SOA-C02 (Page 42)

A company has an AWS Site-to-Site VPN connection between on-premises resources and resources that are hosted in a VPC.A SysOps administrator launches an Amazon EC2 instance that has only a private IP address into a private subnet in the VPC.The EC2 instance runs Microsoft Windows Server.A security group for the EC2 instance has rules that allow inbound traffic from the on-premises network over the VPN connection.The on-premises environment contains a third-party network firewall.Rules in the third-party network firewall allow Remote Desktop Protocol (RDP) traffic to flow between the on-premises users over the VPN connection.The on-premises users are unable to connect to the EC2 instance and receive a timeout error.What should the SysOps administrator do to troubleshoot this issue?Read More →

A company wants to apply an existing Amazon Route 53 private hosted zone to a new VPC to allow for customized resource name resolution within the VPC.The SysOps administrator created the VPC and added the appropriate resource record sets to the private hosted zone.Which step should the SysOps administrator take to complete the setup?Read More →

A company uses AWS Organizations to host several applications across multiple AWS accounts.Several teams are responsible for building and maintaining the infrastructure of the applications across the AWS accounts.A SysOps administrator must implement a solution to ensure that user accounts and permissions are centrally managed.The solution must be integrated with the company’s existing on-premises Active Directory environment.The SysOps administrator already has enabled AWS IAM Identity Center (AWS Single Sign-On) and has set up an AWS Direct Connect connection.What is the MOST operationally efficient solution that meets these requirements?Read More →

A SysOps administrator is creating a simple, public-facing website running on Amazon EC2.The SysOps administrator created the EC2 instance in an existing public subnet and assigned an Elastic IP address to the instance.Next, the SysOps administrator created and applied a new security group to the instance to allow incoming HTTP traffic from 0.0.0.0/0.Finally, the SysOps administrator created a new network ACL and applied it to the subnet to allow incoming HTTP traffic from 0.0.0.0/0.However, the website cannot be reached from the internet.What is the cause of this issue?Read More →

A company manages a set of accounts on AWS by using AWS Organizations.The company’s security team wants to use a native AWS service to regularly scan all AWS accounts against the Center for Internet Security (CIS) AWS Foundations Benchmark.What is the MOST operationally efficient way to meet these requirements?Read More →

A company has turned on server access logging for all of its existing Amazon S3 buckets.The company wants to implement a solution to monitor the logging settings for new and existing S3 buckets.The solution must remediate any S3 buckets that do not have logging turned on.What should a SysOps administrator do to meet these requirements in the MOST operationally efficient way?Read More →

A company recently moved its server infrastructure to Amazon EC2 instances.The company wants to use Amazon CloudWatch metrics to track instance memory utilization and available disk space.What should a SysOps administrator do to meet these requirements?Read More →

A SysOps administrator is tasked with analyzing database performance.The database runs on a single Amazon RDS DB instance.The SysOps administrator finds that, during times of peak traffic, resources on the database are overutilized due to the amount of read traffic.Which actions should the SysOps administrator take to improve RDS performance? (Choose two.)Read More →

A company’s SysOps administrator maintains a highly available environment.The environment includes Amazon EC2 instances and an Amazon RDS Multi-AZ database.The EC2 instances are in an Auto Scaling group behind an Application Load Balancer.Recently, the company conducted a failover test.The SysOps administrator needs to decrease the failover time of the RDS database by at least 10%.Which solution will meet this requirement?Read More →

A company applies user-defined tags to resources that are associated with the company’s AWS workloads.Twenty days after applying the tags, the company notices that it cannot use the tags to filter views in the AWS Cost Explorer console.What is the reason for this issue?Read More →