SOA-C02 (Page 21)

A company has a private Amazon S3 bucket that contains sensitive information.A SysOps administrator needs to keep logs of the IP addresses from authentication failures that result from attempts to access objects in the bucket.The logs must be stored so that they cannot be overwritten or deleted for 90 days.Which solution will meet these requirements?Read More →

A company uses AWS CloudFormation to deploy its application infrastructure.Recently, a user accidentally changed a property of a database in a CloudFormation template and performed a stack update that caused an interruption to the application.A SysOps administrator must determine how to modify the deployment process to allow the DevOps team to continue to deploy the infrastructure, but prevent against accidental modifications to specific resources.Which solution will meet these requirements?Read More →

A company wants to store sensitive financial data within Amazon S3 buckets.The company has a corporate policy that does not allow public read or write access to the buckets.A SysOps administrator must create a solution to automatically remove S3 permissions that allow public read or write access.Which AWS service should the SysOps administrator use to meet these requirements in the MOST operationally efficient manner?Read More →

A company has a core application that must run 24 hours a day, 7 days a week.The application uses Amazon EC2.AWS Fargate, and AWS Lambda.The company uses a combination of operating systems across different AWS Regions.The company needs to maximize cost savings while committing to a pricing model that offers flexibility to make changes.What should the company do to meet these requirements?Read More →

A SysOps administrator needs to update an AWS account name.What should the SysOps administrator do to accomplish this goal?Read More →

A SysOps administrator has been able to consolidate multiple, secure websites onto a single server, and each site is running on a different port.The administrator now wants to start a duplicate server in a second Availability Zone and put both behind a load balancer for high availability.What would be the command line necessary to deploy one of the sites’ certificates to the load balancer?Read More →

A company’s SysOps administrator uses AWS IAM Identity Center (AWS Single Sign-On) to connect to an Active Directory.The SysOps administrator creates a new account that all the company’s users need to access.The SysOps administrator uses the Active Directory Domain Users group for permissions to the new account because all users are already members of the group.When users try to log in, their access is denied.Which action will resolve this access issue?Read More →

A SysOps administrator configures VPC flow logs to publish to Amazon CloudWatch Logs.The SysOps administrator reviews the logs in CloudWatch Logs and notices less traffic than expected.After the SysOps administrator compares the VPC flow logs to logs that were captured on premises, the SysOps administrator believes that the VPC flow logs are incomplete.Which of the following is a possible reason for the difference in traffic?Read More →

An application is running on an Amazon EC2 instance in a VPC with the default DHCP option set.The application connects to an on-premises Microsoft SQLServer database with the DNS name mssql.example.com.The application is unable to resolve the database DNS name.Which solution will fix this problem?Read More →

A company has an application that uses an Amazon RDS for MariaDB Multi-AZ database.The application becomes unavailable for several minutes every time the database experiences a failover during a planned maintenance event.What should a SysOps administrator do to reduce the downtime of the application during failover?Read More →