SOA-C02 (Page 38)

A company has an encrypted Amazon S3 bucket that is hosted in the ap-southeast-2 Region.Users from the eu-west-2 Region access the S3 bucket over the internet.The users from eu-west-2 need faster transfers to and from the S3 bucket for large files.Which solution will meet these requirements?Read More →

A company runs a high performance computing (HPC) application on an Amazon EC2 instance.The company needs to scale this architecture to two or more EC2 instances.The EC2 instances will need to communicate with each other at high speeds with low latency to support the application.The company wants to ensure that the network performance can support the required communication between the EC2 instancesWhat should a SysOps administrator do to meet these requirements?Read More →

A company has applications that process transaction requests multiple times each minute.The applications write transaction data to a single Amazon RDS DB instance.As the company begins to process more transactions, the company becomes concerned that it has no failover solution in place for disaster recovery (DR).The company needs the DB instance to fail over automatically without losing any committed transactions.Which solution will meet these requirements?Read More →

A company has multiple AWS accounts.The company uses AWS Organizations with an organizational unit (OU) for the production account and another OU for the development account.Corporate policies state that developers may use only approved AWS services in the production account.What is the MOST operationally efficient solution to control the production account?Read More →

An Amazon EC2 instance is running an application that uses Amazon Simple Queue Service (Amazon SQS) queues.A SysOps administrator must ensure that the application can read, write, and delete messages from the SQS queues.Which solution will meet these requirements in the MOST secure manner?Read More →

While setting up an AWS managed VPN connection, a SysOps administrator creates a customer gateway resource in AWS.The customer gateway device resides in a data center with a NAT gateway in front of it.What address should be used to create the customer gateway resource?Read More →

A company has an AWS Site-to-Site VPN connection between on-premises resources and resources that are hosted in a VPC.A SysOps administrator launches an Amazon EC2 instance that has only a private IP address into a private subnet in the VPC.The EC2 instance runs Microsoft Windows Server.A security group for the EC2 instance has rules that allow inbound traffic from the on-premises network over the VPN connection.The on-premises environment contains a third-party network firewall.Rules in the third-party network firewall allow Remote Desktop Protocol (RDP) traffic to flow between the on-premises users over the VPN connection.The on-premises users are unable to connect to the EC2 instance and receive a timeout error.What should the SysOps administrator do to troubleshoot this issue?Read More →

A company wants to apply an existing Amazon Route 53 private hosted zone to a new VPC to allow for customized resource name resolution within the VPC.The SysOps administrator created the VPC and added the appropriate resource record sets to the private hosted zone.Which step should the SysOps administrator take to complete the setup?Read More →

A company uses AWS Organizations to host several applications across multiple AWS accounts.Several teams are responsible for building and maintaining the infrastructure of the applications across the AWS accounts.A SysOps administrator must implement a solution to ensure that user accounts and permissions are centrally managed.The solution must be integrated with the company’s existing on-premises Active Directory environment.The SysOps administrator already has enabled AWS IAM Identity Center (AWS Single Sign-On) and has set up an AWS Direct Connect connection.What is the MOST operationally efficient solution that meets these requirements?Read More →

A SysOps administrator is creating a simple, public-facing website running on Amazon EC2.The SysOps administrator created the EC2 instance in an existing public subnet and assigned an Elastic IP address to the instance.Next, the SysOps administrator created and applied a new security group to the instance to allow incoming HTTP traffic from 0.0.0.0/0.Finally, the SysOps administrator created a new network ACL and applied it to the subnet to allow incoming HTTP traffic from 0.0.0.0/0.However, the website cannot be reached from the internet.What is the cause of this issue?Read More →