Free Amazon SOA-C02 Exam Questions

Question 1

The SysOps administrator needs to configure a website for CloudFront when the DNS CNAME record points to an S3 URL instead of CloudFront.

A : Disable S3 Block Public Access on the S3 bucket.

B : Create an S3 access point in the same AWS Region where the S3 bucket is located. Configure the access point policy to allow CloudFront to read from the S3 bucket. Point the CNAME record to the S3 access point name.

C : Modify the value of the DNS CNAME record to be arn:aws:s3:::example-com-website-files instead of the S3 URI.

D : Modify the value of the DNS CNAME record to be dllllllabcdef8.cloudfront.net instead of the S3 URI.

Answer: D

Question 2

A company creates custom AMI images by launching new Amazon EC2 instances from an AWS CloudFormation template. It installs and configures necessary software through AWS OpsWorks, and takes images of each EC2 instance. The process of installing and configuring software can take between 2 to 3 hours, but at times, the process stalls due to installation errors.

The SysOps administrator must modify the CloudFormation template so if the process stalls, the entire stack will fail and roll back.

Based on these requirements, what should be added to the template?

A : nditions with a timeout set to 4 hours.

B : eationPolicy with a timeout set to 4 hours.

C : pendsOn with a timeout set to 4 hours.

D : tadata with a timeout set to 4 hours.

Answer: B

Question 3

A SysOps administrator is troubleshooting a VPC with public and private subnets that leverage custom network ACLs. Instances in the private subnet are unable to access the internet. There is an internet gateway attached to the public subnet. The private subnet has a route to a NAT gateway that is also attached to the public subnet. The Amazon EC2 instances are associated with the default security group for the VPC.

What is causing the issue in this scenario?

A : There is a network ACL on the private subnet set to deny all outbound traffic.

B : There is no NAT gateway deployed in the private subnet of the VPC.

C : The default security group for the VPC blocks all inbound traffic to the EC2 instances.

D : The default security group for the VPC blocks all outbound traffic from the EC2 instances.

Answer: A

Question 4

A company has a stateless application that runs on four Amazon EC2 instances. The application requires tour instances at all times to support all traffic. A SysOps administrator must design a highly available, fault-tolerant architecture that continually supports all traffic if one Availability Zone becomes unavailable.
Which configuration meets these requirements?

A : ploy two Auto Scaling groups in two Availability Zones with a minimum capacity of two instances in each group.

B : ploy an Auto Scaling group across two Availability Zones with a minimum capacity of four instances.

C : ploy an Auto Scaling group across three Availability Zones with a minimum capacity of four instances.

D : ploy an Auto Scaling group across three Availability Zones with a minimum capacity of six instances.

Answer: C

Question 5

A company has scientists who upload large data objects to an Amazon S3 bucket. The scientists upload the objects as multipart uploads. The multipart uploads often fail because of poor end-client connectivity.

The company wants to optimize storage costs that are associated with the data. A SysOps administrator must implement a solution that presents metrics for incomplete uploads. The solution also must automatically delete any incomplete uploads after 7 days.

Which solution will meet these requirements?

A : Review the Incomplete Multipart Upload Bytes metric in the S3 Storage Lens dashboard. Create an S3 Lifecycle policy to automatically delete any incomplete multipart uploads after 7 days.

B : Implement S3 Intelligent-Tiering to move data into lower-cost storage classes after 7 days. Create an S3 Storage Lens policy to automatically delete any incomplete multipart uploads after 7 days.

C : Access the S3 console. Review the Metrics tab to check the storage that incomplete multipart uploads are consuming. Create an AWS Lambda function to delete any incomplete multipart uploads after 7 days.

D : Use the S3 analytics storage class analysis tool to identify and measure incomplete multipart uploads. Configure an S3 bucket policy to enforce restrictions on multipart uploads to delete incomplete multipart uploads after 7 days.

Answer: A