SOA-C02 - findprotools.com

soa-c02 Fast Test

Total question: 10 (Login to full test)

Question 1:

A retail company has built its server infrastructure on Amazon EC2 instances that run on Windows OS. The development team has defined a few custom metrics that need to be collected by the unified CloudWatch agent.

As a SysOps Administrator, can you identify the correct configuration to be used for this scenario?

Unified CloudWatch agent cannot be custom configured

Configure the CloudWatch agent with collectd protocol to collect the necessary system metrics

CloudWatch agent can be configured with either StatsD protocol or collectd protocol to collect the necessary system metrics on windows servers

Configure the CloudWatch agent with StatsD protocol to collect the necessary system metrics

Question 2:

A developer has created rules for different events on Amazon EventBridge with AWS Lambda function as a target. The developer has also created an IAM Role with the necessary permissions and associated it with the rule. The rule however is failing, and on initial analysis, it is clear that the IAM Role associated with the rule is not being used when calling the Lambda function.

What could have gone wrong with the configuration and how can you fix the issue?

For Lambda functions configured as a target to EventBridge, you need to provide resource-based policy. IAM Roles will not work

For Lambda, EventBridge relies on Access Control Lists (ACLs) to define permissions. IAM Roles will not work for Lambda when configured as a target for an EventBridge rule

AWS Command Line Interface (CLI) should not be used to add permissions to EventBridge targets

The IAM Role is wrongly configured. Delete the existing Role and recreate with necessary permissions and associate the newly created Role with the EventBridge rule

Question 3:

An IT services company runs its technology infrastructure on AWS Cloud. The company runs audits for all the development and testing teams against the standards set by the organization. During a recent audit, the company realized that most of the patch compliance standards are not being followed by the teams. The teams have however tagged all their AWS resources as per the guidelines.

As a SysOps Administrator, which of the following would you recommend as an easy way of fixing the issue as quickly as possible?

Use AWS Systems Manager Automation to simplify the patch application process across all instances

Use Amazon Inspector to automate the process of patching instances that helps improve the security and compliance of the instances

Use Amazon Patch Manager to automate the process of patching instances

Use AWS Systems Manager Patch Manager to automate the process of patching managed instances

Question 4:

An organization has multiple AWS accounts to manage different lines of business. A user from the Finance account has to access reports stored in Amazon S3 buckets of two other AWS accounts (belonging to the HR and Audit departments) and copy these reports back to the S3 bucket in the Finance account. The user has requested the necessary permissions from the systems administrator to perform this task.

As a SysOps Administrator, how will you configure a solution for this requirement?

Create resource-based policies in the HR, Audit accounts that will allow the requester from the Finance account to access the respective S3 buckets

Create IAM roles in the HR, Audit accounts, which can be assumed by the user from the Finance account when the user needs to access the S3 buckets of the accounts

Create identity-based IAM policy in the Finance account that allows the user to make a request to the S3 buckets in the HR and Audit accounts. Also, create resource-based IAM policies in the HR, Audit accounts that will allow the requester from the Finance account to access the respective S3 buckets

Create resource-level permissions in the HR, Audit accounts to allow access to respective S3 buckets for the user in the Finance account

Question 5:

AWS Shared Responsibility Model discusses the responsibilities that customers and AWS share for different services and resources.

For an abstracted service like Amazon S3, which of the following is the responsibility of AWS?

Managing the data present in S3 Buckets

Defining rules to move data across different S3 storage classes

Maintaining the operating systems and platforms for Amazon S3

Choosing encryption options for data present in S3 buckets

Question 6:

A systems administration team is configuring Amazon EC2 metrics that are sent to Amazon CloudWatch for monitoring purposes. The team is looking for a metric that can help them identify the processing power required to run an application on the selected instance.

Which of the below metric should be used for this requirement?

CPUCreditUsage metric should be used to identify the processing power required

CPUProcessPower metric should be used to identify the processing power required

CPUUtilization metric should be used to identify the processing power required

ResourceCount is the correct metric to identify the processing power required

Question 7:

An e-commerce web application is built on a fleet of Amazon EC2 instances with an Auto Scaling Group. The application performance remains consistent throughout the day. But, for a few weeks now, users have been complaining about lagging screens and failing orders between 5-6 PM almost every day. Server logs show a sharp spike in user activity for this one hour every day.

What is an optimal way to fix the issue while keeping the application available?

Modify the Auto Scaling Group launch configuration to include more number of instances

Create a scheduled scaling action to scale up before the traffic spike hits the servers

You can choose to manually add few more instances to the ASG to deal with the sudden spike

Configure an Elastic Load Balancer, to replace the ASG, and move all the instances to ELB

Question 8:

As part of regular maintenance, a systems administrator was checking through the configured Auto Scaling groups (ASGs). An error was raised by an Auto Scaling group when attempting to launch an instance that has an encrypted EBS volume. The service-linked role did not have access to the customer-managed CMK used to encrypt the volume.

Which of the following represents the best solution to fix this issue?

Determine which service-linked role to use for this Auto Scaling group. Update the key policy on the CMK and allow the service-linked role to use the CMK. Update the Auto Scaling group to use the service-linked role

It is not possible for ASGs to initiate EC2 instances that have encrypted volumes attached to them

Use a CMK in the same AWS account as the Auto Scaling group (ASG). Copy and re-encrypt the snapshot with another CMK that belongs to the same account as the Auto Scaling group. Allow the service-linked role to use the new CMK

Export the CMK to the ASG account from the instance account. Then, define a role to access this CMK and attach the role to ASG

Question 9:

A financial services company runs its server infrastructure on a fleet of Amazon EC2 instances running behind an Auto Scaling Group (ASG). The SysOps Administrator has configured the instances to be protected from termination during scale-in.

A scale-in event has occurred. What is the outcome of the event?

When all instances are termination protected, scale-in event is not generated

The desired capacity of the ASG is decremented, but ASG will not be able to terminate any instance

The minimum capacity of the ASG is decremented, but ASG will not be able to terminate any instance

The desired capacity of the ASG is decremented and the instances are terminated based on the configuration

Question 10:

A large IT company manages several projects on AWS Cloud and has decided to use AWS X-Ray to trace application workflows. The company uses a plethora of AWS services like API Gateway, Amazon EC2 instances, Amazon S3 storage service, Elastic Load Balancers and AWS Lambda functions.

Which of the following should the company keep in mind while using AWS X-Ray for the AWS services they use?

AWS X-Ray cannot be used to trace your AWS Lambda functions since they are not integrated

Application Load balancers do not send data to X-Ray

You cannot use X-Ray to trace or analyze user requests to your Amazon API Gateway APIs

AWS X-Ray does not integrate with Amazon S3 and you need to use CloudTrail for tracking requests on S3