📘 Free SOA-C02 Sample Questions
A company has an infernal web application that runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto
Scaling group in a single Availability Zone. A SysOps administrator must make the application highly available. Which action should the SysOps administrator take to meet this requirement?
A
Increase the maximum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.
B
Increase the minimum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.
C
Update the Auto Scaling group to launch new instances in a second Availability Zone in the same AWS Region.
D
Update the Auto Scaling group to launch new instances in an Availability Zone in a second AWS Region.
Correct Answer:
C. Update the Auto Scaling group to launch new instances in a second Availability Zone in the same AWS Region.
Explanation:
C is the answer. Spreading it across zones.
A and B doesnt make it highly available if a zone goes down. D is false as ASG is region bound, as seen here:
https://docs.aws.amazon.com/autoscaling/ec2/userguide/auto-scaling-benefits.html
A company has deployed a web application in a VPC that has subnets in three Availability Zones. The company launches three Amazon EC2 instances from an
EC2 Auto Scaling group behind an Application Load Balancer (ALB).
A SysOps administrator notices that two of the EC2 instances are in the same Availability Zone, rather than being distributed evenly across all three Availability
Zones. There are no errors in the Auto Scaling group's activity history.
What is the MOST likely reason for the unexpected placement of EC2 instances?
A
One Availability Zone did not have sufficient capacity for the requested EC2 instance type.
B
The ALB was configured for only two Availability Zones.
C
The Auto Scaling group was configured for only two Availability Zones.
D
Amazon EC2 Auto Scaling randomly placed the instances in Availability Zones.
Correct Answer:
C. The Auto Scaling group was configured for only two Availability Zones.
Explanation:
Correct Answer is C, the autoscaling group is responsable to add the instances in the subnets. Seriously, get someone qualified to review your answers. This one was a VERY EASY one and yet the wrong answer is displayed.
A company is running a website on Amazon EC2 instances behind an Application Load Balancer (ALB). The company configured an Amazon CloudFront distribution and set the ALB as the origin. The company created an Amazon Route 53 CNAME record to send all traffic through the CloudFront distribution. As an unintended side effect, mobile users are now being served the desktop version of the website.
Which action should a SysOps administrator take to resolve this issue?
A
Configure the CloudFront distribution behavior to forward the User-Agent header.
B
Configure the CloudFront distribution origin settings. Add a User-Agent header to the list of origin custom headers.
C
Enable IPv6 on the ALB. Update the CloudFront distribution origin settings to use the dualstack endpoint.
D
Enable IPv6 on the CloudFront distribution. Update the Route 53 record to use the dualstack endpoint
Correct Answer:
A. Configure the CloudFront distribution behavior to forward the User-Agent header.
Explanation:
I agree it is A because:1. B is wrong, since you are modifying origin custom headers that are values that you set unilaterally, independent of the Header of the request that you received from client. As the documentation states, the uses cases for for origin custom headers are:Identifying requests from CloudFrontDetermining which requests come from a particular distributionEnabling cross-origin resource sharing (CORS)Controlling access to content(https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/add-origin- custom-headers.html)
By default, CloudFront does not forward the User-Agent header, which can cause issues when serving content to different devices or browsers. By configuring the CloudFront distribution behavior to forward the User- Agent header, the ALB can determine the type of device or browser making the request and serve the appropriate version of the website. This can be done by creating a new behavior for the distribution and configuring it to forward the User-Agent header to the origin.
A SysOps administrator has enabled AWS CloudTrail in an AWS account. If CloudTrail is disabled, it must be re- enabled immediately.
What should the SysOps administrator do to meet these requirements WITHOUT writing custom code?
A
Add the AWS account to AWS Organizations. Enable CloudTrail in the management account.
B
Create an AWS Config rule that is invoked when CloudTrail configuration changes. Apply the AWS- ConfigureCloudTrailLogging automatic remediation action.
C
Create an AWS Config rule that is invoked when CloudTrail configuration changes. Configure the rule to invoke an AWS Lambda function to enable CloudTrail.
D
Create an Amazon EventBridge (Amazon CloudWatch Event) hourly rule with a schedule pattern to run an AWS Systems Manager Automation document to enable CloudTrail.
Correct Answer:
B. Create an AWS Config rule that is invoked when CloudTrail configuration changes. Apply the AWS- ConfigureCloudTrailLogging automatic remediation action.
Explanation:
B - "To ensure that CloudTrail remains enabled in your account, AWS Config provides the cloudtrail-enabled managed rule. If CloudTrail is turned off, the cloudtrail-enabled rule automatically re-enables it by using automatic remediation."
Reference:
https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/automatically-re-enable-aws-cloudtrail- by-using-a-custom-remediation-rule-in-aws-config.html
A company hosts its website on Amazon EC2 instances behind an Application Load Balancer. The company manages its DNS with Amazon Route 53, and wants to point its domain's zone apex to the website.
Which type of record should be used to meet these requirements?
A
An AAAA record for the domain's zone apex
B
An A record for the domain's zone apex
C
A CNAME record for the domain's zone apex
D
An alias record for the domain's zone apex
Correct Answer:
D. An alias record for the domain's zone apex
Explanation:
D is correct. Route 53 supports redirection of zone apex to the ALB via alias.
