SOA-C02 (Page 33)

A SysOps administrator is attempting to download patches from the internet into an instance in a private subnet.An internet gateway exists for the VPC, and a NAT gateway has been deployed on the public subnet; however, the instance has no internet connectivity.The resources deployed into the private subnet must be inaccessible directly from the public internet.Public Subnet (10.0.1.0/24) Route TableDestination  Target -10.0.0.0/16  local0.0.0.0/0   IGWPrivate Subnet (10.0.2.0/24) Route TableDestination   Target -10.0.0.0/16   localWhat should be added to the private subnet’s route table in order to address this issue, given the information provided?Read More →

A SysOps administrator wants to securely share an object from a private Amazon S3 bucket with a group of users who do not have an AWS account.What is the MOST operationally efficient solution that will meet this requirement?Read More →

A company creates a new Amazon FSx for Windows File Server file system.To help manage costs, the company configures the storage capacity for the file system with minimal room for growth.The company creates an Amazon Simple Notification Service (Amazon SNS) topic in the same AWS account whore the file system resides.The company subscribes a SysOps administrator’s email address to the SNS topic.The SysOps administrator needs to receive email notification when the file system has less than 100 GB of space available.Which combination of steps should the SysOps administrator take to meet this requirement? (Choose two.)Read More →

Users are reporting consistent forced logouts from a stateful web application.The logouts occur before the expiration of a 15-minute application logout timer.The web application is hosted on Amazon EC2 instances that are in an Auto Scaling group.The instances run behind an Application Load Balancer (ALB) that has a single target group.The ALB is configured as the origin in an Amazon CloudFront distribution.Session affinity (sticky sessions) is already enabled on the ALB target group and uses duration-based cookies.The web application generates its own application cookie.Which combination of actions should a SysOps administrator take to resolve the logout problem? (Choose two.)Read More →

A company uses Amazon CloudFront to serve static content to end users.The company’s marketing team recently deployed updates to 150 images on the company’s website.However, the website is not displaying some of the new images.A SysOps administrator reviews the CloudFront distribution’s cache settings.The default TTL for the distribution is set to 1 week (604,800 seconds).What should the SysOps administrator do to refresh the cache with the new images in the MOST operationally efficient way?Read More →

A company’s social media application has strict data residency requirements.The company wants to use Amazon Route 53 to provide the application with DNS services.A SysOps administrator must implement a solution that routes requests to a defined list of AWS Regions.The routing must be based on the user’s location.Which solution will meet these requirements?Read More →

A SysOps administrator notices that the cache hit ratio for an Amazon CloudFront distribution is less than 10%.The SysOps administrator needs to increase the cache hit ratio for the distribution, improve network performance, and reduce the load on the origin.Which combination of actions should the SysOps administrator take to meet these requirements? (Choose two.)Read More →

A SysOps administrator configured VPC flow logs by using the default format.The SysOps administrator specified Amazon CloudWatch Logs as the destination.This solution has worked successfully for several months.However, because of additional troubleshooting requirements, the SysOps administrator needs to include the tcp-flags field on the flow logs.What should the SysOps administrator do to meet this requirement?Read More →

A manufacturing company uses an Amazon RDS DB instance to store inventory of all stock items.The company maintains several AWS Lambda functions that interact with the database to add, update, and delete items.The Lambda functions use hardcoded credentials to connect to the database.A SysOps administrator must ensure that the database credentials are never stored in plaintext and that the password is rotated every 30 days.Which solution will meet these requirements in the MOST operationally efficient manner?Read More →

A company is using an Amazon DynamoDB table for data.A SysOps administrator must configure replication of the table to another AWS Region for disaster recovery.What should the SysOps administrator do to meet this requirement?Read More →