SOA-C01 (Page 40)

A SysOps administrator needs a secure way to connect to AWS Key Management Service (AWS KMS) within a VPC.The SysOps administrator must ensure that connections to AWS KMS do not traverse the internet.What is the MOST secure solution that meets these requirements?Read More →

A company is creating an application that will keep records.The application will run on Amazon EC2 instances and will use an Amazon Aurora MySQL database as its data store.To maintain compliance, the application must not retain information that is determined to be sensitive.Which technique should a SysOps administrator use to detect if sensitive data is being stored in the application?Read More →

A SysOps administrator has set up a new public Application Load Balancer (ALB) in front of a pair of private web servers in multiple Availability Zones.After deploying an updated AWS CloudFormation template with many changes, user traffic now goes to one web server only.What is the MOST likely reason that the traffic is not being balanced between both servers?Read More →

A SysOps administrator needs to register targets for a Network Load Balancer (NLB) using IP addresses.Which prerequisite should the SysOps administrator validate to perform this task?Read More →

A streaming services company has a three-tier web application hosted on Amazon EC2 instances in an Auto Scaling group behind an Application Load Balancer(ALB).When the Auto Scaling group scales in, a deregistration delay occurs and the delay is sometimes longer than the time required to terminate the EC2 instance.A SysOps administrator must ensure that the latest logs are delivered to an external system before the EC2 instance is terminated.Which solution will solve this problem?Read More →

A SysOps administrator is implementing automated I/O load performance testing as part of the continuous integration/continuous delivery (CI/CD) process for an application.The application uses an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume for each instance that is restored from a snapshot and requires consistent I/O performance.During the initial tests, the I/O performance results are sporadic.The SysOps administrator must ensure that the tests yield more consistent results.Which actions could the SysOps administrator take to accomplish this goal? (Choose two.)Read More →

A company uses LDAP-based credentials and has a Security Assertion Markup Language (SAML) 2.0 identity provider.A SysOps administrator has configured various federated roles in a new AWS account to provide AWS Management Console access for groups of users that use the existing LDAP-based credentials.Several groups want to use the AWS CLI on their workstations to automate daily tasks.To enable them to do so, the SysOps administrator has created an application that authenticates a user and generates a SAML assertionWhich API call should be used to retrieve credentials for federated programmatic access?Read More →

A root account owner has given full access of his S3 bucket to one of the IAM users using the bucket ACL.When the IAM user logs in to the S3 console, which actions can he perform?Read More →

A user has created a VPC with CIDR 20.0.0.0/16.The user has created one subnet with CIDR 20.0.0.0/16 in this VPC.The user is trying to create another subnet with the same VPC for CIDR 20.0.0.1/24.What will happen in this scenario?Read More →

A user has setup a CloudWatch alarm on the EC2 instance for CPU utilization.The user has setup to receive a notification on email when the CPU utilization is higher than 60%.The user is running a virus scan on the same instance at a particular time.The user wants to avoid receiving an email at this time.What should the user do?Read More →