CloudWatch alarms that treat missing data as breaching.

   Show answer

   Answer: A

   References

   • AWS documentation

   Next question

8. Question 468 · 475 in bank

   A company runs a stateless application that is hosted on an Amazon EC2 instance. Users are reporting performance issues. A SysOps administrator reviews the Amazon CloudWatch metrics for the application and notices that the instance's CPU utilization frequently reaches 90% during business hours. What is the MOST operationally efficient solution that will improve the application's responsiveness?

   • AConfigure CloudWatch logging on the EC2 instance. Configure a CloudWatch alarm for CPU utilization to alert the SysOps administrator when CPU utilization goes above 90%.
   • BConfigure an AWS Client VPN connection to allow the application users to connect directly to the EC2 instance private IP address to reduce latency.
   • CCreate an Auto Scaling group, and assign it to an Application Load Balancer. Configure a target tracking scaling policy that is based on the average CPU utilization of the Auto Scaling group.
   • DCreate a CloudWatch alarm that activates when the EC2 instance's CPU utilization goes above 80%. Configure the alarm to invoke an AWS Lambda function that vertically scales the instance.

   Show answer

   Answer: C

   References

   • AWS documentation

   Next question

9. Question 469 · 475 in bank

   Select 2

   An ecommerce company uses an Amazon ElastiCache for Memcached cluster for in-memory caching of popular product queries on the shopping site. When viewing recent Amazon CloudWatch metrics data for the ElastiCache cluster, the SysOps administrator notices a large number of evictions. Which of the following actions will reduce these evictions? (Choose two.)

   • AAdd an additional node to the ElastiCache cluster.
   • BIncrease the ElastiCache time to live (TTL).
   • CIncrease the individual node size inside the ElastiCache cluster.
   • DPut an Elastic Load Balancer in front of the ElastiCache cluster.
   • EUse Amazon Simple Queue Service (Amazon SQS) to decouple the ElastiCache cluster.

   Show answer

   Answer: AC

   Explanation

   what 'eviction' is : Evictions occur when the cache is full and a new item needs to be added, resulting in the removal of an existing item from the cache.

   Source: Adapted from community discussion — jipark

   Next question

10. Question 470 · 475 in bank

    Select 2

    A SysOps administrator wants to provide access to AWS services by attaching an IAM policy to multiple IAM users. The SysOps administrator also wants to be able to change the policy and create new versions. Which combination of actions will meet these requirements? (Choose two.)

    • AAdd the users to an IAM service-linked role. Attach the policy to the role.
    • BAdd the users to an IAM user group. Attach the policy to the group.
    • CCreate an AWS managed policy.
    • DCreate a customer managed policy.
    • ECreate an inline policy.

    Show answer

    Answer: BD

    References

    • AWS documentation
    • AWS documentation
    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SOA-C02 practice, question 461. 475 questions available.