SOA-C02 Free Practice Test

- (Exam Topic 1)
A company runs a web application on three Amazon EC2 instances behind an Application Load Balancer (ALB). The company notices that random periods of increased traffic cause a degradation in the application's performance. A SysOps administrator must scale the application to meet the increased traffic. Which solution meets these requirements?

1. A. Create an Amazon CloudWatch alarm to monitor application latency and increase the size of each EC2 instance if the desired threshold is reached.
2. B. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to monitor application latency and add an EC2 instance to the ALB if the desired threshold is reached.
3. C. Deploy the application to an Auto Scaling group of EC2 instances with a target tracking scaling policy.Attach the ALB to the Auto Scaling group.
4. D. Deploy the application to an Auto Scaling group of EC2 instances with a scheduled scaling policy.Attach the ALB to the Auto Scaling group.

Correct Answer: C

- (Exam Topic 1)
A company is running an application on premises and wants to use AWS for data backup All of the data must be available locally The backup application can write only to block-based storage that is compatible with the Portable Operating System Interface (POSIX)
Which backup solution will meet these requirements?

1. A. Configure the backup software to use Amazon S3 as the target for the data backups
2. B. Configure the backup software to use Amazon S3 Glacier as the target for the data backups
3. C. Use AWS Storage Gateway, and configure it to use gateway-cached volumes
4. D. Use AWS Storage Gateway, and configure it to use gateway-stored volumes

Correct Answer: D
https://docs.aws.amazon.com/storagegateway/latest/userguide/StorageGatewayConcepts.html

- (Exam Topic 1)
A development team recently deployed a new version of a web application to production. After the release, penetration testing revealed a cross-site scripting vulnerability that could expose user data.
Which AWS service will mitigate this issue?

1. A. AWS Shield Standard
2. B. AWS WAF
3. C. Elastic Load Balancing
4. D. Amazon Cognito

Correct Answer: A

- (Exam Topic 1)
While setting up an AWS managed VPN connection, a SysOps administrator creates a customer gateway resource in AWS. The customer gateway device resides in a data center with a NAT gateway in front of it.
What address should be used to create the customer gateway resource?

1. A. The private IP address of the customer gateway device
2. B. The MAC address of the NAT device in front of the customer gateway device
3. C. The public IP address of the customer gateway device
4. D. The public IP address of the NAT device in front of the customer gateway device

Correct Answer: D

- (Exam Topic 1)
A SysOps administrator is reviewing AWS Trusted Advisor warnings and encounters a warning for an S3 bucket policy that has open access permissions. While discussing the issue with the bucket owner, the administrator realizes the S3 bucket is an origin for an Amazon CloudFront web distribution.
Which action should the administrator take to ensure that users access objects in Amazon S3 by using only CloudFront URLs?

1. A. Encrypt the S3 bucket content with Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3).
2. B. Create an origin access identity and grant it permissions to read objects in the S3 bucket.
3. C. Assign an 1AM user to the CloudFront distribution and grant the user permissions in the S3 bucket policy.
4. D. Assign an 1AM role to the CloudFront distribution and grant the role permissions in the S3 bucket policy.

Correct Answer: B
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3