SOA-C02 Free Practice Test

- (Exam Topic 1)
A company applies user-defined tags to resources that are associated with me company's AWS workloads Twenty days after applying the tags, the company notices that it cannot use re tags to filter views in the AWS Cost Explorer console.
What is the reason for this issue?

1. A. It lakes at least 30 days to be able to use tags to filter views in Cost Explorer.
2. B. The company has not activated the user-defined tags for cost allocation.
3. C. The company has not created an AWS Cost and Usage Report
4. D. The company has not created a usage budget in AWS Budgets

Correct Answer: B

- (Exam Topic 1)
A company has an application that is deployed 10 two AWS Regions in an active-passive configuration. The application runs on Amazon EC2 instances behind an Application Load Balancer (ALB) in each Region. The instances are in an Amazon EC2 Auto Scaling group in each Region. The application uses an Amazon Route 53 hosted zone (or DNS. A SysOps administrator needs to configure automatic failover to the secondary Region.
What should the SysOps administrator do to meet these requirements?

1. A. Configure Route 53 alias records that point to each AL
2. B. Choose a failover routing polic
3. C. Set Evaluate Target Health to Yes.
4. D. Configure CNAME records that point to each AL
5. E. Choose a failover routing polic
6. F. Set Evaluate Target Health to Yes.
7. G. Configure Elastic Load Balancing (ELB) health checks for the Auto Scaling grou
8. H. Add a target group to the ALB in the primary Regio
9. I. Include the EC2 instances in the secondary Region astargets.
10. J. Configure EC2 health checks for the Auto Scaling grou
11. K. Add a target group to the ALB in the primary Regio
12. L. Include the EC2 instances in the secondary Region as targets.

Correct Answer: A

- (Exam Topic 1)
A company has multiple AWS Site-to-Site VPN connections between a VPC and its branch offices. The company manages an Amazon Elasticsearch Service (Amazon ES) domain that is configured with public
access. The Amazon ES domain has an open domain access policy. A SysOps administrator needs to ensure that Amazon ES can be accessed only from the branch offices while preserving existing data.
Which solution will meet these requirements?

1. A. Configure an identity-based access policy on Amazon E
2. B. Add an allow statement to the policy that includes the Amazon Resource Name (ARN) for each branch office VPN connection.
3. C. Configure an IP-based domain access policy on Amazon E
4. D. Add an allow statement to the policy that includes the private IP CIDR blocks from each branch office network.
5. E. Deploy a new Amazon ES domain in private subnets in a VPC, and import a snapshot from the old domai
6. F. Create a security group that allows inbound traffic from the branch office CIDR blocks.
7. G. Reconfigure the Amazon ES domain in private subnets in a VP
8. H. Create a security group that allows inbound traffic from the branch office CIDR blocks.

Correct Answer: B

- (Exam Topic 1)
A company uses AWS Organizations to manage multiple AWS accounts. The company's SysOps team has been using a manual process to create and manage 1AM roles. The team requires an automated solution to create and manage the necessary 1AM roles for multiple AWS accounts.
What is the MOST operationally efficient solution that meets these requirements?

1. A. Create AWS CloudFormation template
2. B. Reuse the templates to create the necessary 1AM roles in each of the AWS accounts.
3. C. Use AWS Directory Service with AWS Organizations to automatically associate the necessary 1AM roles with Microsoft Active Directory users.
4. D. Use AWS Resource Access Manager with AWS Organizations to deploy and manage shared resources across the AWS accounts.
5. E. Use AWS CloudFormation StackSets with AWS Organizations to deploy and manage 1AM roles for the AWS accounts.

Correct Answer: D

- (Exam Topic 1)
A company is using an Amazon DynamoDB table for data. A SysOps administrator must configure replication of the table to another AWS Region for disaster recovery.
What should the SysOps administrator do to meet this requirement?

1. A. Enable DynamoDB Accelerator (DAX).
2. B. Enable DynamoDB Streams, and add a global secondary index (GSI).
3. C. Enable DynamoDB Streams, and-add a global table Region.
4. D. Enable point-in-time recovery.

Correct Answer: C