Free Amazon SOA-C02 Exam Dumps and SOA-C02 Exam Questions

Question No: 11

MultipleChoice

A company is using an AWS KMS customer master key (CMK) with imported key material The company references the CMK by its alias in the Java application to encrypt data The CMK must be rotated every 6 months

What is the process to rotate the key?

Options

AEnable automatic key rotation for the CMK and specify a period of 6 months

BCreate a new CMK with new imported material, and update the key alias to point to the new CMK.

CDelete the current key material, and import new material into the existing CMK

DImport a copy of the existing key material into a new CMK as a backup, and set the rotation schedule for 6 months

Question No: 12

MultipleChoice

update an existing AWS CloudFormation stack. If needed, a copy 0t the CloudFormation template is available in an Amazon SB bucket named cloudformation-bucket

1. Use the us-east-2 Region for all resources.

2. Unless specified below, use the default configuration settings.

3. update the Amazon EQ instance named Devinstance by making the following changes to the stack named 1700182:

a) Change the EC2 instance type to us-east-t2.nano.

b) Allow SSH to connect to the EC2 instance from the IP address range

192.168.100.0/30.

c) Replace the instance profile IAM role with IamRoleB.

4. Deploy the changes by updating the stack using the CFServiceR01e role.

5. Edit the stack options to prevent accidental deletion.

6. Using the output from the stack, enter the value of the Prodlnstanceld in the text box below:

Options

AExplanation:
Solution as given below.

Question No: 13

MultipleChoice

A company is running an application on premises and wants to use AWS for data backup. All of the data must be available locally. The backup application can write only to block-based storage that is compatible with the Portable Operating System Interface (POSIX).

Which backup solution will meet these requirements?

Options

AConfigure the backup software to use Amazon S3 as the target for the data backups.

BConfigure the backup software to use Amazon S3 Glacier as the target for the data backups.

CUse AWS Storage Gateway, and configure it to use gateway-cached volumes.

DUse AWS Storage Gateway, and configure it to use gateway-stored volumes.

Question No: 14

MultipleChoice

A instances at all times to support all traffic. A SysOps administrator must design a highly available, fault-tolerant architecture that continually supports all traffic if one Availability Zone becomes unavailable.

Which configuration meets these requirements?

Options

ADeploy two Auto Scaling groups in two Availability Zones with a minimum capacity of two instances in each group.

BDeploy an Auto Scaling group across two Availability Zones with a minimum capacity of four instances.

CDeploy an Auto Scaling group across three Availability Zones with a minimum capacity of four instances.

DDeploy an Auto Scaling group across three Availability Zones with a minimum capacity of six instances.

Question No: 15

MultipleChoice

A company has a stateless application that runs on four Amazon EC2 instances. The application requires tour instances at all times to support all traffic. A SysOps administrator must design a highly available, fault-tolerant architecture that continually supports all traffic if one Availability Zone becomes unavailable.

Which configuration meets these requirements?

Options

ADeploy two Auto Scaling groups in two Availability Zones with a minimum capacity of two instances in each group.

BDeploy an Auto Scaling group across two Availability Zones with a minimum capacity of four instances.

CDeploy an Auto Scaling group across three Availability Zones with a minimum capacity of four instances.

DDeploy an Auto Scaling group across three Availability Zones with a minimum capacity of six instances.

Question No: 16

MultipleChoice

A company is running a website on Amazon EC2 instances that are in an Auto Scaling group. When the website traffic increases, additional instances take several minutes to become available because of a longrunning user data script that installs software. A SysOps administrator must decrease the time that is required for new instances to become available.

Which action should the SysOps administrator take to meet this requirement?

Options

AReduce the scaling thresholds so that instances are added before traffic increases.

BPurchase Reserved Instances to cover 100% of the maximum capacity of the Auto Scaling group.

CUpdate the Auto Scaling group to launch instances that have a storage optimized instance type.

DUse EC2 Image Builder to prepare an Amazon Machine Image (AMI) that has pre-installed software.

Question No: 17

MultipleChoice

A company has an infernal web application that runs on Amazon EC2 instances behind an Application Load

Balancer. The instances run in an Amazon EC2 Auto Scaling group in a single Availability Zone. A SysOps

administrator must make the application highly available.

Which action should the SysOps administrator take to meet this requirement?

Options

AIncrease the maximum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.

BIncrease the minimum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.

CUpdate the Auto Scaling group to launch new instances in a second Availability Zone in the same AWS Region.

DUpdate the Auto Scaling group to launch new instances in an Availability Zone in a second AWS Region.

Question No: 18

MultipleChoice

A company hosts its website on Amazon EC2 instances behind an Application Load Balancer. The company manages its DNS with Amazon Route 53, and wants to point its domain's zone apex to the website.

Which type of record should be used to meet these requirements?

Options

AAn AAAA record for the domain's zone apex

BAn A record for the domain's zone apex

CA CNAME record for the domain's zone apex

DAn alias record for the domain's zone apex

Question No: 19

MultipleChoice

An Amazon S3 Inventory report reveals that more than 1 million objects in an S3 bucket are not encrypted.

These objects must be encrypted, and all future objects must be encrypted at the time they are written.

Which combination of actions should a SysOps administrator take to meet these requirements? (Choose two.)

Options

ACreate an AWS Config rule that runs evaluations against configuration changes to the S3 bucket. When an unencrypted object is found, run an AWS Systems Manager Automation document to encrypt the object in place.

BEdit the properties of the S3 bucket to enable default server-side encryption.

CFilter the S3 Inventory report by using S3 Select to find all objects that are not encrypted. Create an S3 Batch Operations job to copy each object in place with encryption enabled.

DFilter the S3 Inventory report by using S3 Select to find all objects that are not encrypted. Send each object name as a message to an Amazon Simple Queue Service (Amazon SQS) queue. Use the SQS queue to invoke an AWS Lambda function to tag each object with a key of 'Encryption' and a value of 'SSE-KMS'.

EUse S3 Event Notifications to invoke an AWS Lambda function on all new object-created events for the S3 bucket. Configure the Lambda function to check whether the object is encrypted and to run an AWS Systems Manager Automation document to encrypt the object in place when an unencrypted object is found.

Question No: 20

MultipleChoice

A SysOps administrator is notified that an Amazon EC2 instance has stopped responding. The AWS

Management Console indicates that the system checks are failing.

What should the administrator do first to resolve this issue?

Options

AReboot the EC2 instance so it can be launched on a new host.

BStop and then start the EC2 instance so that it can be launched on a new host.

CTerminate the EC2 instance and relaunch it.

DView the AWS CloudTrail log to investigate what changed on the EC2 instance.