SOA-C02 Free Practice Test

- (Exam Topic 1)
A SysOps administrator is responsible for a company's security groups. The company wants to maintain a documented trail of any changes that are made to the security groups. The SysOps administrator must receive notification whenever the security groups change.
Which solution will meet these requirements?

1. A. Set up Amazon Detective to record security group change
2. B. Specify an Amazon CloudWatch Logs log group to store configuration history log
3. C. Create an Amazon Simple Queue Service (Amazon SOS) queue for notifications about configuration change
4. D. Subscribe the SysOps administrator's email address to the SQS queue.
5. E. Set up AWS Systems Manager Change Manager to record security group change
6. F. Specify an Amazon CloudWatch Logs log group to store configuration history log
7. G. Create an Amazon Simple Notification Service (Amazon SNS) topic for notifications about configuration change
8. H. Subscribe the SysOps administrator's email address to the SNS topic.
9. I. Set up AWS Config to record security group change
10. J. Specify an Amazon S3 bucket as the location for configuration snapshots and history file
11. K. Create an Amazon Simple Notification Service (Amazon SNS) topic for notifications about configuration change
12. L. Subscribe the SysOps administrator's email address to the SNS topic.
13. M. Set up Amazon Detective to record security group change
14. N. Specify an Amazon S3 bucket as the location for configuration snapshots and history file
15. O. Create an Amazon Simple Notification Service (Amazon SNS) topic for notifications about configuration change
16. P. Subscribe the SysOps administrator's email address to the SNS topic.

Correct Answer: D

- (Exam Topic 1)
A SysOps administrator trust manage the security of An AWS account Recently an IAM users access key was mistakenly uploaded to a public code repository. The SysOps administrator must identity anything that was changed by using this access key.

1. A. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to send all IAM events lo an AWS Lambda function for analysis
2. B. Query Amazon EC2 togs by using Amazon CloudWatch Logs Insights for all events Heated with the compromised access key within the suspected timeframe
3. C. Search AWS CloudTrail event history tor all events initiated with the compromised access key within the suspected timeframe
4. D. Search VPC Flow Logs foe all events initiated with the compromised access key within the suspected Timeframe.

Correct Answer: C

- (Exam Topic 1)
A company's VPC has connectivity to an on-premises data center through an AWS Site-to-Site VPN. The company needs Amazon EC2 instances in the VPC to send DNS queries for example com to the DNS servers in the data center.
Which solution will meet these requirements?

1. A. Create an Amazon Route 53 Resolver inbound endpoint Create a conditional forwarding rule on the on-primes DNS servers to forward DNS requests for example.com to the inbound endpoints.
2. B. Create an Amazon Route 53 Resolver inbound endpoint Create a forwarding rule on the resolver that sends all queries for example.com to the on-premises DNS server
3. C. Associate this rule with the VPC.
4. D. Create an Amazon Route 53 Resolver outbound endpoint Create a conditional forwarding rule on the on-premises DNS servers to forward DNS requests for example.com to the outbound endpoints
5. E. Create an Amazon Route 53 Resolver outbound endpoin
6. F. Create a forwarding rule on the resolver that sends all queries for exarrc4e.com to the on-premises DNS servers Associate this rule with the VPC.

Correct Answer: C

- (Exam Topic 1)
A SysOps administrator Is troubleshooting an AWS Cloud Formation template whereby multiple Amazon EC2 instances are being created The template is working In us-east-1. but it is failing In us-west-2 with the error code:

How should the administrator ensure that the AWS Cloud Formation template is working in every region?

1. A. Copy the source region's Amazon Machine Image (AMI) to the destination region and assign it the same ID.
2. B. Edit the AWS CloudFormatton template to specify the region code as part of the fully qualified AMI ID.
3. C. Edit the AWS CloudFormatton template to offer a drop-down list of all AMIs to the user by using the aws :: EC2:: ami :: imageiD control.
4. D. Modify the AWS CloudFormation template by including the AMI IDs in the "Mappings" sectio
5. E. Refer to the proper mapping within the template for the proper AMI ID.

Correct Answer: A

- (Exam Topic 1)
A SysOps administrator developed a Python script that uses the AWS SDK to conduct several maintenance tasks. The script needs to run automatically every night.
What is the MOST operationally efficient solution that meets this requirement?

1. A. Convert the Python script to an AWS Lambda (unctio
2. B. Use an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke the function every night.
3. C. Convert the Python script to an AWS Lambda functio
4. D. Use AWS CloudTrail to invoke the function every night.
5. E. Deploy the Python script to an Amazon EC2 Instanc
6. F. Use Amazon EventBridge (Amazon CloudWatch Events) to schedule the instance to start and stop every night.
7. G. Deploy the Python script to an Amazon EC2 instanc
8. H. Use AWS Systems Manager to schedule the instance to start and stop every night.

Correct Answer: A