SOA-C02 (Page 21)

A company has an AWS CloudFormation template that creates an Amazon S3 bucket.A user authenticates to the corporate AWS account with their Active Directory credentials and attempts to deploy the CloudFormation template.However, the stack creation fails.Which factors could cause this failure? (Choose two.)Read More →

A company is expanding globally and needs to back up data on Amazon Elastic Block Store (Amazon EBS) volumes to a different AWS Region.Most of the EBS volumes that store the data are encrypted, but some of the EBS volumes are unencrypted.The company needs the backup data from all the EBS volumes to be encrypted.Which solution will meet these requirements with the LEAST management overhead?Read More →

A company runs hundreds of Amazon EC2 instances in a single AWS Region.Each EC2 instance has two attached 1 GiB General Purpose SSD (gp2) Amazon Elastic Block Store (Amazon EBS) volumes.A critical workload is using all the available IOPS capacity on the EBS volumes.According to company policy, the company cannot change instance types or EBS volume types without completing lengthy acceptance tests to validate that the company’s applications will function properly.A SysOps administrator needs to increase the I/O performance of the EBS volumes as quickly as possible.Which action should the SysOps administrator take to meet these requirements?Read More →

A company’s web application is available through an Amazon CloudFront distribution and directly through an internet-facing Application Load Balancer (ALB).A SysOps administrator must make the application accessible only through the CloudFront distribution and not directly through the ALB.The SysOps administrator must make this change without changing the application code.Which solution will meet these requirements?Read More →

An organization with a large IT department has decided to migrate to AWS.With different job functions in the IT department, it is not desirable to give all users access to all AWS resources.Currently the organization handles access via LDAP group membership.What is the BEST method to allow access using current LDAP credentials?Read More →

A company has a policy that requires all Amazon EC2 instances to have a specific set of tags.If an EC2 instance does not have the required tags, the noncompliant instance should be terminated.What is the MOST operationally efficient solution that meets these requirement?Read More →

A company has deployed an application on Amazon EC2 instances in a single VPC.The company has placed the EC2 instances in a private subnet in the VPC.The EC2 instances need access to Amazon S3 buckets that are in the same AWS Region as the EC2 instances.A SysOps administrator must provide the EC2 instances with access to the S3 buckets without requiring any changes to the EC2 instances or the application.The EC2 instances must not have access to the internet.Which solution will meet these requirements?Read More →

A company has a private Amazon S3 bucket that contains sensitive information.A SysOps administrator needs to keep logs of the IP addresses from authentication failures that result from attempts to access objects in the bucket.The logs must be stored so that they cannot be overwritten or deleted for 90 days.Which solution will meet these requirements?Read More →

A company uses AWS CloudFormation to deploy its application infrastructure.Recently, a user accidentally changed a property of a database in a CloudFormation template and performed a stack update that caused an interruption to the application.A SysOps administrator must determine how to modify the deployment process to allow the DevOps team to continue to deploy the infrastructure, but prevent against accidental modifications to specific resources.Which solution will meet these requirements?Read More →

A company wants to store sensitive financial data within Amazon S3 buckets.The company has a corporate policy that does not allow public read or write access to the buckets.A SysOps administrator must create a solution to automatically remove S3 permissions that allow public read or write access.Which AWS service should the SysOps administrator use to meet these requirements in the MOST operationally efficient manner?Read More →