SOA-C02 (Page 41)

A team of on-call engineers frequently needs to connect to Amazon EC2 instances in a private subnet to troubleshoot and run commands.The instances use either the latest AWS-provided Windows Amazon Machine Images (AMIs) or Amazon Linux AMIs.The team has an existing 1AM role for authorization.A SysOps administrator must provide the team with access to the instances by granting IAM permissions to this role.Which solution will meet this requirement?Read More →

A company stores critical data in Amazon S3 buckets.A SysOps administrator must build a solution to record all S3 API activity.Which action will meet this requirement?Read More →

A company is running Amazon EC2 On-Demand Instances in an Auto Scaling group.The instances process messages from an Amazon Simple Queue Service (Amazon SQS) queue.The Auto Scaling group is set to scale based on the number of messages in the queue.Messages can take up to 12 hours to process completely.A SysOps administrator must ensure that instances are not interrupted during message processing.What should the SysOps administrator do to meet these requirements?Read More →

A company stores its data in an Amazon S3 bucket.The company is required to classify the data and find any sensitive personal information in its S3 files.Which solution will meet these requirements?Read More →

A company is running production workloads that use a Multi-AZ deployment of an Amazon RDS for MySQL db.m6g.xlarge (general purpose) standard DB instance.Users report that they are frequently encountering a “too many connections” error.A SysOps administrator observes that the number of connections on the database is high.The SysOps administrator needs to resolve this issue while keeping code changes to a minimum.Which solution will meet these requirements MOST cost-effectively?Read More →

A company’s security policy states that connecting to Amazon EC2 instances is not permitted through SSH and ROP.If access is required, authorized staff can connect to instances by using AWS Systems Manager Session Manager.Users report that they are unable to connect to one specific Amazon EC2 instance that is running Ubuntu and has AWS Systems Manager Agent (SSM Agent) pre-installed.These users are able to use Session Manager to connect to other instances in the same subnet, and they are in an IAM group that has Session Manager permission for all instances.What should a SysOps administrator do to resolve this issue?Read More →

A company has an existing public web application for www.example.com.The Application Load Balancer (ALB) is configured with a single HTTP 80 listener.A SysOps administrator must ensure that all web requests to www.example.com are encrypted between the client and the ALB.The SysOps administrator already has requested and validated a public certificate for www.example.com in AWS Certificate Manager (ACM).Existing users of the application must not be required to change the endpoint to which they are connecting.Which additional set of steps should the SysOps administrator take to meet these requirements?Read More →

A company requires that all IAM user accounts that have not been used for 90 days or more must have their access keys and passwords immediately disabled.A SysOps administrator must automate the process of disabling unused keys using the MOST operationally efficient method.How should the SysOps administrator implement this solution?Read More →

A company’s SysOps administrator attempts to restore an Amazon Elastic Block Store (Amazon EBS) snapshot.However, the snapshot is missing because another system administrator accidentally deleted the snapshot.The company needs the ability to recover snapshots for a specified period of time after snapshots are deleted.Which solution will provide this functionality?Read More →

A SysOps administrator recently configured Amazon S3 Cross-Region Replication on an S3 bucket.Which of the following does this feature replicate to the destination S3 bucket by default?Read More →