AWS SysOps Administrator (SOA-C02) Practice Exam #1

You are working as a site reliability engineer (SRE) for a large US-based IT company. You have been tasked to find an automated way to monitor and resolve issues with their on-demand EC2 instances.

Which of the following options can be used to automatically monitor the EC2 instances and notify you for any possible incident?

You are developing a service marketplace platform in which people buy and sell online services. The project manager instructed you that the API calls on the AWS resources should be monitored and recorded. You used CloudTrail to help you in compliance, operational, and risk auditing of your AWS account. The project manager asked you where does CloudTrail store all of the logs?

A company has just launched a gamification feature on its mobile app that stores the score of the players to a DynamoDB table. You have been tasked to design a solution to trigger a Lambda function whenever the LeaderBoard attribute of the PlayerScore table is updated. The Lambda function would post a congratulatory message on a social media network.

What’s the best solution that can be implemented to trigger the Lambda function on specific events?

You have been tasked to create a CloudWatch alarm based on a static threshold. Sort the steps from the top (first step) to the bottom (last step) to complete the task using the console.

The previous AWS SysOps administrator in the Acme Corporation was using Amazon CloudWatch dashboards, as he was able to monitor the resources in a single view, even those resources that are spread across different Regions. Now, you took over the position as AWS SysOps administrator and you are responsible to create a new CloudWatch dashboard using the console.

Which of the following steps is NOT required to create the new CloudWatch dashboard?

You are working for an eCommerce startup as a SysOps Administrator. You have been tasked to implement a solution so each time the inventory level of a specific product collection reaches the threshold of out-of-stock, only then to get notified instantly for this event.

Which AWS service will you use to accomplish this requirement?

You are developing a web app for restaurant tables reservation and you need a managed service to send a text message to users every time a reservation is confirmed.

Which AWS service will you use to achieve this?

You have been hired to create an Amazon SNS topic for an e-commerce website that works with multiple services that require to broadcast the messages such as checkout and fulfillment systems.

Sort the steps from the top (first step) to the bottom (last step) to create a topic for your producer system using the console.

Which AWS service will you use to configure alarm actions to stop, start, or terminate Amazon EC2 instances when certain criteria are met?

Which of the following recommendations is NOT considered a best practice for using AWS CloudFormation more effectively and securely throughout its entire workflow?

Your new application is hosted in an Auto Scaling group of EC2 instances. To improve the monitoring process, you have to configure it to keep the average aggregate CPU utilization of your Auto Scaling group at 50 percent. This should be done by specifying the scaling metrics and threshold values for the CloudWatch alarms that trigger the scaling process.

Which of the following scaling policy type you should use?

A SysOps Administrator creates a CloudWatch Events rule to get notified for AWS Health events. Upon reviewing an account he notices the following rule. Which of the following actions does the rule perform?

A company uses EventBridge as it delivers a stream of real-time data from their own applications, and AWS services and routes that data to targets such as AWS Lambda. Also, they can set up routing rules to determine where to send their data to build application architectures. Now, the company needs to configure the EventBridge with more targets.

Which of the following is NOT a target for EventBridge?

A company is creating an EventBridge rule that triggers on an AWS API Call Using AWS CloudTrail. After configuring the Service provider and the Service name of the service that emits the event, now they are configuring the Event type.

Which of the following Event type should they choose to create the EventBridge rule?

A company troubleshoots problems with the CloudWatch agent. They updated their agent configuration but don’t see the new metrics or logs in the CloudWatch console. What action should they perform to troubleshoot the issue?

The company works with AWS CloudFormation and they want to set up scaling plans which is a component of AWS Auto Scaling for different sets of resources, per application.

Which of the following scaling methods AWS Auto Scaling combines together to support the scaling strategy?

Which of the following do you need to implement for as many Amazon EC2 workloads as possible so that you horizontally scale up and scale down when needed and automatically reduce your spending when you don’t need that capacity anymore?

Predictive scaling uses machine learning to analyze each resource’s historical workload and regularly forecasts the future load for the next two days, whereas Dynamic scaling creates target tracking scaling policies for the resources in your scaling plan. (True or False)

Which of the following AWS feature helps you ensure that you have the correct number of Amazon EC2 instances available to handle the load for your application?

An eCommerce marketplace uses an Auto Scaling group of EC2 instances, in multiple Availability Zones with an Application Load Balancer, to increase the availability and performance of the app. To better serve the users you decide to localize the content of the website, so each time users from the United Kingdom visit the site will be directed to uk.marketplace.com and users from the United States to us.marketplace.com.

Which of the following rule condition type allows you to route requests to multiple domains using a single load balancer?

Which of the following options can be used to apply specific-settings in one go for all of the Relational database instances?

A company is creating a new Amazon Relational Database Service (Amazon RDS) as it provides a cost-efficient relational database and manages common database administration tasks.

