Latest Amazon SOA-C02 Actual Free Exam Questions & Community Discussion, Page 4

Question #28

A company stores customer data in an Amazon S3 bucket. Users from several AWS accounts need to access the data. The company owns some of the accounts. Partner companies own the other accounts that need to access the data.
A SysOps administrator needs to implement a solution to give users the ability to query the data.
The solution must track which users access each object. Additionally, the solution must minimize ongoing administrative effort as new users are added in the future.
Which solution will meet these requirements?

A. Create an AWS Lake Formation data lake. Add the 3 bucket as a data source. Use Lake Formation to create a role-based permissions structure. Create a trust policy for a user role that has Lake Formation permissions. Add each user to the trust policy.

B. Enable S3 bucket access logging. Modify the S3 bucket policy to allow access from Amazon Athena. Grant each user access to Athena through Athena workgroups.

C. Create an AWS Lake Formation data lake. Add the S3 bucket as a data source. Use Lake Formation to create a role-based permissions structure. Create resource shares in Lake Formation for all accounts that require access.

D. Enable S3 bucket access logging. Modify the S3 bucket policy to allow access from Amazon Athena. Grant each user access to Athena through IAM permissions.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #29

A company has an Amazon Route 53 private hosted zone in its AWS account. The private hosted zone is connected to the company's on-premises data center by an AWS Direct Connect connection. Virtual machines (VMs) in the on-premises data center need to resolve DNS queries that exist in the private hosted zone.
What is the MOST operationally efficient solution that meets this requirement?

A. Create a Route 53 outbound resolver.
Configure the on-premises VMs to use the outbound resolver.

B. Configure a Route 53 public hosted zone.
Create an NS record for the private hosted zone.Query the public hosted zone from the on-premises VMs.

C. Create a Route 53 inbound resolver.
Configure the on-premises VMs to use the inbound resolver.

D. Configure the security group on the Route 53 private hosted zone by adding an inbound rule for the on-premises CIDR range.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #30

A company uses an Amazon S3 bucket to store data files. The S3 bucket contains hundreds of objects.
The company needs to replace a tag on all the objects in the S3 bucket with another tag.
What is the MOST operationally efficient way to meet this requirement?

A. Use S3 Batch Operations.
Specify the operation to replace all object tags.

B. Use the AWS CLI to get the tags for each object.
Save the tags in a list.
Use S3 Batch Operations.
Specify the operation to delete all object tags.
Use the AWS CLI and the list to retag the objects.

C. Use the AWS CLI to copy the objects to another S3 bucket.
Add the new tag to the copied objects.
Delete the original objects.

D. Use the AWS CLI to get the tags for each object.
Save the tags in a list.
Use the AWS CLI and the list to remove the object tags.
Use the AWS CLI and the list to retag the objects.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #31

A company needs to copy an Amazon Aurora database from one AWS account to a second account that uses a second AWS Region. A SysOps administrator must automate this process to occur every day.
Which solution will meet these requirements with the LEAST operational overhead?

A. Configure AWS Application Migration Service to replicate the Aurora database. Specify the second account and the second Region as the destination.

B. Create a backup plan in AWS Backup. Specify the second account and the second Region as the destination.

C. Create an Amazon EventBridge rule that runs on a schedule. Create an AWS Lambda function that runs an automation script to copy the database to the second account and the second Region. Use the EventBridge rule to invoke the Lambda function.

D. Configure Amazon EventBridge Scheduler with a recurring rule. Add the RDS StartExportTask API operation as a target. Specify the relevant details about the database and an Amazon S3 bucket to store the exported data. Create a replication rule for the S3 bucket to replicate data to the second account and the second Region.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #32

A company uses AWS CloudFormation to manage a stack of Amazon EC2 instances on AWS. A SysOps administrator needs to keep the instances and all of the instances' data, even if someone deletes the stack.
Which solution will meet these requirements?