Reference:
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resource-record-sets-choosing-alias-non- alias.html
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-to-elb-load-balancer.html https://aws.amazon.com/route53/faqs/
A company must ensure that any objects uploaded to an S3 bucket are encrypted. Which of the following actions will meet this requirement? (Choose two.)
A
Implement AWS Shield to protect against unencrypted objects stored in S3 buckets.
B
Implement Object access control list (ACL) to deny unencrypted objects from being uploaded to the S3 bucket.
C
Implement Amazon S3 default encryption to make sure that any object being uploaded is encrypted before it is stored.
D
Implement Amazon Inspector to inspect objects uploaded to the S3 bucket to make sure that they are encrypted.
E
Implement S3 bucket policies to deny unencrypted objects from being uploaded to the buckets
Correct Answer:
C. Implement Amazon S3 default encryption to make sure that any object being uploaded is encrypted before it is stored.
Explanation:
Reference:
https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#sample-acl " target="_blank" style="word-break: break-all;">
A company has a stateful web application that is hosted on Amazon EC2 instances in an Auto Scaling group. The instances run behind an Application Load
Balancer (ALB) that has a single target group. The ALB is configured as the origin in an Amazon CloudFront distribution. Users are reporting random logouts from the web application.
Which combination of actions should a SysOps administrator take to resolve this problem? (Choose two.)
A
Change to the least outstanding requests algorithm on the ALB target group.
B
Configure cookie forwarding in the CloudFront distribution cache behavior.
C
Configure header forwarding in the CloudFront distribution cache behavior.
D
Enable group-level stickiness on the ALB listener rule.
Correct Answer:
B. Configure cookie forwarding in the CloudFront distribution cache behavior.
Explanation:
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Cookies.html You can configure each cache behavior to do one of the following:
Forward all cookies to your origin – CloudFront includes all cookies sent by the viewer when it forwards requests to the origin.
https://docs.aws.amazon.com/elasticloadbalancing/latest/application/sticky-sessions.html
By default, an Application Load Balancer routes each request independently to a registered target based on the chosen load-balancing algorithm.
A company hosts its website in the us-east-1 Region. The company is preparing to deploy its website into the eu- central-1 Region. Website visitors who are located in Europe should access the website that is hosted in eu- central-1. All other visitors access the website that is hosted in us-east-1. The company uses
Amazon Route 53 to manage the website's DNS records.
Which routing policy should a SysOps administrator apply to the Route 53 record set to meet these requirements?
A
Geolocation routing policy
B
Geoproximity routing policy
C
Latency routing policy
D
Multivalue answer routing policy
Correct Answer:
A. Geolocation routing policy
Explanation:
The answer is A when you want to route traffic based on the location of your users.
Reference:
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-policy.html ALL users in Europe must be directed to the site hosted in Europe.
A company is running a website on Amazon EC2 instances that are in an Auto Scaling group. When the website traffic increases, additional instances take several minutes to become available because of a long-running user data script that installs software. A SysOps administrator must decrease the time that is required for new instances to become available.
Which action should the SysOps administrator take to meet this requirement?
A
Reduce the scaling thresholds so that instances are added before traffic increases.
B
Purchase Reserved Instances to cover 100% of the maximum capacity of the Auto Scaling group.
C
Update the Auto Scaling group to launch instances that have a storage optimized instance type.
D
Use EC2 Image Builder to prepare an Amazon Machine Image (AMI) that has pre-installed software.
Correct Answer:
D. Use EC2 Image Builder to prepare an Amazon Machine Image (AMI) that has pre-installed software.
Explanation:
D - automated way to update your image. Have a pipeline to update your image. When you boot from your AMI updates = scrits are already pre-installed, so no need to complete boot scripts in boot process.
Reference:
https://aws.amazon.com/image-builder/
A SysOps administrator is troubleshooting an AWS CloudFormation template whereby multiple Amazon EC2 instances are being created. The template is working in us-east-1, but it is failing in us-west-2 with the error code: AMI [ami-12345678] does not exist
How should the Administrator ensure that the AWS CloudFormation template is working in every region?
A
Copy the source region's Amazon Machine Image (AMI) to the destination region and assign it the same ID.
B
Edit the AWS CloudFormation template to specify the region code as part of the fully qualified AMI ID.
C
Edit the AWS CloudFormation template to offer a drop-down list of all AMIs to the user by using the AWS::EC2::AMI::ImageID control.
D
Modify the AWS CloudFormation template by including the AMI IDs in the Mappings section. Refer to the proper mapping within the template for the proper AMI ID.
Correct Answer:
D. Modify the AWS CloudFormation template by including the AMI IDs in the Mappings section. Refer to the proper mapping within the template for the proper AMI ID.
Explanation:
Parameters:
EnvironmentType:
Description: The environment type Type: String
Default: test AllowedValues:
- prod
- test
ConstraintDescription: must be a prod or test Mappings:
RegionAndInstanceTypeToAMIID:
us-east-1:
test: "ami-8ff710e2" prod: "ami-f5f41398" us-west-2:
test: "ami-eff1028f" prod: "ami-d0f506b0"
...other regions and AMI IDs... Resources:
...other resources... Outputs:
TestOutput:
Description: Return the name of the AMI ID that matches the region and environment type keys Value: !FindInMap [RegionAndInstanceTypeToAMIID, !Ref "AWS::Region", !Ref EnvironmentType]
Questions: 1-10 out of 478
Continue Full Practice..
GET ALL 478 QUESTIONS