SOA-C02 Free Practice Test

- (Exam Topic 1)
A company uses AWS Organizations. A SysOps administrator wants to use AWS Compute Optimizer and AWS tag policies in the management account to govern all member accounts in the billing family. The SysOps administrator navigates to the AWS Organizations console but cannot activate tag policies through the management account.
What could be the reason for this issue?

1. A. All features have not been enabled in the organization.
2. B. Consolidated billing has not been enabled.
3. C. The member accounts do not have tags enabled for cost allocation.
4. D. The member accounts have not manually enabled trusted access for Compute Optimizer.

Correct Answer: C

- (Exam Topic 1)
A development team recently deployed a new version of a web application to production. After the release, penetration testing revealed a cross-site scripting vulnerability that could expose user data.
Which AWS service will mitigate this issue?

1. A. AWS Shield Standard
2. B. AWS WAF
3. C. Elastic Load Balancing
4. D. Amazon Cognito

Correct Answer: A

- (Exam Topic 1)
An Amazon S3 Inventory report reveals that more than 1 million objects in an S3 bucket are not encrypted These objects must be encrypted, and all future objects must be encrypted at the time they are written
Which combination of actions should a SysOps administrator take to meet these requirements? (Select TWO )

1. A. Create an AWS Config rule that runs evaluations against configuration changes to the S3 bucket When an unencrypted object is found run an AWS Systems Manager Automation document to encrypt the object in place
2. B. Edit the properties of the S3 bucket to enable default server-side encryption
3. C. Filter the S3 Inventory report by using S3 Select to find all objects that are not encrypted Create an S3 Batch Operations job to copy each object in place with en cryption enabled
4. D. Filter the S3 Inventory report by using S3 Select to find all objects that are not encrypted Send each object name as a message to an Amazon Simple Queue Service (Amazon SQS) queue Use the SQS queue to invoke an AWS Lambda function to tag each object with a key of "Encryption" and a value of "SSE-KMS"
5. E. Use S3 Event Notifications to invoke an AWS Lambda function on all new object-created events for the S3 bucket Configure the Lambda function to check whether the object is encrypted and to run an AWS Systems Manager Automation document to encrypt the object in place when an unencrypted object is found

Correct Answer: BC
https://aws.amazon.com/blogs/storage/encrypting-objects-with-amazon-s3-batch-operations/

- (Exam Topic 1)
A SysOps administrator is notified that an Amazon EC2 instance has stopped responding The AWS Management Console indicates that the system status checks are failing What should the administrator do first to resolve this issue?

1. A. Reboot the EC2 instance so it can be launched on a new host
2. B. Stop and then start the EC2 instance so that it can be launched on a new host
3. C. Terminate the EC2 instance and relaunch it
4. D. View the AWS CloudTrail log to investigate what changed on the EC2 instance

Correct Answer: B
https://aws.amazon.com/premiumsupport/knowledge-center/ec2-windows-system-status-check-fail/

- (Exam Topic 1)
A company runs its entire suite of applications on Amazon EC2 instances. The company plans to move the applications to containers and AWS Fargate. Within 6 months, the company plans to retire its EC2 instances and use only Fargate. The company has been able to estimate its future Fargate costs.
A SysOps administrator needs to choose a purchasing option to help the company minimize costs. The SysOps administrator must maximize any discounts that are available and must ensure that there are no unused reservations.
Which purchasing option will meet these requirements?

1. A. Compute Savings Plans for 1 year with the No Upfront payment option
2. B. Compute Savings Plans for 1 year with the Partial Upfront payment option
3. C. EC2 Instance Savings Plans for 1 year with the All Upfront payment option
4. D. EC2 Reserved Instances for 1 year with the Partial Upfront payment option

Correct Answer: C