SOA-C02 Free Practice Test

- (Exam Topic 1)
A software development company has multiple developers who work on the same product. Each developer must have their own development environment, and these development environments must be identical. Each development environment consists of Amazon EC2 instances and an Amazon RDS DB instance. The development environments should be created only when necessary, and they must be terminated each night to minimize costs.
What is the MOST operationally efficient solution that meets these requirements?

1. A. Provide developers with access to the same AWS CloudFormation template so that they can provision their development environment when necessar
2. B. Schedule a nightly cron job on each development instance to stop all running processes to reduce CPU utilization to nearly zero.
3. C. Provide developers with access to the same AWS CloudFormation template so that they can provision their development environment when necessar
4. D. Schedule a nightly Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function to delete the AWS CloudFormation stacks.
5. E. Provide developers with CLI commands so that they can provision their own development environment when necessar
6. F. Schedule a nightly Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function to terminate all EC2 instances and the DB instance.
7. G. Provide developers with CLI commands so that they can provision their own development environment when necessar
8. H. Schedule a nightly Amazon EventBridge (Amazon CloudWatch Events) rule to cause AWS CloudFormation to delete all of the development environment resources.

Correct Answer: B

- (Exam Topic 1)
A SysOps administrator is trying to set up an Amazon Route 53 domain name to route traffic to a website hosted on Amazon S3. The domain name of the website is www.anycompany.com and the S3 bucket name is anycompany-static. After the record set is set up in Route 53, the domain name www.anycompany.com does not seem to work, and the static website is not displayed in the browser.
Which of the following is a cause of this?

1. A. The S3 bucket must be configured with Amazon CloudFront first.
2. B. The Route 53 record set must have an IAM role that allows access to the S3 bucket.
3. C. The Route 53 record set must be in the same region as the S3 bucket.
4. D. The S3 bucket name must match the record set name in Route 53.

Correct Answer: D

- (Exam Topic 1)
A development team recently deployed a new version of a web application to production After the release, penetration testing revealed a cross-site scripting vulnerability that could expose user data
Which AWS service will mitigate this issue?

1. A. AWS Shield Standard
2. B. AWS WAF
3. C. Elastic Load Balancing
4. D. Amazon Cognito

Correct Answer: B
https://www.imperva.com/learn/application-security/cross-site-scripting-xss-attacks/

- (Exam Topic 1)
A company stores its data in an Amazon S3 bucket. The company is required to classify the data and find any sensitive personal information in its S3 files.
Which solution will meet these requirements?

1. A. Create an AWS Config rule to discover sensitive personal information in the S3 files and mark them as noncompliant.
2. B. Create an S3 event-driven artificial intelligence/machine learning (AI/ML) pipeline to classify sensitive personal information by using Amazon Recognition.
3. C. Enable Amazon GuardDut
4. D. Configure S3 protection to monitor all data inside Amazon S3.
5. E. Enable Amazon Maci
6. F. Create a discovery job that uses the managed data identifier.

Correct Answer: D
Amazon Macie is a security service designed to help organizations find, classify, and protect sensitive data stored in Amazon S3. Amazon Macie uses machine learning to automatically discover, classify, and protect sensitive data in Amazon S3. Creating a discovery job with the managed data identifier will allow Macie to identify sensitive personal information in the S3 files and classify it accordingly. Enabling AWS Config and Amazon GuardDuty will not help with this requirement as they are not designed to automatically classify and protect data.

- (Exam Topic 1)
A company has a public website that recently experienced problems. Some links led to missing webpages, and other links rendered incorrect webpages. The application infrastructure was running properly, and all the provisioned resources were healthy. Application logs and dashboards did not show any errors, and no monitoring alarms were raised. Systems administrators were not aware of any problems until end users reported the issues.
The company needs to proactively monitor the website for such issues in the future and must implement a solution as soon as possible.
Which solution will meet these requirements with the LEAST operational overhead?

1. A. Rewrite the application to surface a custom error to the application log when issues occur.Automatically parse logs for error
2. B. Create an Amazon CloudWatch alarm to provide alerts when issues are detected.
3. C. Create an AWS Lambda function to test the websit
4. D. Configure the Lambda function to emit an Amazon CloudWatch custom metric when errors are detecte
5. E. Configure a CloudWatch alarm to provide alerts when issues are detected.
6. F. Create an Amazon CloudWatch Synthetics canar
7. G. Use the CloudWatch Synthetics Recorder plugin to generate the script for the canary ru
8. H. Configure the canary in line with requirement
9. I. Create an alarm to provide alerts when issues are detected.

Correct Answer: A