Sort the steps from the top (first step) to the bottom (last step) to create a read replica using the console with the following.

1. Choose the MySQL or PostgreSQL DB instance

2. Choose the custom Availability Zone for Destination Custom AZ

Which of the following design patterns and architectural options takes place through an increase in the specifications of an individual resource, such as upgrading a server with a larger hard drive or a faster CPU?

Which of the following is NOT a benefit of using an Application Load Balancer instead of a Classic Load Balancer?

Your Online Travel Agent (OTA) startup in California recently faced tremendous growth. Users from all over the world started using the APP. After investigation, you noticed 60% of the traffic was originated from Germany. Because of this, you decide to localize your content and present all of your website’s content in German to the users from Germany and English to the rest of the users. Also, you want all queries from Europe to be routed to an ELB load balancer in the Frankfurt region.

Which of the following services would allow you to fulfill this requirement?

Given the following types of Elastic Load Balancing, which one will you choose for load balancing of HTTP and HTTPS traffic?

You have been tasked to create a highly available and cost-effective architecture for your Application Load Balancer. What’s the minimum number of Availability Zones required to set up to complete the task?

Your web application is on a fleet of EC2 instances located in three Availability Zones which are behind an Application Load Balancer. Which health check configuration will you implement to ensure that your web app is highly-available?

Your new online event management application is hosted in AWS. The application uses Multi-AZ RDS for its database tier, which has a standby replica. What are the events that will make Amazon RDS automatically perform a failover to the standby replica? (Select all that apply.)

You have been tasked to migrate all of your company’s Windows-based applications to AWS. The only requirement is that the storage service must have full support for the Server Message Block protocol, Active Directory (AD) integration, and Distributed File System (DFS).

Which of the following storage service will be used to complete the migration according to the requirement?

You are working for a content management company as a SysOps Administrator. The company needs a storage service that provides the scale and performance the content management applications require such as high throughput and low-latency file operations. In addition, their data needs to be stored redundantly across multiple AZs and allows concurrent connections from multiple EC2 instances hosted on multiple AZs.

Which of the following AWS storage services is most suitable for the project?

A company implements Elastic IP addresses as they can mask the failure of an instance by rapidly remapping the address to another instance in their VPC. You have been hired to associate the Elastic IP address with their instance to receive a public DNS hostname.

Sort the steps from the top (first step) to the bottom (last step) to associate an Elastic IP with a running instance or network interface in their VPC using the console.

Suppose you have ELB load balancers in the US West (Oregon) Region and in the Asia Pacific (Singapore) Region and you created a latency record for each load balancer. What will happen when a user in London enters the name of your domain in a browser? (Choose all that apply.)

A company implements backup and restore strategies. The company needs to create and saves automated backups of their DB instances and replicate the backups to another Region.

What rules should the SysOps administrator follow to automate backups? (Select TWO.)

A company runs an application on a large fleet of Amazon EC2 instances to process financial transactions. The company needs to restore the DB instance to the latest possible time after experiencing a power outage.

Which action should a SysOps administrator take to meet this requirement?

You are developing a new Social Media App and accidentally you deleted a file hosted in Amazon Amazon Simple Storage Service (S3) which has caused disruption of service.

Which of the following solution will prevent this from happening again?

Which of the following guidelines is NOT considered a best practice for preventing security incidents in Amazon S3?

At ExamsDigest we use machine learning technologies to collect and analyze data, and we use Amazon Redshift for a data warehouse. Now, we need your help to implement a disaster recovery plan for ExamsDigest to automatically back up our cluster to a second AWS region in the event of an AWS region outage.

Which of the following is the MOST operationally efficient solution that meets these requirements?

A company runs several production workloads on Amazon EC2 instances. The company wants to create an automated pipeline to build and maintain a customized EC2 Image Builder image using the Create image pipeline console wizard.

Which of the following is the FIRST step to create an image pipeline workflow?

EC2 Image Builder has two runtime stages – build and test. Each runtime stage has the build, validate and test phases with configuration defined by the component document.

Which of the following statements is happening during the build phase?

Assuming, you manage 500 third party resources such as YourCompany::Dashboard::Instance. You perform one daily operation on each of the resources. We’ll assume that none of the handler operations, in this case, are above the 30s threshold.

Which of the following is your monthly AWS CloudFormation bill?

Which of the following recommendations is NOT considered a best practice for using AWS CloudFormation more effectively and securely throughout its entire workflow?

Which of the following services takes care of provisioning and configuring the resources (like Amazon EC2 instances or Amazon RDS DB instances) for you, so you can spend less time managing those resources?

A company uses AWS CloudFormation as they are able to model and set up Amazon Web Services resources. The company wants to delete AWS CloudFormation stacks but they fail.

Which of the following is a possible fix for this issue?

