Amazon SOA-C02 Exam (page: 2)
Amazon AWS Certified SysOps Administrator (SOA-C01)
Updated on: 07-Feb-2026

Viewing Page 2 of 61

A SysOps administrator is deploying an application on 10 Amazon EC2 instances. The application must be highly available. The instances must be placed on distinct underlying hardware.
What should the SysOps administrator do to meet these requirements?

  1. Launch the instances into a cluster placement group in a single AWS Region.
  2. Launch the instances into a partition placement group in multiple AWS Regions.
  3. Launch the instances into a spread placement group in multiple AWS Regions.
  4. Launch the instances into a spread placement group in a single AWS Region.

Answer(s): D



A SysOps administrator is troubleshooting an AWS CloudFormation template whereby multiple Amazon EC2 instances are being created. The template is working in us-east-1, but it is failing in us-west-2 with the error code:
AMI [ami-12345678] does not exist
How should the Administrator ensure that the AWS CloudFormation template is working in every region?

  1. Copy the source region's Amazon Machine Image (AMI) to the destination region and assign it the same ID.
  2. Edit the AWS CloudFormation template to specify the region code as part of the fully qualified AMI ID.
  3. Edit the AWS CloudFormation template to offer a drop-down list of all AMIs to the user by using the AWS::EC2::AMI::ImageID control.
  4. Modify the AWS CloudFormation template by including the AMI IDs in the ג€Mappingsג€ section. Refer to the proper mapping within the template for the proper AMI I

Answer(s): D



A SysOps administrator is provisioning an Amazon Elastic File System (Amazon EFS) file system to provide shared storage across multiple Amazon EC2 instances. The instances all exist in the same VPC across multiple Availability Zones. There are two instances in each Availability Zone. The SysOps administrator must make the file system accessible to each instance with the lowest possible latency.
Which solution will meet these requirements?

  1. Create a mount target for the EFS file system in the VPC. Use the mount target to mount the file system on each of the instances.
  2. Create a mount target for the EFS file system in one Availability Zone of the VPC. Use the mount target to mount the file system on the instances in that Availability Zone. Share the directory with the other instances.
  3. Create a mount target for each instance. Use each mount target to mount the EFS file system on each respective instance.
  4. Create a mount target in each Availability Zone of the VPC. Use the mount target to mount the EFS file system on the instances in the respective Availability Zone.

Answer(s): D

Explanation:


Reference:

https://docs.aws.amazon.com/efs/latest/ug/accessing-fs.html



A SysOps administrator has successfully deployed a VPC with an AWS CloudFormation template. The SysOps administrator wants to deploy the same template across multiple accounts that are managed through AWS Organizations.
Which solution will meet this requirement with the LEAST operational overhead?

  1. Assume the OrganizationAccountAccessRole IAM role from the management account. Deploy the template in each of the accounts.
  2. Create an AWS Lambda function to assume a role in each account. Deploy the template by using the AWS CloudFormation CreateStack API call.
  3. Create an AWS Lambda function to query for a list of accounts. Deploy the template by using the AWS CloudFormation CreateStack API call.
  4. Use AWS CloudFormation StackSets from the management account to deploy the template in each of the accounts.

Answer(s): D

Explanation:


Reference:

https://aws.amazon.com/blogs/aws/new-use-aws-cloudformation-stacksets-for-multiple-accounts-in-an-aws-organization/



A company is running distributed computing software to manage a fleet of 20 Amazon EC2 instances for calculations. The fleet includes 2 control nodes and 18 task nodes to run the calculations. Control nodes can automatically start the task nodes.
Currently, all the nodes run on demand. The control nodes must be available 24 hours a day, 7 days a week. The task nodes run for 4 hours each day. A SysOps administrator needs to optimize the cost of this solution.
Which combination of actions will meet these requirements? (Choose two.)

  1. Purchase EC2 Instance Savings Plans for the control nodes.
  2. Use Dedicated Hosts for the control nodes.
  3. Use Reserved Instances for the task nodes.
  4. Use Spot Instances for the control nodes. Use On-Demand Instances if there is no Spot availability.
  5. Use Spot Instances for the task nodes. Use On-Demand Instances if there is no Spot availability.

Answer(s): A,E



A company is supposed to receive a data file every hour in an Amazon S3 bucket. An S3 event notification invokes an AWS Lambda function each time a file arrives. The function processes the data for use by an application.
The application team notices that sometimes the file does not arrive. The application team wants to receive a notification whenever the file does not arrive.
What is the MOST operationally efficient solution that meets these requirements?

  1. Add an S3 Lifecycle rule on the S3 bucket with a scope that is limited to objects that were created in the last hour. Configure another S3 event notification to be invoked by the lifecycle transition when the number of objects transitioned is zero. Publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to notify the application team.
  2. Configure another S3 event notification to invoke a Lambda function that posts a message to an Amazon Simple Queue Service (Amazon SQS) queue. Create an Amazon CloudWatch alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to notify the application team when the ApproximateAgeOfOldestMessage metric of the queue is greater than 1 hour.
  3. Create an Amazon CloudWatch alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to alert the application team when the Invocations metric of the Lambda function is zero for an hour. Configure the alarm to treat missing data as breaching.
  4. Create a new Lambda function to get the timestamp of the newest file in the S3 bucket. If the timestamp is more than 1 hour ago, publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to notify the application team. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke the new function hourly.

Answer(s): C



A company recently acquired another corporation and all of that corporation's AWS accounts. A financial analyst needs the cost data from these accounts. A
SysOps administrator uses Cost Explorer to generate cost and usage reports. The SysOps administrator notices that "No Tagkey" represents 20% of the monthly cost.
What should the SysOps administrator do to tag the "No Tagkey" resources?

  1. Add the accounts to AWS Organizations. Use a service control policy (SCP) to tag all the untagged resources.
  2. Use an AWS Config rule to find the untagged resources. Set the remediation action to terminate the resources.
  3. Use Cost Explorer to find and tag all the untagged resources.
  4. Use Tag Editor to find and tag all the untagged resources.

Answer(s): D



While setting up an AWS managed VPN connection, a SysOps administrator creates a customer gateway resource in AWS. The customer gateway device resides in a data center with a NAT gateway in front of it.
What address should be used to create the customer gateway resource?

  1. The private IP address of the customer gateway device
  2. The MAC address of the NAT device in front of the customer gateway device
  3. The public IP address of the customer gateway device
  4. The public IP address of the NAT device in front of the customer gateway device

Answer(s): D

Explanation:


Reference:

https://docs.aws.amazon.com/vpn/latest/s2svpn/cgw-options.html



Viewing Page 2 of 61



Share your comments for Amazon SOA-C02 exam with other users:

tomAws 7/18/2023 5:05:00 AM

nice questions
BRAZIL