SOA-C02 Free Practice Test

- (Exam Topic 1)
A global gaming company is preparing to launch a new game on AWS. The game runs in multiple AWS Regions on a fleet of Amazon EC2 instances. The instances are in an Auto Scaling group behind an
Application Load Balancer (ALB) in each Region. The company plans to use Amazon Route 53 tor DNS services. The DNS configuration must direct users to the Region that is closest to mem and must provide automated failover.
Which combination of steps should a SysOps administrator take to configure Route 53 to meet these requirements9 {Select TWO.)

1. A. Create Amazon CloudWatch alarms that monitor the health of the ALB m each Region Configure Route 53 DNS failover by using a health check that monitors the alarms.
2. B. Create Amazon CloudWatch alarms that monitor the hearth of the EC2 instances in each Region.Configure Route 53 DNS failover by using a health check that monitors the alarms.
3. C. Configure Route 53 DNS failover by using a health check that monitors the private address of an EC2 instance in each Region.
4. D. Configure Route 53 geoproximity routing Specify the Regions that are used for the infrastructure
5. E. Configure Route 53 simple routing Specify the continent, country, and state or province that are used for the infrastructure.

Correct Answer: A

- (Exam Topic 1)
A company has an Amazon CloudFront distribution that uses an Amazon S3 bucket as its origin. During a review of the access logs, the company determines that some requests are going directly to the S3 bucket by using the website hosting endpoint. A SysOps administrator must secure the S3 bucket to allow requests only from CloudFront.
What should the SysOps administrator do to meet this requirement?

1. A. Create an origin access identity (OAI) in CloudFron
2. B. Associate the OAI with the distributio
3. C. Remove access to and from other principals in the S3 bucket polic
4. D. Update the S3 bucket policy to allow accessonly from the OAI.
5. E. Create an origin access identity (OAI) in CloudFron
6. F. Associate the OAI with the distributio
7. G. Update the S3 bucket policy to allow access only from the OA
8. H. Create a new origin, and specify the S3 bucket as the new origi
9. I. Update the distribution behavior to use the new origi
10. J. Remove the existing origin.
11. K. Create an origin access identity (OAI) in CloudFron
12. L. Associate the OAI with the distributio
13. M. Update the S3 bucket policy to allow access only from the OA
14. N. Disable website hostin
15. O. Create a new origin, and specify the S3 bucket as the new origi
16. P. Update the distribution behavior to use the new origi
17. Q. Remove the existing origin.
18. R. Update the S3 bucket policy to allow access only from the CloudFront distributio
19. S. Remove access to and from other principals in the S3 bucket polic
20. T. Disable website hostin
21. . Create a new origin, and specify the S3 bucket as the new origi
22. . Update the distribution behavior to use the new origi
23. . Remove the existing origin.

Correct Answer: A

- (Exam Topic 1)
A company is hosting applications on Amazon EC2 instances. The company is hosting a database on an Amazon RDS for PostgreSQL DB instance. The company requires all connections to the DB instance to be encrypted.
What should a SysOps administrator do to meet this requirement?

1. A. Allow SSL connections to the database by using an inbound security group rule.
2. B. Encrypt the database by using an AWS Key Management Service (AWS KMS) encryption key.
3. C. Enforce SSL connections to the database by using a custom parameter group.
4. D. Patch the database with SSL/TLS by using a custom PostgreSQL extension.

Correct Answer: C
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/PostgreSQL.Concepts.General.SSL.htm Amazon RDS supports SSL/TLS encryption for connections to the database, and this can be enabled by
creating a custom parameter group and setting the rds.force_ssl parameter to 1. This will ensure that all connections to the database are encrypted, protecting the data and maintaining compliance with the company's
requirements.l

- (Exam Topic 1)
A SysOps administrator is creating an Amazon EC2 Auto Scaling group in a new AWS account. After adding some instances, the SysOps administrator notices that the group has not reached the minimum number of instances. The SysOps administrator receives the following error message:

Which action will resolve this issue?

1. A. Adjust the account spending limits for Amazon EC2 on the AWS Billing and Cost Management console
2. B. Modify the EC2 quota for that AWS Region in the EC2 Settings section of the EC2 console.
3. C. Request a quota Increase for the Instance type family by using Service Quotas on the AWS Management Console.
4. D. Use the Rebalance action In the Auto Scaling group on the AWS Management Console.

Correct Answer: C

- (Exam Topic 1)
A SysOps administrator is setting up a fleet of Amazon EC2 instances in an Auto Scaling group for an application. The fleet should have 50% CPU available at that times to accommodate bursts of traffic. The load will increase significantly between the hours of 09:00 and 17:00,7 days a week
How should the SysOps administrator configure the scaling of the EC2 instances to meet these requirements?

1. A. Create a target tracking scaling policy that runs when the CPU utilization is higher than 90%
2. B. Create a target tracking scaling policy that runs when the CPU utilization is higher than 50%. Create a scheduled scaling policy that ensures that the fleet is available at 09:00 Create a second scheduled scaling policy that scales in the fleet at 17:00
3. C. Set the Auto Scaling group to start with 2 instances by setting the desired instances maximum instances, and minimum instances to 2 Create a scheduled scaling policy that ensures that the fleet is available at 09:00
4. D. Create a scheduled scaling policy that ensures that the fleet is available at 09.00. Create a second scheduled scaling policy that scales in the fleet at 17:00

Correct Answer: B