Free SOA-C02 Exam Questions - Easiest Way for Success

Prepare for the Amazon SOA-C02 exam questions with our authentic preparation materials, including free SOA-C02 practice exam questions and answers. TheExamsLab provides all the support you need to succeed in the AWS Certified SysOps Administrator - Associate SOA-C02 exam. This dedication to student success is why we have the most satisfied SOA-C02 certification exam candidates worldwide.

Page: 1 / 106

Total 528 Questions | Updated On: Sep 13, 2024

Add To Cart

Question 1

A company has several member accounts that are in an organization in AWS Organizations. The company recently discovered that administrators have been using account root user credentials. The company must prevent the administrators from using root user credentials to perform any actions on Amazon EC2 instances.

What should a SysOps administrator do to meet this requirement?

A : Create an identity-based IAM policy in each member account to deny actions on EC2 instances by the root user.

B : In the organization's management account, create a service control policy (SCP) to deny actions on EC2 instances by the root user in all member accounts.

C : Use AWS Config to prevent any actions on EC2 instances by the root user.

D : Use Amazon Inspector in each member account to scan for root user logins and to prevent any actions on EC2 instances by the root user.

Answer: B

Question 2

A SysOps administrator is provisioning an Amazon Elastic File System (Amazon EFS) file system to provide shared storage across multiple Amazon EC2 instances The instances all exist in the same VPC across multiple Availability Zones. There are two instances In each Availability Zone. The SysOps administrator must make the file system accessible to each instance with the lowest possible latency.
Which solution will meet these requirements?

A : Create a mount target for the EFS file system in the VPC. Use the mount target to mount the file system on each of the instances

B : Create a mount target for the EFS file system in one Availability Zone of the VPC. Use the mount target to mount the file system on the instances in that Availability Zone. Share the directory with the other instances.

C : Create a mount target for each instance. Use each mount target to mount the EFS file system on each respective instance.

D : Create a mount target in each Availability Zone of the VPC Use the mount target to mount the EFS file system on the Instances in the respectiveAvailability Zone.

Answer: D

Question 3

A company has set up an IPsec tunnel between its AWS environment and its on-premises data center. The tunnel is reporting as UP, but the Amazon EC2 instances are not able to ping any on-premises resources.

What should a SysOps administrator do to resolve this issue?

A : Create a new inbound rule on the EC2 instances’ security groups to allow ICMP traffic from the on-premises CIDR.

B : Create a peering connection between the IPsec tunnel and the subnet of the EC2 instances.

C : Enable route propagation for the virtual private gateway in the route table that is assigned to the subnet of the EC2 instances.

D : Enable route propagation for the virtual private gateway in the route table that is assigned to the subnet of the EC2 instances.

Answer: C

Question 4

A company has users that deploy Amazon EC2 instances that have more disk performance capacity than is required. A SysOps administrator needs to review all Amazon Elastic Block Store (Amazon EBS) volumes that are associated with the instances and create cost optimization recommendations based on IOPS and throughput.

What should the SysOps administrator do to meet these requirements in the MOST operationally efficient way?

A : Use the monitoring graphs in the EC2 console to view metrics for EBS volumes. Review the consumed space against the provisioned space on each volume. Identify any volumes that have low utilization.

B : Stop the EC2 instances from the EC2 console. Change the EC2 instance type for Amazon EBS-optimized. Start the EC2 instances.

C : Opt in to AWS Compute Optimizer. Allow sufficient time for metrics to be gathered. Review the Compute Optimizer findings for EBS volumes.

D : Install the fio tool onto the EC2 instances and create a .cfg file to approximate the required workloads. Use the benchmark results to gauge whether the provisioned EBS volumes are of the most appropriate type.

Answer: C

Question 5

A company uses Amazon Route 53 to manage the public DNS records for the domain example.com. The company deploys an Amazon CloudFront distribution to deliver static assets for a new corporate website. The company wants to create a subdomain that is named 'static' and must route traffic for the subdomain to the
CloudFront distribution.
How should a SysOps administrator create a new record for the subdomain in Route 53?

A : Create a CNAME record. Enter static.cloudfront.net as the record name. Enter the CloudFront distribution's public IP address as the value.

B : Create an A record. Enter static.cloudfront.net as the record name. Enter the CloudFront distribution's ID as an alias target.

C : Create an A record. Enter static.example.com as the record name. Enter the CloudFront distribution's domain name as an alias target.

Answer: C

Page: 1 / 106

Total 528 Questions | Updated On: Sep 13, 2024

Add To Cart