SOA-C02 (Page 30)

A company must migrate its applications to AWS.The company is using Chef recipes for configuration management.The company wants to continue to use the existing Chef recipes after the applications are migrated to AWS.What is the MOST operationally efficient solution that meets these requirements?Read More →

A company uses AWS Organizations to manage its multi-account environment.The organization contains a dedicated account for security and a dedicated account for logging.A SysOps administrator needs to implement a centralized solution that provides alerts when a resource metric in any account crosses a standard defined threshold.Which solution will meet these requirements?Read More →

A company runs several workloads on AWS.The company identifies five AWS Trusted Advisor service quota metrics to monitor in a specific AWS Region.The company wants to receive email notification each time resource usage exceeds 60% of one of the service quotas.Which solution will meet these requirements?Read More →

A company needs to automatically monitor an AWS account for potential unauthorized AWS Management Console logins from multiple geographic locations.Which solution will meet this requirement?Read More →

A company monitors its account activity using AWS CloudTrail, and is concerned that some log files are being tampered with after the logs have been delivered to the account’s Amazon S3 bucket.Moving forward, how can the SysOps administrator confirm that the log files have not been modified after being delivered to the S3 bucket?Read More →

A SysOps administrator is reviewing AWS Trusted Advisor warnings and encounters a warning for an S3 bucket policy that has open access permissions.While discussing the issue with the bucket owner, the administrator realizes the S3 bucket is an origin for an Amazon CloudFront web distribution.Which action should the administrator take to ensure that users access objects in Amazon S3 by using only CloudFront URLs?Read More →

A SysOps administrator has created an Amazon EC2 instance using an AWS CloudFormation template in the us-east-1 Region.The administrator finds that this template has failed to create an EC2 instance in the us-west-2 Region.What is one cause for this failure?Read More →

A SysOps administrator is investigating a company’s web application for performance problems.The application runs on Amazon EC2 instances that are in an Auto Scaling group.The application receives large traffic increases at random times throughout the day.During periods of rapid traffic increases, the Auto Scaling group is not adding capacity fast enough.As a result, users are experiencing poor performance.The company wants to minimize costs without adversely affecting the user experience when web traffic surges quickly.The company needs a solution that adds more capacity to the Auto Scaling group for larger traffic increases than for smaller traffic increases.How should the SysOps administrator configure the Auto Scaling group to meet these requirements?Read More →

A company has a compliance requirement that no security groups can allow SSH ports to be open to all IP addresses.A SysOps administrator must implement a solution that will notify the company’s SysOps team when a security group rule violates this requirement.The solution also must remediate the security group rule automatically.Which solution will meet these requirements?Read More →

A company has an application that runs only on Amazon EC2 Spot Instances.The instances run in an Amazon EC2 Auto Scaling group with scheduled scaling actions.However, the capacity does not always increase at the scheduled times, and instances terminate many times a day.A SysOps administrator must ensure that the instances launch on time and have fewer interruptions.Which action will meet these requirements?Read More →