SOA-C02 (Page 39)

A company uses AWS Organizations to manage multiple AWS accounts.Corporate policy mandates that only specific AWS Regions can be used to store and process customer data.A SysOps administrator must prevent the provisioning of Amazon EC2 instances in unauthorized Regions by anyone in the company.What is the MOST operationally efficient solution that meets these requirements?Read More →

A company has migrated its application to AWS.The company will host the application on Amazon EC2 instances of multiple instance families.During initial testing, a SysOps administrator identifies performance issues on selected EC2 instances.The company has a strict budget allocation policy, so theSysOps administrator must use the right resource types with the performance characteristics to match the workload.What should the SysOps administrator do to meet this requirement?Read More →

A SysOps administrator is attempting to deploy resources by using an AWS CloudFormation template.An Amazon EC2 instance that is defined in the template fails to launch and produces an InsufficientInstanceCapacity error.Which actions should the SysOps administrator take to resolve this error? (Choose two.)Read More →

When the AWS Cloud infrastructure experiences an event that may impact an organization, which AWS service can be used to see which of the organization’s resources are affected?Read More →

A company is using an AWS KMS customer master key (CMK) with imported key material.The company references the CMK by its alias in the Java application to encrypt data.The CMK must be rotated every 6 months.What is the process to rotate the key?Read More →

A company is using an Amazon CloudWatch alarm to monitor the FreeLocalStorage metric for an Amazon Aurora PostgreSQL production database.The alarm goes into ALARM state and indicates that the database is running low on temporary storage.A SysOps administrator discovers that a weekly report is using most of the temporary storage that is currently allocated.What should the SysOps administrator do to solve this problem?Read More →

The security team is concerned because the number of AWS Identity and Access Management (IAM) policies being used in the environment is increasing.The team tasked a SysOps administrator to report on the current number of IAM policies in use and the total available IAM policies.Which AWS service should the administrator use to check how current IAM policy usage compares to current service limits?Read More →

A SysOps administrator is notified that an Amazon EC2 instance has stopped responding.The AWS Management Console indicates that the system checks are failing.What should the administrator do first to resolve this issue?Read More →

A software development company has multiple developers who work on the same product.Each developer must have their own development environments, and these development environments must be identical.Each development environment consists of Amazon EC2 instances and an Amazon RDS DB instance.The development environments should be created only when necessary, and they must be terminated each night to minimize costs.What is the MOST operationally efficient solution that meets these requirements?Read More →

A company is partnering with an external vendor to provide data processing services.For this integration, the vendor must host the company’s data in an AmazonS3 bucket in the vendor’s AWS account.The vendor is allowing the company to provide an AWS Key Management Service (AWS KMS) key to encrypt the company’s data.The vendor has provided an IAM role Amazon Resources Name (ARN) to the company for this integration.What should a SysOps administrator do to configure this integration?Read More →