SOA-C02 practice questions 471–475

1. Question 471 · 475 in bank

   A company stores critical data in Amazon S3 buckets. A SysOps administrator must build a solution to record all S3 API activity. Which action will meet this requirement?

   • AConfigure S3 bucket metrics to record object access logs.
   • BCreate an AWS CloudTrail trail to log data events for all S3 objects.
   • CEnable S3 server access logging for each S3 bucket.
   • DUse AWS IAM Access Analyzer for Amazon S3 to store object access logs.

   Show answer

   Answer: B

   Explanation

   B! Amazon S3 is integrated with AWS CloudTrail, a service that provides a record of actions taken by a user, role, or an AWS service in Amazon S3. CloudTrail captures a subset of API calls for Amazon S3 as events, including calls from the Amazon S3 console and code calls to the Amazon S3 APIs. https://docs.aws.amazon.com/AmazonS3/latest/userguide/cloudtrail-logging.html

   Source: Adapted from community discussion — princajen

   References

   • AWS documentation
   • AWS documentation

   Next question

2. Question 472 · 475 in bank

   A company runs an application that uses a MySQL database on an Amazon EC2 instance. The EC2 instance has a General Purpose SSD Amazon Elastic Block Store (Amazon EBS) volume. The company made changes to the application code and now wants to perform load testing to evaluate the impact of the code changes. A SysOps administrator must create a new MySQL instance from a snapshot of the existing production instance. This new instance needs to perform as similarly as possible to the production instance. Which restore option meets these requirements?

   • AUse EBS fast snapshot restore to create a new General Purpose SSD EBS volume from the production snapshot.
   • BUse EBS fast snapshot restore to create a new Provisioned IOPS SSD EBS volume from the production snapshot.
   • CUse EBS snapshot restore to create a new General Purpose SSD EBS volume from the production snapshot.
   • DUse EBS snapshot restore to create a new Provisioned IOPS SSD EBS volume from the production snapshot.

   Show answer

   Answer: A

   Explanation

   Seems to me that A is for exam only. For real life it is C . There are no requirements on how fast EBS should provide its base performance. If QA team will start using new instance tomorrow - then A is unneeded overhead.

   Source: Adapted from community discussion — piavik

   References

   • AWS documentation
   • AWS documentation

   Next question

3. Question 473 · 475 in bank

   A team of on-call engineers frequently needs to connect to Amazon EC2 instances in a private subnet to troubleshoot and run commands. The instances use either the latest AWS-provided Windows Amazon Machine Images (AMIs) or Amazon Linux AMIs. The team has an existing 1AM role for authorization. A SysOps administrator must provide the team with access to the instances by granting IAM permissions to this role. Which solution will meet this requirement?

   • AAdd a statement to the 1AM role policy to allow the ssm:StartSession action on the instances. Instruct the team to use AWS Systems Manager Session Manager to connect to the instances by using the assumed IAM role.
   • BAssociate an Elastic IP address and a security group with each instance. Add the engineers' IP addresses to the security group inbound rules. Add a statement to the IAM role policy to allow the ec2:AuthorizeSecurityGrouplngress action so that the team can connect to the instances.
   • CCreate a bastion host with an EC2 instance, and associate the bastion host with the VPC. Add a statement to the 1AM role policy to allow the ec2:CreateVpnConnection action on the bastion host. Instruct the team to use the bastion host endpoint to connect to the instances.
   • DCreate an internet-facing Network Load Balancer. Use two listeners. Forward port 22 to a target group of Linux instances. Forward port 3389 to a target group of Windows instances. Add a statement to the IAM role policy to allow the ec2:CreateRoute action so that the team can connect to the instances.

   Show answer

   Answer: A

   Explanation

   AWS Systems Manager Session Manager: This service allows you to manage interactive sessions to EC2 instances without needing to open inbound ports, manage bastion hosts, or assign Elastic IPs. It provides secure and controlled access to instances.

   Source: Adapted from community discussion — jipark

   References

   • AWS documentation

   Next question

4. Question 474 · 475 in bank

   A company needs to ensure strict adherence to a budget for 25 applications deployed on AWS. Separate teams are responsible for storage, compute, and database costs. A SysOps administrator must implement an automated solution to alert each team when their projected spend will exceed a quarterly amount that has been set by the finance department. The solution cannot incur additional compute, storage, or database costs. Which solution will meet these requirements?

   • AConfigure AWS Cost and Usage Reports to send a daily report to an Amazon S3 bucket. Create an AWS Lambda function that will evaluate spend by service and notify each team by using Amazon Simple Notification Service (Amazon SNS) notifications. Invoke the Lambda function when a report is placed in the S3 bucket.
   • BConfigure AWS Cost and Usage Reports to send a daily report to an Amazon S3 bucket. Create a rule in Amazon EventBridge (Amazon CloudWatch Events) to evaluate the spend by service and notify each team by using Amazon Simple Queue Service (Amazon SQS) when the cost threshold is exceeded.
   • CUse AWS Budgets to create one cost budget and select each of the services in use. Specify the budget amount defined by the finance department along with the forecasted cost threshold. Enter the appropriate email recipients for the budget.
   • DUse AWS Budgets to create a cost budget for each team, filtering by the services they own. Specify the budget amount defined by the finance department along with a forecasted cost threshold. Enter the appropriate email recipients for each budget.

   Show answer

   Answer: D

   References

   • AWS documentation

   Next question

5. Question 475 · 475 in bank

   A company hosts a static website on Amazon S3. An Amazon CloudFront distribution presents this site to global users. The company uses the Managed- CachingDisabled CloudFront cache policy. The company's developers confirm that they frequently update a file in Amazon S3 with new information. Users report that the website presents correct information when the website first loads the file. However, the users' browsers do not retrieve the updated file after a refresh. What should a SysOps administrator recommend to fix this issue?

   • AAdd a Cache-Control header field with max-age=0 to the S3 object.
   • BChange the CloudFront cache policy to Managed-CachingOptimized.
   • CDisable bucket versioning in the S3 bucket configuration.
   • DEnable content compression in the CloudFront configuration.

   Show answer

   Answer: A

   Explanation

   A! You can control how long your files stay in a CloudFront cache before CloudFront forwards another request to your origin. Reducing the duration allows you to serve dynamic content. Increasing the duration means that your users get better performance because your files are more likely to be served directly from the edge cache. A longer duration also reduces the load on your origin. To change the cache duration for an individual file, you can configure your origin to add a Cache-Control header with the max-age or s-maxage directive, or an Expires header to the file. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Expiration.html

   Source: Adapted from community discussion — princajen

   References

   • AWS documentation

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SOA-C02 practice, question 471. 475 questions available.