SOA-C02 practice questions 71–80

1. Question 71 · 475 in bank

   A company runs an encrypted Amazon RDS for Oracle DB instance. The company wants to make regular backups available in another AWS Region. What is the MOST operationally efficient solution that meets these requirements?

   • AModify the DB instance. Enable cross-Region automated backups.
   • BCreate an RDS read replica in another Region. Create a snapshot of the read replica.
   • CUse AWS Database Migration Service (AWS DMS) to copy the data to a DB instance in another Region.
   • DTemporarily turn off encryption on the DB instance. Take a snapshot. Copy the snapshot to another Region.

   Show answer

   Answer: A

   Explanation

   Ans: A REF: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_ReplicateBackups.html "Enabling cross-Region automated backups You can enable backup replication on new or existing DB instances using the Amazon RDS console. You can also use the start-db-instance-automated-backups-replication AWS CLI command or the StartDBInstanceAutomatedBackupsReplication RDS API operation. You can replicate up to 20 backups to each destination AWS Region for each AWS account"

   Source: Adapted from community discussion — Liongeek

   References

   • AWS documentation

   Next question

2. Question 72 · 475 in bank

   A company is rolling out a new version of its website. Management wants to deploy the new website in a limited rollout to 20% of the company’s customers. The company uses Amazon Route 53 for its website’s DNS solution. Which configuration will meet these requirements?

   • ACreate a failover routing policy. Within the policy, configure 80% of the website traffic to be sent to the original resource. Configure the remaining 20% of traffic as the failover record that points to the new resource.
   • BCreate a multivalue answer routing policy. Within the policy, create 4 records with the name and IP address of the original resource. Configure 1 record with the name and IP address of the new resource.
   • CCreate a latency-based routing policy. Within the policy, configure a record pointing to the original resource with a weight of 80. Configure a record pointing to the new resource with a weight of 20.
   • DCreate a weighted routing policy. Within the policy, configure a weight of 80 for the record pointing to the original resource. Configure a weight of 20 for the record pointing to the new resource.

   Show answer

   Answer: D

   References

   • AWS documentation

   Next question

3. Question 73 · 475 in bank

   A SysOps administrator created an AWS CloudFormation template that provisions Amazon EC2 instances, an Elastic Load Balancer (ELB), and an Amazon RDS DB instance. During stack creation, the creation of the EC2 instances and the creation of the ELB are successful. However, the creation of the DB instance fails. What is the default behavior of CloudFormation in this scenario?

   • ACloudFormation will roll back the stack and delete the stack.
   • BCloudFormation will roll back the stack but will not delete the stack.
   • CCloudFormation will prompt the user to roll back the stack or continue.
   • DCloudFormation will successfully complete the stack but will report a failed status for the DB instance.

   Show answer

   Answer: B

   Explanation

   Second quote blurs the distinction between A and B, but I think answer is still B. I actually creating a stack it with a template with an intentional error (acloud.guru demo/lab file). The stack roll back out as expected and the stack did not delete itself, and I still had the stack listed under the "stacks" menu. Even though it had known error and never had a "last known stable state", I saw it listed in stacks menu, and I wasn't able to create another stack using the "TestStack stack (e.g. Error "Stack name allready exists") Don't mean to ramble on here, but sometimes the AWS exam questions and answers don't exactly match the reality in the AWS console. Facts: (*) "Roll back all stack resources" (default setting from CloudFormation create stack menu) "Specify the rollback-stack operation to roll back a stack to its last stable state." "Note: The rollback-stack operation will delete a stack if it doesn't contain a last known stable state." https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stack-failure-options.html

   Source: Adapted from community discussion — Gomer

   References

   • AWS documentation
   • AWS documentation

   Next question

4. Question 74 · 475 in bank

   A SysOps administrator needs to automate the invocation of an AWS Lambda function. The Lambda function must run at the end of each day to generate a report on data that is stored in an Amazon S3 bucket. What is the MOST operationally efficient solution that meets these requirements?

   • ACreate an Amazon EventBridge (Amazon CloudWatch Events) rule that has an event pattern for Amazon S3 and the Lambda function as a target.
   • BCreate an Amazon EventBridge (Amazon CloudWatch Events) rule that has a schedule and the Lambda function as a target.
   • CCreate an S3 event notification to invoke the Lambda function whenever objects change in the S3 bucket.
   • DDeploy an Amazon EC2 instance with a cron job to invoke the Lambda function.

   Show answer

   Answer: B

   Explanation

   Ans B S3 Event notification has nothing to do here since the lambda will be triggered based on a daily schedule not every time an object is uploaded

   Source: Adapted from community discussion — Liongeek

   References

   • AWS documentation

   Next question

5. Question 75 · 475 in bank

   A company is releasing a new static website hosted on Amazon S3. The static website hosting feature was enabled on the bucket and content was uploaded; however, upon navigating to the site, the following error message is received: 403 Forbidden - Access Denied What change should be made to fix this error?

   • AAdd a bucket policy that grants everyone read access to the bucket.
   • BAdd a bucket policy that grants everyone read access to the bucket objects.
   • CRemove the default bucket policy that denies read access to the bucket.
   • DConfigure cross-origin resource sharing (CORS) on the bucket.

   Show answer

   Answer: B

   Explanation

   B. Per AWS: https://repost.aws/knowledge-center/s3-static-website-endpoint-error "If an Access Denied error is returned by the web browser or cURL command, then the object isn't publicly accessible. To allow public read access to your S3 object, create a bucket policy that allows public read access for all objects in the bucket." I'm not sure why everyone here is trying to provide answers without actual references. How you think in your head is irrelevant if it's not correct with AWS documentation.

