SOA-C02 (Page 37)

An AWS CloudFormation template creates an Amazon RDS instance.This template is used to build up development environments as needed and then delete the stack when the environment is no longer required.The RDS-persisted data must be retained for further use, even after the CloudFormation stack is deleted.How can this be achieved in a reliable and efficient way?Read More →

A company needs to archive all audit logs for 10 years.The company must protect the logs from any future edits.Which solution will meet these requirements?Read More →

A SysOps administrator creates an Amazon Elastic Kubernetes Service (Amazon EKS) cluster that uses AWS Fargate.The cluster is deployed successfully.The SysOps administrator needs to manage the cluster by using the kubectl command line tool.Which of the following must be configured on the SysOps administrator’s machine so that kubectl can communicate with the cluster API server?Read More →

A company is building a web application on AWS.The company is using Amazon CloudFront with a domain name of www.example.com.All traffic to CloudFront must be encrypted in transit.The company already has provisioned an SSL certificate for www.example.com in AWS Certificate Manager (ACM).Which combination of steps should a SysOps administrator take to encrypt the traffic in transit? (Choose two.)Read More →

A company has an application that uses a scheduled AWS Lambda function to retrieve datasets from external sources over the internet.The function is not associated with a VPC.The company is modifying the application to store the information that the Lambda function retrieves on an Amazon RDS DB instance in a private subnet.The VPC has two public subnets and two private subnets.A SysOps administrator must deploy a solution that allows the Lambda function to access the new database and continue to access the internet.Which solution meets these requirements?Read More →

A company stores sensitive data in an Amazon S3 bucket.The company must log all access attempts to the S3 bucket.The company’s risk team must receive immediate notification about any delete events.Which solution will meet these requirements?Read More →

A company has implemented a Kubernetes cluster on Amazon Elastic Kubernetes Service (Amazon ECS) to host a microservices-based application.The company expects application traffic to increase significantly for the next month and wants to prevent the application from crashing because of the high number of requests.Which solution will meet these requirements with the LEAST administrative overhead?Read More →

A SysOps administrator wants to protect objects in an Amazon S3 bucket from accidental overwrite and deletion.Noncurrent objects must be kept for 90 days and then must be permanently deleted.Objects must reside within the same AWS Region as the original S3 bucket.Which solution meets these requirements?Read More →

A company updates its security policy to prohibit the public exposure of any data in Amazon S3 buckets in the company’s account.What should a SysOps administrator do to meet this requirement?Read More →

A company is managing a website with a global user base hosted on Amazon EC2 with an Application Load Balancer (ALB).To reduce the load on the web servers, a SysOps administrator configures an Amazon CloudFront distribution with the ALB as the origin.After a week of monitoring the solution, the administrator notices that requests are still being served by the ALB and there is no change in the web server load.What are possible causes for this problem? (Choose two.)Read More →