SOA-C02 Free Practice Test

- (Exam Topic 1)
A large company is using AWS Organizations to manage its multi-account AWS environment. According to company policy, all users should have read-level access to a particular Amazon S3 bucket in a central account. The S3 bucket data should not be available outside the organization. A SysOps administrator must set up the permissions and add a bucket policy to the S3 bucket.
Which parameters should be specified to accomplish this in the MOST efficient manner?

1. A. Specify '*' as the principal and PrincipalOrgld as a condition.
2. B. Specify all account numbers as the principal.
3. C. Specify PrincipalOrgld as the principal.
4. D. Specify the organization's management account as the principal.

Correct Answer: C

- (Exam Topic 1)
A company is hosting applications on Amazon EC2 instances. The company is hosting a database on an Amazon RDS for PostgreSQL DB instance. The company requires all connections to the DB instance to be encrypted.
What should a SysOps administrator do to meet this requirement?

1. A. Allow SSL connections to the database by using an inbound security group rule.
2. B. Encrypt the database by using an AWS Key Management Service (AWS KMS) encryption key.
3. C. Enforce SSL connections to the database by using a custom parameter group.
4. D. Patch the database with SSL/TLS by using a custom PostgreSQL extension.

Correct Answer: C
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/PostgreSQL.Concepts.General.SSL.htm Amazon RDS supports SSL/TLS encryption for connections to the database, and this can be enabled by
creating a custom parameter group and setting the rds.force_ssl parameter to 1. This will ensure that all connections to the database are encrypted, protecting the data and maintaining compliance with the company's
requirements.l

- (Exam Topic 1)
A company has a high-performance Windows workload. The workload requires a storage volume mat provides consistent performance of 10.000 KDPS. The company does not want to pay for additional unneeded capacity to achieve this performance.
Which solution will meet these requirements with the LEAST cost?

1. A. Use a Provisioned IOPS SSD (lol) Amazon Elastic Block Store (Amazon EBS) volume that is configured with 10.000 provisioned IOPS
2. B. Use a General Purpose SSD (gp3) Amazon Elastic Block Store (Amazon EBS) volume that is configured with 10.000 provisioned IOPS.
3. C. Use an Amazon Elastic File System (Amazon EFS) file system w\ Max I/O mode.
4. D. Use an Amazon FSx for Windows Fife Server foe system that is configured with 10.000 IOPS

Correct Answer: A

- (Exam Topic 1)
A company uploaded its website files to an Amazon S3 bucket that has S3 Versioning enabled. The company uses an Amazon CloudFront distribution with the S3 bucket as the origin. The company recently modified the tiles, but the object names remained the same. Users report that old content is still appearing on the website.
How should a SysOps administrator remediate this issue?

1. A. Create a CloudFront invalidation, and add the path of the updated files.
2. B. Create a CloudFront signed URL to update each object immediately.
3. C. Configure an S3 origin access identity (OAI) to display only the updated files to users.
4. D. Disable S3 Versioning on the S3 bucket so that the updated files can replace the old files.

Correct Answer: A

- (Exam Topic 1)
A company hosts its website on Amazon EC2 instances behind an Application Load Balancer. The company manages its DNS with Amazon Route 53. and wants to point its domain's zone apex to the website.
Which type of record should be used to meet these requirements?

1. A. A CNAME record for the domain's zone apex
2. B. An A record for the domain's zone apex
3. C. An AAAA record for the domain's zone apex
4. D. An alias record for the domain's zone apex

Correct Answer: D
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resource-record-sets-choosing-alias-non-alias.htm https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-to-elb-load-balancer.html