Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Pass the Amazon Web Services AWS Certified Associate SOA-C01 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.
Exam SOA-C01 Premium Access

View all detail and faqs for the SOA-C01 exam


762 Students Passed

91% Average Score

96% Same Questions
Viewing page 2 out of 8 pages
Viewing questions 11-20 out of questions
Questions # 11:

A Systems Administrator is responsible for maintaining custom, approved AMIs for a company. These AMIs must be shared with each of the company’s AWS accounts.

How can the Administrator address this issue?

Options:

A.

Contact AWS Support for sharing AMIs with other AWS accounts.

B.

Modify the permissions on the AMIs so that they are publicly accessible.

C.

Modify the permissions on the IAM role that are associated with the AMI.

D.

Share the AMIs with each AWS account using the console or CLI.

Questions # 12:

Which command must be present in a Cisco device configuration to enable the device to resolve an FQDN?

Options:

A.

ip domain-name

B.

ip domain-lookup

C.

ip host

D.

ip name-server

Questions # 13:

The Security team at AnyCompany discovers that some employees have been using individual AWS accounts that are not under the control of AnyCompany. The team has requested that those individual accounts be linked to the central organization using AWS Organizations.

Which action should a SysOps Administrator take to accomplish this?

Options:

A.

Add each existing account to the central organization using AWS IAM.

B.

Create a new organization in each account and join them to the central organization.

C.

Log in to each existing account an add them to the central organization.

D.

Send each existing account an invitation from the central organization.

D18912E1457D5D1DDCBD40AB3BF70D5D

Questions # 14:

A company is about to launch a new product and is expecting a large increase in application traffic. The application is running on Amazon EC3 is an Auto scaling group and using an Amazon RDS multi-AZ instance. The static content is stored in Amazon S3. During the load test, the time to access the application increased significantly. A SysOps administrator wants to increase the scalability of the application without compromising the durability of the architecture.

How can this goal be achieved?

Options:

A.

Move the static content from Amazon EFS and serve that the content through the EC2 instances.

B.

Move the databases from Amazon RDS to Amazon ElastiCache for Memcached.

C.

Use Amazon Cloudfront to cache the static content.

D.

Use Amazon Route S3 with geolocation routing.

Questions # 15:

In configuring an Amazon Route 53 health check, a SysOps Administrator selects ‘Yes’ to the String Matching option in the Advanced Configuration section. In the Search String box, the Administrator types the following text: /html.

This is to ensure that the entire page is loading during the health check. Within 5 minutes of enabling the

health check, the Administrator receives an alert stating that the check failed. However, when the

Administrator navigates to the page, it loads successfully.

What is the MOST likely cause of this false alarm?

Options:

A.

The search string is not HTML-encoded.

B.

The search string must be put in quotes.

C.

The search string must be escaped with a backslash (\) before the forward slash (/).

D.

The search string is not in the first 5120 bytes of the tested page.

Questions # 16:

A company has multiple AWS accounts. The company uses AWS Organizations with an organizational unit (OU) tor the production account and another OU for the development account. Corporate policies state that developers may use only approved AWS services in the production account.

What is the MOST operationally efficient solution to control the production account?

Options:

A.

Create a customer managed policy in AWS Identity and Access Management (1AM) Apply the policy to all users within the production account.

B.

Create a job function policy in AWS Identity and Access Management (1AM). Apply the policy to all users within the production OU.

C.

Create a service control policy (SCP). Apply the SCP to the production OU.

D.

Create an IAM policy. Apply the policy in Amazon API Gateway to restrict the production account.

Questions # 17:

A recent AWS CloudFormation stack update has failed and returned the error update_rollback_failed. A Sysops administrator is tasked with returning the CloudFormation stack to its previous working state.

What must be done to accomplish this?

Options:

A.

Fix the error that caused the attack to fail, then select the continue update Rollback action in the console.

B.

Select the update stack action with a working template in the console.

C.

Update the password of the IAM user, then select the continue update rollback action in the console.

D.

Use the AWS CLI to manually change the stack status to update_complete, then continue updating the stack with a working template.

Questions # 18:

A SysOps administrator is creating an AWS CloudFormation template that uses Amazon EC2 auto scaling to launch EC2 instances with windows 2016. The administrator wants to configure the CloudFormation template to ensure that newly launched instances include recent security updates before serving application traffic. This will minimize the time it takes for the instance to start.

Which action will meet these requirements?

Options:

A.

Configure the template to retrieve the latest windows Amazon machine image (AMI) from AWS systems manager parameter store.

B.

Configure the template to use AWS system manager patch manager to update instances when they are launched.

C.

Create a CloudFormation nested stack that creates a new Amazon Machine Image (AMI), then use that AMI ID in the auto scaling launch configuration.

D.

Update the template with a user data script that runs windows update using the command line and then calls cfn-signal.

Questions # 19:

An application is being developed that will be served across a fleet of Amazon EC2 instances, which require a consistent view of persistent data. Items stored vary in size from 1 KB lo 300MB; the items are read frequently, created occasionally, and often require partial changes without conflict. The data store is not expected to grow beyond 2TB. and items will be expired according to age and content type.

Which AWS service solution meets these requirements?

Options:

A.

Amazon S3 buckets with lifecycle policies to delete old objects

B.

Amazon ROS PostgreSQL and a job that deletes rows based on age and file type columns.

C.

Amazon EFS and a scheduled process to delete files based on age and extension.

D.

An EC2 instance store synced on boot from a central Amazon EBS-backed instance.

Questions # 20:

A SysOps Administrator is deploying a legacy web application on AWS. The application has four Amazon EC2 instances behind Classic Load Balancer and stores data in an Amazon RDS instance. The legacy application has known vulnerabilities to SQL injection attacks, but the application code is no longer available to update.

What cost-effective configuration change should the Administrator make to migrate the risk of SQL injection attacks?

Options:

A.

Configure Amazon GuardDuty to monitor the application for SQL injection threats.

B.

Configure AWS WAF with a Classic Load Balancer for protection against SQL injection attacks.

C.

Replace the Classic Load Balancer with an Application Load Balancer and configure AWS WAF on the Application Load Balancer.

D.

Configure an Amazon CloudFront distribution with the Classic Load Balancer as the origin and subscribe to AWS Shield Standard.

Viewing page 2 out of 8 pages
Viewing questions 11-20 out of questions
TOP CODES

TOP CODES

Top selling exam codes in the certification world, popular, in demand and updated to help you pass on the first try.