Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Amazon Web Services
AWS Certified Associate
SOA-C01
AWS Certified SysOps Administrator - Associate Questions and Answers

Pass the Amazon Web Services AWS Certified Associate SOA-C01 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam SOA-C01 Premium Access

View all detail and faqs for the SOA-C01 exam

Go to Exam

762 Students Passed

91% Average Score

96% Same Questions

Viewing page 3 out of 8 pages

Viewing questions 21-30 out of questions

Questions # 21:

A SysOps Administrator is notified that an Amazon EC2 instance has stopped responding The AWS Management Console indicates that the system status checks are failing What should the SysOps Administrator do first to resolve this issue?

Options:

Reboot the EC2 instance so it can be launched on a new host

Stop and then start the EC2 instance so that it can be launched on a new host

Terminate the EC2 instance and relaunch it.

View the AWS CloudTrail log to investigate what changed on the EC2 instance

Answer

Questions # 22:

The Chief Financial Officer (CFO) of an organization has seen a spike in Amazon S3 storage costs over the last few months A sysops administrator suspects that these costs are related to storage for older versions of S3 objects from one of its S3 buckets

What can the administrator do to confirm this suspicion1?

Options:

Enable Amazon S3 inventory and then query the inventory to identify the total storage of previous object versions

Use object-level cost allocation tags to identify the total storage of previous object versions.

Enable the Amazon S3 analytics feature for the bucket to identify the total storage of previous object versions

Use Amazon CloudWatch storage metrics for the S3 bucket to identify the total storage of previous object versions

Answer

Questions # 23:

A fleet of servers must send local logs to Amazon CloudWatch.

How should the servers be configured to meet this requirement?

Options:

Configure AWS Config to forward events to CloudWatch.

Configure a Simple Network Management Protocol (SNMP) agent to forward events to CloudWatch.

Install and configure the unified CloudWatch agent.

Install and configure the Amazon Inspector agent.

Answer

Questions # 24:

A sysops administrator must generate a report that provides a breakdown of all API activity by a specific user over the course of a year. AWS CloudTrail has already been enabled.

How should this report be generated?

A, Access the Cloud Trail logs stored in the Amazon S3 bucket tied to Cloud Trail. Use Amazon Athena to extract the information needed to generate the report

B. Locate the monthly reports that CloudTrail sends that are emailed to the account's root user. Forward the reports to the auditor using a secure channel

C. Use the AWS Management Console to search for the user name in the CloudTrail history. Filter by API and download the report in CSV format

D. Use the CloudTrail digest files stored in the company's Amazon S3 bucket. Send the logs to Amazon QuickSight to create the report.

Options:

Answer

Answer:

Questions # 25:

A company’s application stores documents within an Amazon S3 bucket. The application is running on Amazon EC2 in a VPC. A recent change in security requirements states that traffic between the company’s application and the S3 bucket must never leave the Amazon network.

What AWS feature can provide this functionality?

Options:

Security groups

NAT gateways

Virtual private gateway

Gateway VPC endpoints

Answer

Explanation

When using VPC with S3, use VPC S3 endpoints as

Questions # 26:

A company's application infrastructure was deployed using AWS CloudFormation and is composed of Amazon EC2 instances behind an Application Load Balancer. The instances run an EC2 Auto Scaling group across multiple Availability Zones. When releasing a new version of the application, the update deployment must avoid DNS changes and allow rollback.

Which solution should a sysops administrator use to meet the deployment requirements for this new release?

Options:

Configure the Auto Scaling group to use lifecycle hooks. Deploy now instances with the new application version. Complete the lifecycle hook action once healthy.

Create a new Amazon Machine Image (AMI) containing the updated code. Create a launch configuration with the AMI. Update Auto Scaling group to use the new lauch configuration.

Deploy a second CloudFormation stack. Wait for the application to be available Cut over to the new Application Load Balancer

Modify the CloudFormation template to use an AutoScalingReplacingUpdate policy. Update the stack. Perform a second update with the new release

Answer

Questions # 27:

Which type routing protocol operates by exchanging the entire routing information?

Options:

exterior gateway protocols

link-state protocols

distance-vector protocols

Path-vector protocols

Answer

Questions # 28:

A SysOps Administration team is supporting an applications that stores a configuration file in an Amazon S3 bucket Previous revisions of the configuration file must be maintained for change control and rollback

How should the S3 bucket be configured to meet these requirements?

Options:

Enable a lifecycle policy on the S3 bucket

Enable cross-origin resource sharing on the S3 bucket

Enable object tagging on the S3 bucket

Enable versioning on the S3 bucket

Answer

Questions # 29:

A company needs to restrict access to an Amazon S3 bucket to Amazon EC2 instances in a VPC only All traffic must be over the AWS private network What actions should the SysOps Administrator take to meet these requirements?

Options:

Create a VPC endpoint for the S3 bucket, and create an IAM policy that conditionally limits al S3 actions on the bucket to the VPC endpoint as the source

Create a VPC endpoint for the S3 bucket and create a S3 bucket policy that conditionally limits all S3 actions on the bucket to the VPC endpoint as the source

Create a service-linked role for Amazon EC2 that allows the EC2 instances to interact directly with Amazon S3, and attach an IAM policy to the role that allows the EC2 instances full access to the S3 bucket

Create a NAT gateway in the VPC, and modify the VPC route table to route all traffic destined for Amazon S3 through the NAT gateway

Answer

Questions # 30:

A SysOps Administrator has been tasked with deploying a company’s infrastructure as code. The Administrator wants to write a single template that can be reused for multiple environments in a safe, repeatable manner.

What is the recommended way to use AWS CloudFormation to meet this requirement?