SOA-C02 (Page 14)

A company has an application that collects notifications from thousands of alarm systems.The notifications include alarm notifications and information notifications.The information notifications include the system arming processes, disarming processes, and sensor status.All notifications are kept as messages in an Amazon Simple Queue Service (Amazon SQS) queue.Amazon EC2 instances that are in an Auto Scaling group process the messages.A SysOps administrator needs to implement a solution that prioritizes alarm notifications over information notifications.Which solution will meet these requirements?Read More →

A company’s SysOps administrator manages a fleet of hundreds of Amazon EC2 instances that run Windows-based workloads and Linux-based workloads.Each EC2 instance has a tag that identifies its operating system.All the EC2 instances run AWS Systems Manager Session Manager.A zero-day vulnerability is reported, and no patches are available.The company’s security team provides code for all the relevant operating systems to reduce the risk of the vulnerability.The SysOps administrator needs to implement the code on the EC2 instances and must provide a report that shows that the code has successfully run on all the instances.What should the SysOps administrator do to meet these requirements as quickly as possible?Read More →

A SysOps administrator has noticed millions of LIST requests on an Amazon S3 bucket.Which services or features can the administrator use to investigate where the requests are coming from? (Choose two.)Read More →

A SysOps administrator needs to create alerts that are based on the read and write metrics of Amazon Elastic Block Store (Amazon EBS) volumes that are attached to an Amazon EC2 instance.The SysOps administrator creates and enables Amazon CloudWatch alarms for the DiskReadBytes metric and the DiskWriteBytes metric.A custom monitoring tool that is installed on the EC2 instance with the same alarm configuration indicates that the volume metrics have exceeded the threshold.However, the CloudWatch alarms were not in ALARM state.Which action will ensure that the CloudWatch alarms function correctly?Read More →

A user is connected to an Amazon EC2 instance in a private subnet.The user is unable to access the internet from the instance by using the following curl command: curl http:/www.example.com.A SysOps administrator reviews the VPC configuration and learns the following information:• The private subnet has a route to a NAT gateway for CIDR 0.0.0.0/0• The outbound security group for the EC2 instance contains one rule: outbound for port 443 to CIDR 0.0.0.0/0• The inbound security group for the EC2 instance allows ports 22 and 443 from the user’s IP address.• The inbound network ACL for the subnet allows port 22 and port range 1024-65535 from CIDR 0.0.0.0/0Which action will allow the user to complete the curl request successfully?Read More →

Accompany wants to monitor the number of Amazon EC2 instances that it is running.The company also wants to automate a service quota increase when the number of instances reaches a specific threshold.Which solution meets these requirements?Read More →

A SysOps administrator is troubleshooting a VPC with public and private subnets that leverage custom network ACLs.Instances in the private subnet are unable to access the internet.There is an internet gateway attached to the public subnet.The private subnet has a route to a NAT gateway that is also attached to the public subnet.The Amazon EC2 instances are associated with the default security group for the VPC.What is causing the issue in this scenario?Read More →

A company’s VPC has an existing IPv4 configuration.The IPv4 configuration includes public subnets, private subnets, NAT gateways, default route tables, and ACLs.The company associates an IPv6 CIDR block with the VPC.The company adds IPv6 allocations to each existing subnet and adds routes to the route tables.The company updates the ACLs to allow all IPv6 traffic.Public subnets are working as expected, but private subnets are not allowing internet IPv6 connections.What should a SysOps administrator do to allow outbound-only connectivity for the new IPv6 subnets?Read More →

A company recently deployed an application in production.The production environment currently runs on a single Amazon EC2 instance that hosts the application’s web application and a MariaDB database.Company policy states that all IT production environments must be highly available.What should a SysOps administrator do to meet this requirement?Read More →

A company has a high-performance Windows workload.The workload requires a storage volume that provides consistent performance of 10,000 IOPS.The company does not want to pay for additional unneeded capacity to achieve this performance.Which solution will meet these requirements with the LEAST cost?Read More →