Latest Amazon SOA-C01 Actual Free Exam Questions & Community Discussion, Page 3

Question #29

A company has received a notification in its AWS Personal Health Dashboard that one of its Amazon EBS-backed Amazon EC2 instances is on hardware that is scheduled maintenance The instance runs a critical production workload that must be available during normal business hours Which steps will ensure that the instance maintenance does not produce an outage?

A. Stop and start the EC2 instance during a maintenance window outside of normal business hours

B. Enable termination protection on the EC2 instance

C. Configure an Amazon Lambda function to automatically start the instance if it is stopped

D. Create an Amazon Machine Image (AMI) of the instance and use the AMI to launch a new instance once the existing instance is retired

Discussion 0

Correct Answer: A Vote an answer

Question #30

A company has centralized all its logs into one Amazon CloudWatch Logs log group. The SysOps Administrator is to alert different teams of any issues relevant to them.
What is the MOST efficient approach to accomplish this?

A. Create an AWS Auto Scaling group of Amazon EC2 instances that will scale based on the amount of ingested log entries. This group will pull streams, look for patterns, and send notifications to relevant teams.

B. Redesign the aggregation of logs so that each team's relevant parts are sent to a separate log group, then subscribe each team to its respective log group.

C. Set up different metric filters for each team based on patterns and alerts. Each alarm will notify the appropriate notification list.

D. Write a AWS lambda function that will query the logs every minute and contain the logic of which team to notify on which patterns and issues.

Discussion 0

Correct Answer: A Vote an answer

Question #31

An enterprise is using federated Security Assertion Markup Language (SAML) to access the AWS Management Console.
How should the SAML assertion mapping be configured?

A. Map the policy attribute to IAM policies the federated user is assigned to. These policies govern access to AWS resources.

B. Map the group attribute to an AWS group. The AWS group is assigned IAM policies that govern access to AWS resources.

C. Map the role attribute to an AWS role. The AWS role is assigned IAM policies that govern access to AWS resources.

D. Map the user attribute to an AWS user. The AWS user is assigned specific IAM policies that govern access to AWS resources.

Discussion 0

Correct Answer: C Vote an answer

Question #32

A development team recently deployed new version of a web application to production. After the release, penetration testing revealed a cross-site scripting vulnerability that could expose user data.
Which AWS service will mitigate this issue?

A. AWS WAF

B. Elastic Load balancing

C. AWS Shield Standard

D. Amazon Cognito

Discussion 0

Correct Answer: A Vote an answer

Question #33

A SySOps Administrator has created a new Amazon S3 bucket named mybucket for the Operations team. Members of the team are part of an IAM group to which the following IAM policy has been assigned.

Which of the following actions will be allowed on the bucket? (Select TWO.)

A. List all the buckets in the account.

B. Download an object

C. Delete an object.

D. Delete the bucket

E. Get the bucket's region.

Discussion 0

Correct Answer: B,C Vote an answer

Question #34

A company uses AWS CloudFormation to deploy its application infrastructure. Recently, a user accidentally changed a property of a database in a CloudFormation template and performed a stack update that caused an interruption to the application. A SysOps Administrator must determine how to modify the deployment process to allow the DevOps team to continue to deploy the infrastructure, but prevent against accidental modifications to specific resources.
Which solution will meet these requirements?

A. Attach an IAM policy to the DevOps team role that prevents a CloudFormation stack from updating, with a condition based on the specific Amazon Resource names (ARNs) of the protected resources.

B. Set up an Amazon CloudWatch Events event with a rule to trigger based on any CloudFormation API call. An AWS Lambda function can then describe the stack to determine if any protected resources were modified and cancel the operation.

C. Set up an AWS Config rule to alert based on changes to any Cloud Formation stack. An AWS Lambda function can then describe the stack to determine if any protected resources were modified and cancel the operation.

D. Launch the CloudFormation templates using a stack policy with an explicit allow for all resources and an explicit deny of the protected resources with an action of Update:*

Discussion 0

Correct Answer: D Vote an answer

Question #35

A company uses AWS CloudFotmatlon to provision ils VPC. Amazon EC2 instances, and Amazon RDS DB instance The DB instance was deleted manually. When the stack was updated, it (ailed. During rollback, the stack returned the UPDATE_ROLLBACK_FAILEO state. A SysOps administrator must return the AWS Cloud Formation stack to a working state without interrupting existing resources.
Which solution will meet this requirement?

A. Remove Amazon RDS from the template, and update the stack.

B. Run the signal-resource command with the 08 instance name to proceed with the stack rollback.

C. Continue the update rollback while skipping the resources that have been manually deleted.

D. Recreate the DB Instance using the same resource name, and update the stack.

Discussion 0

Correct Answer: A Vote an answer

Question #36

A sysops administrator is implementing SSL for a domain of an internet facing application running behind an Application load balancer (ALB). The administrator decides to use an SSL certificates from Amazon certificate Manager (ACM) to secure it. Upon creating a request for the ALB fully qualified domain name (FQND), it fails, and the error message "Domain not allowed" is displayed.
How can the administrator fix this issue?

