SOA-C01 (Page 12)

A company has developed a new memory-intensive application that is deployed to a large Amazon EC2 Linux fleet.The company is concerned about potential memory exhaustion, so the development team wants to monitor memory usage by using Amazon CloudWatch.What is the MOST operationally efficient way to accomplish this goal?Read More →

A SysOps administrator manages an AWS CloudFormation template that provisions Amazon EC2 instances, an Elastic Load Balancer, and Amazon RDS instances.As part of an ongoing transformation project, CloudFormation stacks are being created and deleted continuously.The administrator needs to ensure that the RDS instances continue running after a stack has been deleted.Which action should be taken to meet these requirements?Read More →

A SysOps administrator is responsible for managing a fleet of Amazon EC2 instances.These EC2 instances upload build artifacts to a third-party service.The third-party service recently implemented strict IP whitelisting that requires all build uploads to come from a single IP address.What change should the systems administrator make to the existing build fleet to comply with this new requirement?Read More →

A company’s data processing workflow uses AWS Lambda to interact with other AWS services, including AWS Step Functions, Amazon DynamoDB, and AmazonS3.The Lambda functions make several API calls to these services as a part of the workflow.AWS CloudTrail has been enabled in the AWS Region and is logging to Amazon CloudWatch Logs.The Lambda functions are also logging to CloudWatch Logs.A SysOps administrator notices that a specific Lambda function in the workflow is taking longer to run than it did last month.The SysOps administrator needs to determine the parts of the Lambda function that are experiencing higher-than-normal response times.What solution will accomplish this?Read More →

A company has multiple AWS accounts.The company uses AWS Organizations with an organizational unit (OU) for the production account and another OU for the development account.Corporate policies state that developers may use only approved AWS services in the production account.What is the MOST operationally efficient solution to control the production account?Read More →

A company that hosts a multi-tier ecommerce web application on AWS has been alerted to suspicious application traffic.The architecture consists of Amazon EC2 instances deployed across multiple Availability Zones behind an Application Load Balancer (ALB).After examining the instance logs, a SysOps administrator determines that the suspicious traffic is an attempted SQL injection attack.What should the SysOps administrator do to prevent similar attacks?Read More →

A SysOps administrator is evaluating Amazon Route 53 DNS options to address concerns about high availability for an on-premises website.The website consists of two servers: a primary active server and a secondary passive server.Route 53 should route traffic to the primary server if the associated health check returns2xx or 3xx HTTP codes.All other traffic should be directed to the secondary passive server.The failover record type, set ID, and routing policy have been set appropriately for both primary and secondary servers.Which next step should be taken to configure Route 53?Read More →

A company’s security policy states that connecting to Amazon EC2 instances is not permitted through SSH and RDP.If access is required, authorized staff can connect to instances by using AWS Systems Manager Session Manager.Users report that they are unable to connect to one specific Amazon EC2 instance that is running Ubuntu and has AWS Systems Manager Agent (SSM Agent) pre-installed.These users are able to use Session Manager to connect to other instances in the same subnet, and they are in an IAM group that has SessionManager permission for all instances.What should a SysOps administrator do to resolve this issue?Read More →

A company is evaluating solutions for connecting its data centers to a VPC in an AWS Region running a mission-critical application.A secondary Region has already been set up as a disaster recovery solution.The company needs a consistent, low-latency connection of at least 10 Gbps that must be highly resilient and fault tolerant.Which solution meets these requirements?Read More →

An image processing system runs asynchronously on AWS Lambda.A SysOps administrator is configuring a Lambda function to notify developers when an image falls to process after three attempts.The SysOps administrator has created an Amazon Simple Notification Service (Amazon SNS) topic to notify the developers.Which additional action should the SysOps administrator take to meet this requirement?Read More →