SOA-C02 (Page 10)

A company is preparing for a marketing campaign that will increase traffic to a new web application.The application uses Amazon API Gateway and AWS Lambda for the application logic.The application stores relevant user data in an Amazon Aurora MySQL DB cluster that has one Aurora Replica.Database queries for the application are 5% write and 95% read.What should a SysOps administrator do to scale the database when traffic increases?Read More →

A company needs to enforce tagging requirements for Amazon DynamoDB tables in its AWS accounts.A SysOps administrator must implement a solution to identify and remediate all DynamoDB tables that do not have the appropriate tags.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company that uses ServiceNow has an AWS account where a sensitive workload runs.The necessary security groups are in place.The company needs to implement a solution to create an incident in ServiceNow every time the rules change in any security group.Which solution will meet this requirement with the LEAST operational effort?Read More →

A company deploys a new application on three Amazon EC2 instances across three Availability Zones.The company uses a Network Load Balancer (NLB) to route traffic to the EC2 instances.A SysOps administrator must implement a solution so that the EC2 instances allow traffic from only the NLB.What should the SysOps administrator do to meet these requirements with the LEAST operational overhead?Read More →

A company’s SysOps administrator is troubleshooting communication between the components of an application.The company configured VPC flow logs to be published to Amazon CloudWatch Logs.However, there are no logs in CloudWatch Logs.What could be blocking the VPC flow logs from being published to CloudWatch Logs?Read More →

A company uses a multi-account structure in the AWS Cloud.The company’s environment includes a shared account for common resources.The environment also includes a development account for new application development.The company uses Amazon Route 53 for DNS management.The company manages all its Route 53 hosted zones from the shared account.A SysOps administrator needs to obtain a new SSL/TLS certificate for an application that is deployed in the development account.What must the SysOps administrator do to meet this requirement?Read More →

A company needs to track spending in its AWS account.The company must receive a notification when current costs and forecasted costs exceed specific thresholds.Which solution will meet these requirements with the LEAST operational overhead?Read More →

A company uses AWS CloudFormation to deploy its infrastructure.The company recently retired an application.A cloud operations engineer initiates CloudFormation stack deletion, and the stack gets stuck in DELETE_FAILED status.A SysOps administrator discovers that the stack had deployed a security group.The security group is referenced by other security groups in the environment.The SysOps administrator needs to delete the stack without affecting other applications.Which solution will meet these requirements in the MOST operationally efficient manner?Read More →

A company recently moved its server infrastructure to Amazon EC2 instances.The company wants to use Amazon CloudWatch Logs to track the instance logs.What should a SysOps administrator do to meet this requirement in compliance with AWS best practices?Read More →

A company that uses AWS Organizations recently implemented AWS Control Towerю The company now needs to centralize identity management. A SysOps administrator must federate AWS ШAM Identity Center with an external SAML 2.0 identity provider (IdP) to centrally manage access to all the company’s accounts and cloud applications.Which prerequisites must the SysOps administrator have so that the SysOps administrator can connect to the external IdP? (Choose two.)Read More →