A. Contact AWS support and verify the request by answering security challenge questions.

B. Contact the domain register and ask them to provide the verification required by AWS.

C. Select the certificate request in the ACM console and resend the validation email.

D. Place a new request with the proper domain name instead of the ALB FQDN.

Discussion 0

Correct Answer: D Vote an answer

Question #37

A company's web application runs on Amazon EC2 instances behind an ELB Application Load Balancer. The EC2 instances run in an EC@ Auto Scaling group across multiple Availability Zones. Data is stored in an Amazon ElastiCache for Radius cluster and an Amazon RDS DB instance. Company policy requires all system patching to take place at midnight on Tuesday.
Which resources will need to have a maintenance window configured for midnight on Tuesday? (Choose two.)

A. RDS instance

B. EC2 instances

C. Elastic Load Balancer

D. ElastiCache cluster

E. Auto Scaling group

Discussion 0

Correct Answer: A,D Vote an answer

Question #38

An application runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances run in an Auto Scaling group across multiple Availability Zones. The Information Security team wants to track application requests by the originating IP and the EC2 instance that processes the request.
Which of the following tools or services provides this information?

A. Elastic Load Balancing access logs

B. VPC Flow Logs

C. Amazon CloudWatch

D. AWS CloudTrail

Discussion 0

Correct Answer: D Vote an answer

Question #39

A SysOps Administrator manages an Amazon RDS MySQL DB instance in production. The database is accessed by several applications. The Administrator needs to ensure minimal downtime of the applications in the event the database suffers a failure. This change must not impact customer use during regular business hours.
Which action will make the database MORE highly available?

A. Create a read replica from the existing database outside of business hours

B. Create a new Multi-AZ RDS DB instance. Migrate the data to the new DB instance and delete the old one

C. Modify the DB instance to outside of business hours be a Multi-AZ deployment To convert an existing Single-AZ DB Instance to a Multi-AZ deployment, use the "Modify" option corresponding to your DB Instance in the AWS Management Console. https://aws.amazon.com/rds/features/multi-az/

D. Contact AWS Support to pre-warm the database to ensure that it can handle any unexpected spikes in traffic

Discussion 0

Correct Answer: C Vote an answer

Question #40

A company is using an AWS KMS customer master key (CMK) with imported key material. The company references the CMK by its alias in the Java application to encrypt dat a. The CMK must be rotated every 6 months What is the process to rotate the key?

A. Create a new CMK with new imported material and update the key alias to point to the new CMK

B. Import a copy of the existing key material into a new CMK as a backup and set the rotation schedule for 6 months

C. Delete the current key material and import new material into the existing CMK

D. Enable automatic key rotation tor the CMK and specify a period of 6 months

Discussion 0

Correct Answer: D Vote an answer

Question #41

A SysOps Administrator created an Application Load balancer (ALB) and placed two Amazon EC2 instances in the same subnet behind the ALB. During monitoring, the Administrator observes HealthyHostCount drop to 1 in Amazon CloudWatch.
What is MOST likely causing this issue?

A. The Amazon Route 53 health check has failed, and the ALB has taken EC2 instances out of service.

B. The route tables are not updated to allow traffic to flow between the ALB and the EC2 instances.

C. The ALB health check has failed, and the ALB has taken EC2 instances out of service.

D. The EC2 instances are in the same Availability Zone, causing contention between the two.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #42

An application resides on multiple EC2 instances in public subnets in two Availability Zones. To improve security, the Information Security team has deployed an Application Load Balancer (ALB) in separate subnets and pointed the DNS at the ALB instead of the EC2 instances.
After the change, traffic is not reaching the instances, and an error is being returned from the ALB.
What steps must a SysOps Administrator take to resolve this issue and improve the security of the application? (Select TWO.)

A. Change the security group for the EC2 instances to allow access from only the ALB security group, and remove the public IPs from the instances.

B. Add the EC2 instances to an Auto Scaling group, configure the health check to ensure that the instances report healthy, and remove the public IPs from the instances.

C. Change the security group to allow access from 0.0.0.0/0, which permits access from the ALB.

D. Add the EC2 instances to the ALB target group, configure the health check, and ensure that the instances report healthy.

E. Create a new subnet in which EC2 instances and ALB will reside to ensure that they can communicate, and remove the public IPs from the instances.

Discussion 0

Correct Answer: A,D Vote an answer

Amazon SOA-C01 Actual Free Exam Questions & Community Discussion

Download Free Amazon SOA-C01 Demo