SOA-C02 Free Practice Test

- (Exam Topic 1)
A company runs an application on Amazon EC2 instances. The EC2 instances are in an Auto Scaling group and run behind an Application Load Balancer (ALB). The application experiences errors when total requests exceed 100 requests per second. A SysOps administrator must collect information about total requests for a 2-week period to determine when requests exceeded this threshold.
What should the SysOps administrator do to collect this data?

1. A. Use the ALB’s RequestCount metri
2. B. Configure a time range of 2 weeks and a period of 1 minute.Examine the chart to determine peak traffic times and volumes.
3. C. Use Amazon CloudWatch metric math to generate a sum of request counts for all the EC2 instances over a 2-week perio
4. D. Sort by a 1-minute interval.
5. E. Create Amazon CloudWatch custom metrics on the EC2 launch configuration templates to create aggregated request metrics across all the EC2 instances.
6. F. Create an Amazon EventBridge (Amazon CloudWatch Events) rul
7. G. Configure an EC2 event matching pattern that creates a metric that is based on EC2 request
8. H. Display the data in a graph.

Correct Answer: A
Using the ALB’s RequestCount metric will allow the SysOps administrator to collect information about total requests for a 2-week period and determine when requests exceeded the threshold of 100 requests per second. Configuring a time range of 2 weeks and a period of 1 minute will ensure that the data can be accurately examined to determine peak traffic times and volumes.

- (Exam Topic 1)
A SysOps administrator is maintaining a web application using an Amazon CloudFront web distribution, an Application Load Balancer (ALB), Amazon RDS, and
Amazon EC2 in a VPC. All services have logging enabled. The administrator needs to investigate HTTP
Layer 7 status codes from the web application.
Which log sources contain the status codes? (Choose two.)

1. A. VPC Flow Logs
2. B. AWS CloudTrail logs
3. C. ALB access logs
4. D. CloudFront access logs
5. E. RDS logs

Correct Answer: CD
"C" because Elastic Load Balancing provides access logs that capture detailed information about requests sent to your load balancer
https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-access-logs.html
"D" because "you can configure CloudFront to create log files that contain detailed information about every user request that CloudFront receives"
https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/AccessLogs.html

- (Exam Topic 1)
A company stores sensitive data in an Amazon S3 bucket. The company must log all access attempts to the S3 bucket. The company's risk team must receive immediate notification about any delete events.
Which solution will meet these requirements?

1. A. Enable S3 server access logging for audit log
2. B. Set up an Amazon Simple Notification Service (Amazon SNSJ notification for the S3 bucke
3. C. Select DeleteObject tor the event type for the alert system.
4. D. Enable S3 server access logging for audit log
5. E. Launch an Amazon EC2 instance for the alert system.Run a cron job on the EC2 instance to download the access logs each day and to scan for a DeleteObject event.
6. F. Use Amazon CloudWatch Logs for audit log
7. G. Use Amazon CloudWatch alarms with an Amazon Simple Notification Service (Amazon SNS) notification for the alert system.
8. H. Use Amazon CloudWatch Logs for audit log
9. I. Launch an Amazon EC2 instance for The alert system.Run a cron job on the EC2 Instance each day to compare the list of the items with the list from the previous da
10. J. Configure the cron job to send a notification if an item is missing.

Correct Answer: A
To meet the requirements of logging all access attempts to the S3 bucket and receiving immediate notification about any delete events, the company can enable S3 server access logging and set up an Amazon Simple Notification Service (Amazon SNS) notification for the S3 bucket. The S3 server access logs will record all access attempts to the bucket, including delete events, and the SNS notification can be configured to send an alert when a DeleteObject event occurs.

- (Exam Topic 1)
A SysOps administrator must create a solution that immediately notifies software developers if an AWS Lambda function experiences an error.
Which solution will meet this requirement?

1. A. Create an Amazon Simple Notification Service (Amazon SNS) topic with an email subscription for each develope
2. B. Create an Amazon CloudWatch alarm by using the Errors metric and the Lambda function name as a dimensio
3. C. Configure the alarm to send a notification to the SNS topic when the alarm state reaches ALARM.
4. D. Create an Amazon Simple Notification Service (Amazon SNS) topic with a mobile subscription for each develope
5. E. Create an Amazon EventBridge (Amazon CloudWatch Events) alarm by using LambdaError as the event pattern and the SNS topic name as a resourc
6. F. Configure the alarm to send a notification to the SNS topic when the alarm state reaches ALARM.
7. G. Verify each developer email address in Amazon Simple Email Service (Amazon SES). Create an Amazon CloudWatch rule by using the LambdaError metric and developer email addresses as dimension
8. H. Configure the rule to send an email through Amazon SES when the rule state reaches ALARM.
9. I. Verify each developer mobile phone in Amazon Simple Email Service {Amazon SES). Create an Amazon EventBridge (Amazon CloudWatch Events) rule by using Errors as the event pattern and the Lambda function name as a resourc
10. J. Configure the rule to send a push notification through Amazon SES when the rule state reaches ALARM.

Correct Answer: A

- (Exam Topic 1)
While setting up an AWS managed VPN connection, a SysOps administrator creates a customer gateway resource in AWS The customer gateway device resides in a data center with a NAT gateway in front of it
What address should be used to create the customer gateway resource?

1. A. The private IP address of the customer gateway device
2. B. The MAC address of the NAT device in front of the customer gateway device
3. C. The public IP address of the customer gateway device
4. D. The public IP address of the NAT device in front of the customer gateway device

Correct Answer: D