SOA-C02 - findprotools.com

soa-c02 Fast Test

Total question: 10 (Login to full test)

Question 1:

A systems administrator has configured Amazon EC2 instances in an Auto Scaling Group (ASG) for two separate development teams. However, only one configuration has CloudWatch agent installed on the instances, whereas the other one does not have it. The administrator has not manually installed the agents on either group of instances.

Which of the following would you identify as a root-cause behind this issue?

CloudWatch agent can be configured to be loaded on the EC2 instances while configuring the ASG. The developer could have unintentionally checked this flag on one of the ASGs he created

The architecture of the InstanceType mentioned in your launch configuration does not match the image architecture. So, the ASG was created with errors, resulting in skipping CloudWatch agent. A thorough check is needed for such ASGs, more services could have been skipped

If your AMI contains a CloudWatch agent, it’s automatically installed on EC2 instances when you create an EC2 Auto Scaling group. The developer needs to choose the AMI that has CloudWatch agent pre-configured on it

The instance architecture might not have been compatible with the AMI chosen. The incompatibility results in various errors, one of which is, some of the AWS services will not be installed as expected

Question 2:

A retail company is working on moving their technology infrastructure to AWS Cloud. The company has developed several custom scripts to monitor the instances hosting their applications and want to reuse these scripts on AWS Cloud. The development team is looking at a way to disable the pre-existing Amazon EC2 status checks.

As a SysOps Administrator, which of the following will you suggest to meet the given requirement?

Amazon EC2 status checks are interwoven into CloudWatch metrics. You can disable EC2 instance status checks from the CloudWatch metrics console

Status checks are built into Amazon EC2, so they cannot be disabled, but can be deleted from active configuration

Status checks are built into Amazon EC2, so they cannot be disabled or deleted

Amazon EC2 automated checks to identify hardware issues cannot be disabled. Automated checks for software issues can however be disabled

Question 3:

A company has recently moved its server infrastructure to Amazon EC2 instances. The company needs to use CloudWatch metrics to track the state of each of the instances.

Which of the following is the right way to configure the instances for CloudWatch monitoring to work?

Install CloudWatch Agent on all the instances and attach an IAM user to the EC2 instances to be able to run the CloudWatch agent

Install CloudWatch Agent on all the instances and attach necessary Security Groups to the EC2 instances to be able to run the CloudWatch agent

Install CloudWatch Agent on all the instances and attach an IAM role to the EC2 instances to be able to run the CloudWatch agent

Configure CloudWatch from AWS Console for the instances that need to be monitored by CloudWatch. AWS automatically installs and configure the agent for the mentioned instances

Question 4:

An e-commerce company relies heavily on the AWS Systems Manager for automating various management tasks for the fleet of Amazon EC2 instances that host their applications.

Which of the following should you use to recover an impaired instance automatically?

Use the AWS-UpdateCloudFormationStackWithApproval document to update impaired instances

Automatic recovery of impaired instances is not possible currently

Use the AWS-UpdateWindowsAmi document to recover impaired instances

Use the AWSSupport-ExecuteEC2Rescue document to recover impaired instances

Question 5:

A large IT project has multiple teams working on it. The teams share access across the resources - Amazon EC2 instances, Amazon S3 buckets and RDS database. A junior developer of a team ended up deleting data from a bucket that was used by various teams. This resulted in significant wastage of time and resources to mitigate the situation.

As a SysOps Administrator, you have been hired to secure the data present in S3 buckets by allowing recovery of objects in case of an accidental deletion. Which of these options would you suggest to meet the given requirements?

Use Amazon S3 bucket owner condition to restrict access to unintended users

Use Amazon S3 replication to replicate critical objects to avoid losing them from unintended deletes

Enable S3 versioning on all the buckets used in the project

Enable S3 Object Lock to lock all the objects that are used in the project

Question 6:

A media company stores all their articles on Amazon S3 buckets. As a security measure, they have server access logging enabled for all the buckets. The company is looking at a solution that can regularly check if logging is enabled for all the existing buckets and for any new ones they create. If the solution can also automate the remedy, it will be a perfect fit for their requirement.

