Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Amazon Web Services
AWS Certified Associate
SOA-C01
AWS Certified SysOps Administrator - Associate Questions and Answers

Pass the Amazon Web Services AWS Certified Associate SOA-C01 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam SOA-C01 Premium Access

View all detail and faqs for the SOA-C01 exam

Go to Exam

762 Students Passed

91% Average Score

96% Same Questions

Viewing page 8 out of 8 pages

Viewing questions 71-80 out of questions

Questions # 71:

An organization has developed a new memory-intensive application that is deployed to a large Amazon EC2 Linux fleet. There is concern about potential memory exhaustion, so the Development team wants to monitor memory usage by using Amazon CloudWatch.

What is the MOST efficient way to accomplish this goal?

Options:

Deploy the solution to memory-optimized EC2 instances, and use the CloudWatch MemoryUtilization metric

Enable the Memory Monitoring option by using AWS Config

Install the AWS Systems Manager agent on the applicable EC2 instances to monitor memory

Monitor memory by using a script within the instance, and send it to CloudWatch as a custom metric

Answer

Questions # 72:

A SysOps Administrator is using AWS KMS with AWS-generated key material to encrypt an Amazon EBS volume in a company’s AWS environment. The Administrator wants to rotate the KMS keys using automatic key rotation, and needs to ensure that the EBS volume encrypted with the current key remains readable.

What should be done to accomplish this?

Options:

Back up the current KMS key and enable automatic key rotation.

Create a new key in AWS KMS and assign the key to Amazon EBS.

Enable automatic key rotation of the EBS volume key in AWS KMS.

Upload ne key material to the EBS volume key in AWS KMS to enable automatic key rotation for the volume.

Answer

Explanation

References: https://docs.aws.amazon .com/kms/latest/developerguide/rotate-keys.html

Questions # 73:

A Development team is designing an application that processes sensitive information within a hybrid deployment. The team needs to ensure the application data is protected both in transit and at rest.

Which combination of actions should be taken to accomplish this? (Choose two.)

Options:

Use a VPN to set up a tunnel between the on-premises data center and the AWS resources

Use AWS Certificate Manager to create TLS/SSL certificates

Use AWS CloudHSM to encrypt the data

Use AWS KMS to create TLS/SSL certificates

Use AWS KMS to manage the encryption keys used for data encryption

Answer

A, E

Explanation

[Reference:, https://wa.aws.amazon.com/wat.question.SEC_10.en.html, https://aws.amazon.com/blogs/database/best-practices-for-securing-sensitive-data-in-aws-data-stores/, ]

Questions # 74:

A company's application running on Amazon EC2 Linux recently crashed because it ran out ot available memory. Management wants to be alerted if this ever happens again. Which combination of steps will accomplish this? (Select TWO.)

Options:

Create an Amazon CloudWatch dashboard to monitor the memory usage metrics on the Instance over time.

Create an alarm on the dashboard that publishes an Amazon SNS notification to alert the CIO when a threshold is passed.

Create an alarm on the metric that publishes an Amazon SNS notification to alert the CIO when a threshold is passed.

Create an alarm on the AWS Personal Health Dashboard that publishes an Amazon SNS notification to alert the CIO when the system is out of memory.

Configure the Amazon CloudWatch agent to collect and push memory usage metrics on the instance.

Answer

B, E

Questions # 75:

A SysOps Administrator created an Application Load balancer (ALB) and placed two Amazon EC2 instances in the same subnet behind the ALB. During monitoring, the Administrator observes HealthyHostCount drop to 1 in Amazon CloudWatch.

What is MOST likely causing this issue?

Options:

The EC2 instances are in the same Availability Zone, causing contention between the two.

The route tables are not updated to allow traffic to flow between the ALB and the EC2 instances.

The ALB health check has failed, and the ALB has taken EC2 instances out of service.

The Amazon Route 53 health check has failed, and the ALB has taken EC2 instances out of service.

Answer

Explanation

https://docs .aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-troubleshooting.html

Questions # 76:

A SysOps Administrator needs an Amazon EBS volume type for a big data application. The application data is accessed infrequently and stored sequentially.

What EBS volume type will be the MOST cost-effective solution?

Options:

Provisioned IOPS SSD (io1)

Cold HDD (sc1)

Throughput Optimized HDD (st1)

General Purpose SSD (gp2)

Answer

Questions # 77:

A company needs to run a distributed application that processes large amounts of data across multiple EC2 instances. The application is designed to tolerate processing interruptions.

What is the MOST cost-effective Amazon EC2 pricing model for these requirements?

Options:

Dedicated Hosts

On-Demand instances

Reserved instances

Spot instances

Answer

Questions # 78:

A web application runs on Amazon EC2 instances and accesses external services. The external services require authentication credentials. The application is deployed using AWS CloudFormation to three separate environments development test, and production Each environment requires unique credentials for external services

What option securely provides the application with the needed credential while requiring MINIMAL administrative overhead?

Options:

Pass the credentials for the target environment to the CloudFormation template as parameters Use the user data script to insert the parameterized credentials into the EC2 instances

Store the credentials as secure strings in AWS Systems Manager Parameter Store. Pass an environment tag as a parameter to the CloudFormation template Use the user data script to insert the environment tag in the EC2 instances Access the credentials from the application

Create a separate CloudFormation template for each environment in the Resources section include a user data script for each EC2 instance Use the user data script to insert the proper credentials for the environment into the EC2 instances

Create separate Amazon Machine Images (AMIs) with the required credentials for each environment Pass the environment tag as a parameter to the CloudFormation template In the Mappings section of the CloudFormation template, map the environment tag to the proper AMI then use that AMI when launching the EC2 instances

Answer

Viewing page 8 out of 8 pages

Viewing questions 71-80 out of questions