Amazon AWS Certified SysOps Administrator - Associate SOA-C02
Prev

There are 349 results

Next
#281 (Accuracy: 100% / 3 votes)
A company recently moved its server infrastructure to Amazon EC2 instances. The company wants to use Amazon CloudWatch metrics to track instance memory utilization and available disk space.

What should a SysOps administrator do to meet these requirements?
  • A. Configure CloudWatch from the AWS Management Console for all the instances that require monitoring by CloudWatch. AWS automatically installs and configures the agents for the specified instances.
  • B. Install and configure the CloudWatch agent on all the instances. Attach an IAM role to allow the instances to write logs to CloudWatch.
  • C. Install and configure the CloudWatch agent on all the instances. Attach an IAM user to allow the instances to write logs to CloudWatch.
  • D. Install and configure the CloudWatch agent on all the instances. Attach the necessary security groups to allow the instances to write logs to CloudWatch.
#282 (Accuracy: 100% / 2 votes)
A SysOps administrator is tasked with analyzing database performance. The database runs on a single Amazon RDS DB instance. The SysOps administrator finds that, during times of peak traffic, resources on the database are overutilized due to the amount of read traffic.

Which actions should the SysOps administrator take to improve RDS performance? (Choose two.)
  • A. Add a read replica
  • B. Modify the application to use Amazon ElastiCache for Memcached.
  • C. Migrate the database from RDS to Amazon DynamoDB.
  • D. Migrate the database to Amazon EC2 with enhanced networking enabled.
  • E. Upgrade the database to a Multi-AZ deployment.
#283 (Accuracy: 100% / 4 votes)
A company's SysOps administrator maintains a highly available environment. The environment includes Amazon EC2 instances and an Amazon RDS Multi-AZ database. The EC2 instances are in an Auto Scaling group behind an Application Load Balancer.

Recently, the company conducted a failover test.
The SysOps administrator needs to decrease the failover time of the RDS database by at least 10%.

Which solution will meet this requirement?
  • A. Increase the RDS instance size.
  • B. Modify the RDS cluster to run in a single Availability Zone.
  • C. Create a read replica in another AWS Region. Promote the read replica in case of failure.
  • D. Create an RDS proxy. Point the application to the proxy endpoint.
#284 (Accuracy: 100% / 2 votes)
A company applies user-defined tags to resources that are associated with the company's AWS workloads. Twenty days after applying the tags, the company notices that it cannot use the tags to filter views in the AWS Cost Explorer console.

What is the reason for this issue?
  • A. It takes at least 30 days to be able to use tags to filter views in Cost Explorer.
  • B. The company has not activated the user-defined tags for cost allocation.
  • C. The company has not created an AWS Cost and Usage Report.
  • D. The company has not created a usage budget in AWS Budgets.
#285 (Accuracy: 100% / 4 votes)
A company maintains a large set of sensitive data in an Amazon S3 bucket. The company's security team asks a SysOps administrator to help verify that all current objects in the S3 bucket are encrypted.

What is the MOST operationally efficient solution that meets these requirements?
  • A. Create a script that runs against the S3 bucket and outputs the status of each object.
  • B. Create an S3 Inventory configuration on the S3 bucket. Include the appropriate status fields.
  • C. Provide the security team with an IAM user that has read access to the S3 bucket.
  • D. Use the AWS CLI to output a list of all objects in the S3 bucket.
#286 (Accuracy: 91% / 4 votes)
A SysOps administrator needs to configure a solution that will deliver digital content to a set of authorized users through Amazon CloudFront. Unauthorized users must be restricted from access.

Which solution will meet these requirements?
  • A. Store the digital content in an Amazon S3 bucket that does not have public access blocked. Use signed URLs to access the S3 bucket through CloudFront.
  • B. Store the digital content in an Amazon S3 bucket that has public access blocked. Use an origin access identity (OAI) to deliver the content through CloudFront. Restrict S3 bucket access with signed URLs in CloudFront.
  • C. Store the digital content in an Amazon S3 bucket that has public access blocked. Use an origin access identity (OAI) to deliver the content through CloudFront. Enable field-level encryption.
  • D. Store the digital content in an Amazon S3 bucket that does not have public access blocked. Use signed cookies for restricted delivery of the content through CloudFront.
#287 (Accuracy: 96% / 7 votes)
A company is managing many accounts by using a single organization in AWS Organizations. The organization has all features enabled. The company wants to turn on AWS Config in all the accounts of the organization and in all AWS Regions.

What should a SysOps administrator do to meet these requirements in the MOST operationally efficient way?
  • A. Use AWS CloudFormation Stack Sets to deploy stack instances that turn on AWS Config in all accounts and in all Regions.
  • B. Use AWS CloudFormation Stack Sets to deploy stack policies that turn on AWS Config in all accounts and in all Regions.
  • C. Use service control policies (SCPs) to configure AWS Config in all accounts and in all Regions.
  • D. Create a script that uses the AWS CLI to turn on AWS Config in all accounts in the organization. Run the script from the organization's management account.
#288 (Accuracy: 100% / 6 votes)
A SysOps administrator needs to track the costs of data transfer between AWS Regions. The SysOps administrator must implement a solution to send alerts to an email distribution list when transfer costs reach 75% of a specific threshold.

What should the SysOps administrator do to meet these requirements?
  • A. Create an AWS Cost and Usage Report. Analyze the results in Amazon Athena. Configure an alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic when costs reach 75% of the threshold. Subscribe the email distribution list to the topic.
  • B. Create an Amazon CloudWatch billing alarm to detect when costs reach 75% of the threshold. Configure the alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic. Subscribe the email distribution list to the topic.
  • C. Use AWS Budgets to create a cost budget for data transfer costs. Set an alert at 75% of the budgeted amount. Configure the budget to send a notification to the email distribution list when costs reach 75% of the threshold.
  • D. Set up a VPC flow log. Set up a subscription filter to an AWS Lambda function to analyze data transfer. Configure the Lambda function to send a notification to the email distribution list when costs reach 75% of the threshold.
#289 (Accuracy: 100% / 2 votes)
A company needs to implement a managed file system to host Windows file shares for users on premises. Resources in the AWS Cloud also need access to the data on these file shares. A SysOps administrator needs to present the user file shares on premises and make the user file shares available on AWS with minimum latency.

What should the SysOps administrator do to meet these requirements?
  • A. Set up an Amazon S3 File Gateway.
  • B. Set up an AWS Direct Connect connection.
  • C. Use AWS DataSync to automate data transfers between the existing file servers and AWS.
  • D. Set up an Amazon FSx File Gateway.
#290 (Accuracy: 100% / 4 votes)
A SysOps administrator manages a company's Amazon S3 buckets. The SysOps administrator has identified 5 GB of incomplete multipart uploads in an S3 bucket in the company's AWS account. The SysOps administrator needs to reduce the number of incomplete multipart upload objects in the S3 bucket.

Which solution will meet this requirement?
  • A. Create an S3 Lifecycle rule on the S3 bucket to delete expired markers or incomplete multipart uploads.
  • B. Require users that perform uploads of files into Amazon S3 to use the S3 TransferUtility.
  • C. Enable S3 Versioning on the S3 bucket that contains the incomplete multipart uploads.
  • D. Create an S3 Object Lambda Access Point to delete incomplete multipart uploads.