   Source: Adapted from community discussion — Domdom120

   References

   • repost.aws documentation
   • AWS documentation

   Next question

6. Question 76 · 475 in bank

   A company uses AWS Organizations. A SysOps administrator wants to use AWS Compute Optimizer and AWS tag policies in the management account to govern all member accounts in the billing family. The SysOps administrator navigates to the AWS Organizations console but cannot activate tag policies through the management account. What could be the reason for this issue?

   • AAll features have not been enabled in the organization.
   • BConsolidated billing has not been enabled.
   • CThe member accounts do not have tags enabled for cost allocation.
   • DThe member accounts have not manually enabled trusted access for Compute Optimizer.

   Show answer

   Answer: A

   References

   • AWS documentation

   Next question

7. Question 77 · 475 in bank

   A company is storing media content in an Amazon S3 bucket and uses Amazon CloudFront to distribute the content to its users. Due to licensing terms, the company is not authorized to distribute the content in some countries. A SysOps administrator must restrict access to certain countries. What is the MOST operationally efficient solution that meets these requirements?

   • AConfigure the S3 bucket policy to deny the GetObject operation based on the S3:LocationConstraint condition.
   • BCreate a secondary origin access identity (OAI). Configure the S3 bucket policy to prevent access from unauthorized countries.
   • CEnable the geo restriction feature in the CloudFront distribution to prevent access from unauthorized countries.
   • DUpdate the application to generate signed CloudFront URLs only for IP addresses in authorized counties.

   Show answer

   Answer: C

   Explanation

   You can use geographic restrictions, sometimes known as geo blocking, to prevent users in specific geographic locations from accessing content that you're distributing through a CloudFront distribution. To use geographic restrictions, you have two options: Use the CloudFront geographic restrictions feature. Use this option to restrict access to all of the files that are associated with a distribution and to restrict access at the country level. Use a third-party geolocation service. Use this option to restrict access to a subset of the files that are associated with a distribution or to restrict access at a finer granularity than the country level.

   Source: Adapted from community discussion — Christina666

   References

   • AWS documentation

   Next question

8. Question 78 · 475 in bank

   A SysOps administrator created an Amazon VPC with an IPv6 CIDR block, which requires access to the internet. However, access from the internet towards the VPC is prohibited. After adding and configuring the required components to the VPC, the administrator is unable to connect to any of the domains that reside on the internet. What additional route destination rule should the administrator add to the route tables?

   • ARoute ::/0 traffic to a NAT gateway
   • BRoute ::/0 traffic to an internet gateway
   • CRoute 0.0.0.0/0 traffic to an egress-only internet gateway
   • DRoute ::/0 traffic to an egress-only internet gateway

   Show answer

   Answer: D

   Explanation

   IPv6 addresses are globally unique, and are therefore public by default. If you want your instance to be able to access the internet, but you want to prevent resources on the internet from initiating communication with your instance, you can use an egress-only internet gateway. To do this, create an egress-only internet gateway in your VPC, and then add a route to your route table that points all IPv6 traffic (::/0) or a specific range of IPv6 address to the egress-only internet gateway. IPv6 traffic in the subnet that's associated with the route table is routed to the egress-only internet gateway.

   Source: Adapted from community discussion — Christina666

   References

   • AWS documentation

   Next question

9. Question 79 · 475 in bank

   A company has a web application that is experiencing performance problems many times each night. A root cause analysis reveals sudden increases in CPU utilization that last 5 minutes on an Amazon EC2 Linux instance. A SysOps administrator must find the process ID (PID) of the service or process that is consuming more CPU. What should the SysOps administrator do to collect the process utilization information with the LEAST amount of effort?

   • AConfigure the Amazon CloudWatch agent procstat plugin to capture CPU process metrics.
   • BConfigure an AWS Lambda function to run every minute to capture the PID and send a notification.
   • CLog in to the EC2 instance by using a .pem key each night. Then run the top command.
   • DUse the default Amazon CloudWatch CPU utilization metric to capture the PID in CloudWatch.

   Show answer

   Answer: A

   Explanation

   A The procstat plugin enables you to collect metrics from individual processes. It is supported on Linux servers and on servers running Windows Server 2012 or later. https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Agent-procstat-process-metrics.html

   Source: Adapted from community discussion — moonwalkeryj

   References

   • AWS documentation

   Next question

10. Question 80 · 475 in bank

    A company hosts several write-intensive applications. These applications use a MySQL database that runs on a single Amazon EC2 instance. The company asks a SysOps administrator to implement a highly available database solution that is ideal for multi-tenant workloads. Which solution should the SysOps administrator implement to meet these requirements?

    • ACreate a second EC2 instance for MySQL. Configure the second instance to be a read replica.
    • BMigrate the database to an Amazon Aurora DB cluster. Add an Aurora Replica.
    • CMigrate the database to an Amazon Aurora multi-master DB cluster.
    • DMigrate the database to an Amazon RDS for MySQL DB instance.

    Show answer

    Answer: C

    Explanation

    C. Migrate the database to an Amazon Aurora multi-master DB cluster: Amazon Aurora multi-master enables multiple instances to write to the database simultaneously. This can provide high availability and fault tolerance, making it suitable for write-intensive workloads. It supports read and write operations across multiple instances, which is beneficial for multi-tenant workloads where different tenants may have different write patterns.

    Source: Adapted from community discussion — r2c3po

    References

    • AWS documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SOA-C02 practice, question 71. 475 questions available.