A. Set the DeletionPolicy attribute to Retain for the EC2 instance resource in the CloudFormation template.

B. Create a backup plan in AWS Backup.

C. Set the DeletionPolicy attribute to Snapshot for the EC2 instance resource in the CloudFormation template.

D. Automate backups by using Amazon Data Lifecycle Manager (Amazon DLM).

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #33

A database is running on an Amazon RDS Multi-AZ DB instance. A recent security audit found the database to be out of compliance because it was not encrypted.
Which approach will resolve the encryption requirement?

A. Create a new encrypted Amazon EBS volume and attach it to the instance.

B. Take a snapshot of the RDS instance, copy and encrypt the snapshot, and then restore to the new RDS instance.

C. Encrypt the standby replica in the secondary Availability Zone and promote it to the primary instance.

D. Log in to the RDS console and select the encryption box to encrypt the database.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #34

A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer. The instances are in an Amazon EC2 Auto Scaling group. The application is accessed with a public URL.
A SysOps administrator needs to implement a monitoring solution that checks the availability of the application and follows the same routes and actions as a customer. The SysOps administrator must receive a notification if less than 95% of the monitoring runs find no errors.
Which solution will meet these requirements?

A. Create an AWS Lambda function for each customer path to check whether that specific endpoint is available. Schedule the Lambda functions by using Amazon EventBridge (Amazon CloudWatch Events). Configure each Lambda function to publish a custom metric to Amazon CloudWatch for the endpoint status. Create CloudWatch alarms based on each custom metric to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic when an alarm is in the ALARM state.

B. Create Amazon Route 53 health checks that monitor the availability of the endpoint. Create Amazon CloudWatch alarms that publish a message to an Amazon Simple Notification Service (Amazon SNS) topic when the HealthCheckPercentageHealthy metric is less than 95%.

C. Create an Amazon CloudWatch Synthetics canary with a script that follows customer routes.
Schedule the canary to run on a recurring schedule. Create a CloudWatch alarm that publishes a message to an Amazon Simple Notification Service (Amazon SNS) topic when the SuccessPercent metric is less than 95%.

D. Create a single AWS Lambda function to check whether the endpoints are available for each customer path. Schedule the Lambda function by using Amazon EventBridge (Amazon CloudWatch Events). Configure the Lambda function to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic when an endpoint returns an error.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #35

A company migrates a write-once, ready-many (WORM) drive to an Amazon S3 bucket that has S3 Object Lock configured in governance mode. During the migration, the company copies unneeded data to the S3 bucket.
A SysOps administrator attempts to delete the unneeded data from the S3 bucket by using the AWS CLI. However, the SysOps administrator receives an error.
Which combination of steps should the SysOps administrator take to successfully delete the unneeded data? (Choose two.)

A. Include the x-amz-bypass-governance-retention:true header in the request when issuing the delete command.

B. Increase the Retain Until Date.

C. Assume a role that has the s3:BypassLegalRetention permission.

D. Include the x-amz-bypass-legal-retention:true header in the request when issuing the delete command.

E. Assume a role that has the s3:BypassGovernanceRetention permission.

Discussion 0

Correct Answer: A,C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #36

A company has users that deploy Amazon EC2 instances that have more disk performance capacity than is required. A SysOps administrator needs to review all Amazon Elastic Block Store (Amazon EBS) volumes that are associated with the instances and create cost optimization recommendations based on IOPS and throughput.
What should the SysOps administrator do to meet these requirements in the MOST operationally efficient way?

A. Install the fio tool onto the EC2 instances and create a .cfg file to approximate the required workloads. Use the benchmark results to gauge whether the provisioned EBS volumes are of the most appropriate type.

B. Use the monitoring graphs in the EC2 console to view metrics for EBS volumes. Review the consumed space against the provisioned space on each volume. Identify any volumes that have low utilization.

C. Opt in to AWS Compute Optimizer. Allow sufficient time for metrics to be gathered. Review the Compute Optimizer findings for EBS volumes.

D. Stop the EC2 instances from the EC2 console. Change the EC2 instance type for Amazon EBS- optimized. Start the EC2 instances.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Amazon SOA-C02 Actual Free Exam Questions & Community Discussion

Download Free Amazon SOA-C02 Demo