SOA-C01 (Page 29)

An existing, deployed solution uses Amazon EC2 instances with Amazon EBS General Purpose SSD volumes, am Amazon RDS PostgreSQL database, anAmazon EFS file system, and static objects stored in an Amazon S3 bucket.The Security team now mandates that at-rest encryption be turned on immediately for all aspects of the application, without creating new resources and without any downtime.To satisfy the requirements, which one of these services can the SysOps Administrator enable at-rest encryption on?Read More →

A gaming application is deployed on four Amazon EC2 instances in a default VPC.The SysOps Administrator has noticed consistently high latency in responses as data is transferred among the four instances.There is no way for the Administrator to alter the application code.The MOST effective way to reduce latency is to relaunch the EC2 instances in:Read More →

A company is planning to expand into an additional AWS Region for disaster recovery purposes.The company uses AWS CloudFormation, and its infrastructure is well-defined as code.The company would like to reuse as much of its existing code as possible when deploying resources to additional Regions.A SysOps Administrator is reviewing how Amazon Machine Images (AMIs) are selected in AWS CloudFormation, but is having trouble making the same stack work in the new Region.Which action would make it easier to manage multiple Regions?Read More →

An organization with a large IT department has decided to migrate to AWS.With different job functions in the IT department, it is not desirable to give all users access to all AWS resources.Currently the organization handles access via LDAP group membership.What is the BEST method to allow access using current LDAP credentials?Read More →

A company hosts its website on Amazon ECF2 instances behind an ELB Application Load Balancer.The company manages its DNS with Amazon Route 53, and wants to point its domain’s zone apex to the website.Which type of record should be used to meet these requirements?Read More →

A company has centralized all its logs into one Amazon CloudWatch Logs log group.The SysOps Administrator is to alert different teams of any issues relevant to them.What is the MOST efficient approach to accomplish this?Read More →

A SysOps Administrator created an Application Load balancer (ALB) and placed two Amazon EC2 instances in the same subnet behind the ALB.During monitoring, the Administrator observes HealthyHostCount drop to 1 in Amazon CloudWatch.What is MOST likely causing this issue?Read More →

A SysOps Administrator is managing an AWS account where Developers are authorized to launch Amazon EC2 instances to test new code.To limit costs, theAdministrator must ensure that the EC2 instances in the account are terminated 24 hours after launch.How should the Administrator meet these requirements?Read More →

An AWS CodePipeline in us-east-1 returns `InternalError` with the code `JobFailed` when launching a deployment using an artifact from an Amazon S3 bucket in us-west-1.What is causing this error?Read More →

What should a SysOps Administrator do to ensure a company has visibility into maintenance events performed by AWS?Read More →