SOA-C02 (Page 24)

A SysOps administrator has been able to consolidate multiple, secure websites onto a single server, and each site is running on a different port.The administrator now wants to start a duplicate server in a second Availability Zone and put both behind a load balancer for high availability.What would be the command line necessary to deploy one of the sites’ certificates to the load balancer?Read More →

A SysOps administrator needs to update an AWS account name.What should the SysOps administrator do to accomplish this goal?Read More →

A company has a core application that must run 24 hours a day, 7 days a week.The application uses Amazon EC2.AWS Fargate, and AWS Lambda.The company uses a combination of operating systems across different AWS Regions.The company needs to maximize cost savings while committing to a pricing model that offers flexibility to make changes.What should the company do to meet these requirements?Read More →

A company wants to store sensitive financial data within Amazon S3 buckets.The company has a corporate policy that does not allow public read or write access to the buckets.A SysOps administrator must create a solution to automatically remove S3 permissions that allow public read or write access.Which AWS service should the SysOps administrator use to meet these requirements in the MOST operationally efficient manner?Read More →

A company uses AWS CloudFormation to deploy its application infrastructure.Recently, a user accidentally changed a property of a database in a CloudFormation template and performed a stack update that caused an interruption to the application.A SysOps administrator must determine how to modify the deployment process to allow the DevOps team to continue to deploy the infrastructure, but prevent against accidental modifications to specific resources.Which solution will meet these requirements?Read More →

A company has a private Amazon S3 bucket that contains sensitive information.A SysOps administrator needs to keep logs of the IP addresses from authentication failures that result from attempts to access objects in the bucket.The logs must be stored so that they cannot be overwritten or deleted for 90 days.Which solution will meet these requirements?Read More →

A company has deployed an application on Amazon EC2 instances in a single VPC.The company has placed the EC2 instances in a private subnet in the VPC.The EC2 instances need access to Amazon S3 buckets that are in the same AWS Region as the EC2 instances.A SysOps administrator must provide the EC2 instances with access to the S3 buckets without requiring any changes to the EC2 instances or the application.The EC2 instances must not have access to the internet.Which solution will meet these requirements?Read More →

A company has a policy that requires all Amazon EC2 instances to have a specific set of tags.If an EC2 instance does not have the required tags, the noncompliant instance should be terminated.What is the MOST operationally efficient solution that meets these requirement?Read More →

An organization with a large IT department has decided to migrate to AWS.With different job functions in the IT department, it is not desirable to give all users access to all AWS resources.Currently the organization handles access via LDAP group membership.What is the BEST method to allow access using current LDAP credentials?Read More →

A company’s web application is available through an Amazon CloudFront distribution and directly through an internet-facing Application Load Balancer (ALB).A SysOps administrator must make the application accessible only through the CloudFront distribution and not directly through the ALB.The SysOps administrator must make this change without changing the application code.Which solution will meet these requirements?Read More →