SOA-C02 Free Practice Test

- (Exam Topic 1)
A company wants to archive sensitive data on Amazon S3 Glacier. The company's regulatory and compliance requirements do not allow any modifications to the data by any account.
Which solution meets these requirements?

1. A. Attach a vault lock policy to an S3 Glacier vault that contains the archived dat
2. B. Use the lock ID to validate the vault lock policy after 24 hours.
3. C. Attach a vault lock policy to an S3 Glacier vault that contains the archived dat
4. D. Use the lock ID to validate the vault lock policy within 24 hours.
5. E. Configure S3 Object Lock in governance mod
6. F. Upload all files after 24 hours.
7. G. Configure S3 Object Lock in governance mod
8. H. Upload all files within 24 hours.

Correct Answer: B

- (Exam Topic 1)
A company wants to create an automated solution for all accounts managed by AWS Organizations to detect any worry groups that urn 0.0.0.0/0 as the source address for inbound traffic. The company also wants to automatically remediate any noncompliant security groups by restricting access to a specific CIDR block corresponds with the company's intranet.

1. A. Create an AWS Config rule to detect noncompliant security group
2. B. Set up automatic remediation to change the 0.0.0.0/0 source address to the approved CIDK block.
3. C. Create an IAM policy to deny the creation of security groups that have 0.0.0.0/0 as the source address Attach this 1AM policy to every user in the company.
4. D. Create an AWS Lambda function to inspect now and existing security groups check for a noncompliant 0.0.0.0A) source address and change the source address to the approved CIDR block.
5. E. Create a service control policy (SCP) for the organizational unit (OU) to deny the creation of security groups that have the 0.0.0.0/0 source addres
6. F. Set up automatic remediation to change Vie 0.0.0.0/0 source address to the approved CIDR block.

Correct Answer: A

- (Exam Topic 1)
A company creates custom AMI images by launching new Amazon EC2 instances from an AWS CloudFormation template it installs and configure necessary software through AWS OpsWorks and takes images of each EC2 instance. The process of installing and configuring software can take between 2 to 3 hours but at limes the process stalls due to installation errors.
The SysOps administrator must modify the CloudFormation template so if the process stalls, the entire stack will tail and roil back.
Based on these requirements what should be added to the template?

1. A. Conditions with a timeout set to 4 hours.
2. B. CreationPolicy with timeout set to 4 hours.
3. C. DependsOn a timeout set to 4 hours.
4. D. Metadata with a timeout set to 4 hours

Correct Answer: B

- (Exam Topic 1)
A company has a public website that recently experienced problems. Some links led to missing webpages, and other links rendered incorrect webpages. The application infrastructure was running properly, and all the provisioned resources were healthy. Application logs and dashboards did not show any errors, and no monitoring alarms were raised. Systems administrators were not aware of any problems until end users reported the issues.
The company needs to proactively monitor the website for such issues in the future and must implement a solution as soon as possible.
Which solution will meet these requirements with the LEAST operational overhead?

1. A. Rewrite the application to surface a custom error to the application log when issues occur.Automatically parse logs for error
2. B. Create an Amazon CloudWatch alarm to provide alerts when issues are detected.
3. C. Create an AWS Lambda function to test the websit
4. D. Configure the Lambda function to emit an Amazon CloudWatch custom metric when errors are detecte
5. E. Configure a CloudWatch alarm to provide alerts when issues are detected.
6. F. Create an Amazon CloudWatch Synthetics canar
7. G. Use the CloudWatch Synthetics Recorder plugin to generate the script for the canary ru
8. H. Configure the canary in line with requirement
9. I. Create an alarm to provide alerts when issues are detected.

Correct Answer: A

- (Exam Topic 1)
A company has attached the following policy to an IAM user:


Which of the following actions are allowed for the IAM user?

1. A. Amazon RDS DescribeDBInstances action in the us-east-1 Region
2. B. Amazon S3 Putobject operation in a bucket named testbucket
3. C. Amazon EC2 Describe Instances action in the us-east-1 Region
4. D. Amazon EC2 AttachNetworkinterf ace action in the eu-west-1 Region

Correct Answer: C