A company works with AWS CloudFormation StackSets as they want to create, update and delete stacks across multiple accounts and regions with a single operation. Upon reviewing the configuration you find out they don’t follow the recommended best practices on how to define a template or how to add stacks to a stack set.

Which of the following is a best practice approach for defining a template?

A startup company has a serverless architecture that uses AWS Lambda to run code without managing servers, Amazon S3 to store and retrieve any amount of data from anywhere on the web, and DynamoDB. The startup is using AWS CodeDeploy to automates application deployments to Amazon EC2 instances, and serverless Lambda functions. A new feature it’s ready to be pushed to production.

Which of the following deployment configuration type will allow you to shift from the original Lambda function to the updated Lambda function version all at once?

A company creates a VPC with CIDR block 10.0.0.0/24. The company wants to break this CIDR block into two subnets, each supporting 128 IP addresses. One subnet uses CIDR block 10.0.0.0/25 and the other uses CIDR block 10.0.0.128/25.

Which of the following addresses is reserved by AWS for the VPC router?

A company creates an Amazon CloudWatch alarm on the Service Quotas console to notify the SysOps administrator when they are close to a quota value threshold.

Sort the steps from the top (first step) to the bottom (last step) to create a CloudWatch alarm for a quota using the console.

A company wants to use Chef cookbooks to automate tasks such as installing and configuring packages and deploying apps.

What should a SysOps administrator do to meet this requirement?

A company wants to automate the process of patching managed instances and applying patches for operating systems and applications.

Which service should a SysOps administrator use to meet this requirement?

Α company wants to use an EventBridge to deliver a stream of real-time data from their applications and routes that data to targets such as AWS Lambda.

Which action should a SysOps administrator take to determine where to send their data?

The demand for the company’s application keeps growing, so does the need to keep track of their AWS resources. The company wants to use AWS Config as it provides a detailed view of the configuration of AWS resources in their AWS account

Which of the following actions a SysOps administrator is NOT able to take with AWS Config?

A company is using AWS CodeDeploy to automates application deployments to Amazon EC2 instances, and serverless Lambda functions.

Which of the following Deployment configuration Shifts 10 percent of traffic every three minutes until all traffic is shifted.

As a SysOps administrator for a startup, you have been tasked to provide the most suitable database service for the company in order to:

1. Store and retrieve any amount of data and serve any level of request traffic.
2. Scale up or scale down your tables’ throughput capacity without downtime or performance degradation.
3. Create full backups of your tables for long-term retention and archival for regulatory compliance needs.

Which of the following Amazon database service is the most suitable solution to use to achieve the above requirements?

You are developing a service marketplace platform in which people buy and sell online services. The project manager instructed you that the API calls on the AWS resources should be monitored and recorded. You used CloudTrail to help you in compliance, operational, and risk auditing of your AWS account.

The project manager asked you where does CloudTrail store all of the logs?

Which of the following AWS service is a security management service which allows you to centrally configure and manage firewall rules across your accounts and applications in AWS Organization?

A company needs to submit the security and compliance documents such as AWS ISO certifications and Payment Card Industry (PCI).

Which of the following AWS service provides on-demand downloads of AWS security and compliance documents?

In compliance with PCI DSS, an EU-based company is required to provide compliance documents, such as Payment Card Industry (PCI).

Where are these AWS compliance documents located?

Your new educational app for high-school students uses Amazon Cognito to handle user authentication and authorization. Now, you are thinking to add another method of authentication in addition to just a username and password to make the app more secure.

What solution will you implement to add the extra layer of security?

A company wants to incorporate a single sign-on feature from its corporate Active Directory. The company also wants to restrict access for each individual user to a designated user folder in an S3 bucket.

Which action should a SysOps administrator take to meet these requirements? (Select all that apply)

A company is developing an educational mobile app that uploads the user’s performance of individuals lessons to DynamoDB. Amazon Cognito is being used for authentication, authorization, and user management, and users sign-in with Facebook IDs and Google IDs. In order to securely store data in DynamoDB, the design should use temporary AWS credentials.

Which of the following feature of Amazon Cognito is used to obtain temporary credentials to access AWS services?

A company just launched a new mobile app that stores players and score information using Amazon S3 and DynamoDB. The users of the app can sign in using an external identity provider (IdP), such as Login with Amazon, Facebook, or Google. Amazon recommends that you do not embed or distribute long-term AWS credentials with apps that a user downloads to a device, even in an encrypted store.

What should a SysOps administrator use to requests temporary AWS security credentials when needed?

A company is using IAM with Amazon EC2 to control whether users can perform a task using specific Amazon EC2 API actions and whether they can use specific AWS resources. A SysOps administrator attempts to launch an instance with a role, but he gets an AccessDenied error.

Which actions should the SysOps administrator take to fix this issue?