Which of the following would you suggest to address the given use-case?

Amazon S3 server access logging is checked by AWS Trusted Advisor, as part of the best practices check it performs. Configure a remedy action with Trusted Advisor for all the resources that fails this best practice check

Enable AWS CloudTrail to track the logging information for all the S3 buckets. Currently, AWS does not provide an automatic remediation process, hence, use a Lambda function to rectify any aberrations found during the checks

Use AWS Config rules to check whether or not an S3 bucket has logging enabled, and carry out the necessary remediation if needed

Create a Lambda function that will check the logging status of all the S3 buckets and raise an Amazon SNS notification, if a remedy is needed

Question 7:

A junior developer created multiple stacks of resources in different AWS Regions per the CloudFormation template given to him. The development team soon started having issues with the created resources and their behavior. Initial checks have confirmed that some resources were created and some omitted, though the same template has been used. As a SysOps Administrator, you have been tasked to resolve these issues.

Which of the following could be the possible reason for this unexpected behavior?

There might have been dependency errors, that resulted in the stack not being created completely

Insufficient IAM permissions can lead to issues. When you work with an AWS CloudFormation stack, you not only need permissions to use AWS CloudFormation, you must also have permission to use the underlying services that are described in your template

The CloudFormation template might have custom named IAM resources that are responsible for the unintended behavior

The CloudFormation template was created using use-once only option and is not supposed to be reused for creating other stacks

Question 8:

An application runs on a fleet of Amazon EC2 instances running behind an Application Load Balancer. An Auto Scaling Group (ASG) helps keep the application available and flexible to traffic changes. The EC2 instances need to connect to Amazon RDS instances for fetching data. EC2 Instances also need internet access to be able to download the patches needed for their software. To meet the security guidelines of the company - the Load Balancer, Auto Scaling Group with the EC2 instances and RDS - are all placed into different subnets of the VPC.

Which of the following represents the best configuration to help connect the EC2 instances to the internet?

Create and attach an Internet Gateway to the VPC. Update the route table of the subnet that hosts the EC2 instances, to route internet traffic via the Internet Gateway

Create a carrier gateway and attach the carrier gateway to your VPC. You can then connect the subnets you wish to route to the carrier gateway

Create and attach an Egress-only Internet Gateway to the VPC and then update the route table of the instance subnet to route internet traffic via the Egress-only Internet Gateway

Configure an Elastic network interface for all the instances that need to communicate with the internet. Attach this Elastic network interface to the public subnet of the VPC to route internet traffic

Question 9:

A firm uses Amazon EC2 instances for running its flagship application. With new business expansion plans, the firm is looking at a bigger footprint for its AWS infrastructure. The development team needs to share Amazon Machine Images (AMIs) across AZs, AWS accounts and Regions.

What are the key points to be considered before planning the expansion? (Select two)

You need to share any CMKs used to encrypt snapshots and any Amazon EBS snapshots that the AMI references

AMIs are regional resources and can be shared across Regions

You do not need to share the Amazon EBS snapshots that an AMI references in order to share the AMI

You can only share AMIs that have unencrypted volumes and volumes that are encrypted with a customer-managed CMK

You can only share AMIs that have unencrypted volumes and volumes that are encrypted with an AWS-managed CMK

Question 10:

A data analytics company has its server infrastructure built on Amazon EC2 instances fronted with Elastic Load Balancers (ELBs). The ELBs are maintained in two AZs with each ELB having two EC2 instances registered with it. Both the instances in one AZ have been recorded as unhealthy.

What is the status of traffic that flows to the ELB connected to unhealthy instances?

The Load Balancer will display an `unhealthy' status and will not accept any incoming requests

The Load Balancer routes requests to the unhealthy targets

HTTP 403: Forbidden will be returned

HTTP 503: Service unavailable will be received as response