Amazon
Anthropic
Avaya
Cisco
CompTIA
CrowdStrike
EC-Council
EXIN
Fortinet
Google
ISC
ISC2
ITIL
Juniper
Microsoft
NVIDIA
Okta
Palo Alto Networks
Salesforce
SAP
All Vendors

Amazon AWS Certified SysOps Administrator - Associate SOA-C02 Dumps in PDF

Free Amazon SOA-C02 Real Questions (page: 7)

SOA-C02 PDF — 424 Questions

A company hosts a web portal on Amazon EC2 instances. The web portal uses an Elastic Load Balancer (ELB) and Amazon Route 53 for its public DNS service.
The ELB and the EC2 instances are deployed by way of a single AWS CloudFormation stack in the us-east-1 Region. The web portal must be highly available across multiple Regions.
Which configuration will meet these requirements?

  1. Deploy a copy of the stack in the us-west-2 Region. Create a single start of authority (SOA) record in Route 53 that includes the IP address from each ELB. Configure the SOA record with health checks. Use the ELB in us-east-1 as the primary record and the ELB in us-west-2 as the secondary record.
  2. Deploy a copy of the stack in the us-west-2 Region. Create an additional A record in Route 53 that includes the ELB in us-west-2 as an alias target. Configure the A records with a failover routing policy and health checks. Use the ELB in us-east-1 as the primary record and the ELB in us-west-2 as the secondary record.
  3. Deploy a new group of EC2 instances in the us-west-2 Region. Associate the new EC2 instances with the existing ELB, and configure load balancer health checks on all EC2 instances. Configure the ELB to update Route 53 when EC2 instances in us-west-2 fail health checks.
  4. Deploy a new group of EC2 instances in the us-west-2 Region. Configure EC2 health checks on all EC2 instances in each Region. Configure a peering connection between the VPCs. Use the VPC in us-east-1 as the primary record and the VPC in us-west-2 as the secondary record.

Answer(s): B



A SysOps administrator is investigating why a user has been unable to use RDP to connect over the internet from their home computer to a bastion server running on an Amazon EC2 Windows instance.
Which of the following are possible causes of this issue? (Choose two.)

  1. A network ACL associated with the bastion's subnet is blocking the network traffic.
  2. The instance does not have a private IP address.
  3. The route table associated with the bastion's subnet does not have a route to the internet gateway.
  4. The security group for the instance does not have an inbound rule on port 22.
  5. The security group for the instance does not have an outbound rule on port 3389.

Answer(s): A,C



A SysOps administrator is examining the following AWS CloudFormation template:
Why will the stack creation fail?

  1. The Outputs section of the CloudFormation template was omitted.
  2. The Parameters section of the CloudFormation template was omitted.
  3. The PrivateDnsName cannot be set from a CloudFormation template.
  4. The VPC was not specified in the CloudFormation template.

Answer(s): C



A new application runs on Amazon EC2 instances and accesses data in an Amazon RDS database instance. When fully deployed in production, the application fails. The database can be queried from a console on a bastion host. When looking at the web server logs, the following error is repeated multiple times:
*** Error Establishing a Database Connection
Which of the following may be causes of the connectivity problems? (Choose two.)

  1. The security group for the database does not have the appropriate egress rule from the database to the web server.
  2. The certificate used by the web server is not trusted by the RDS instance.
  3. The security group for the database does not have the appropriate ingress rule from the web server to the database.
  4. The port used by the application developer does not match the port specified in the RDS configuration.
  5. The database is still being created and is not available for connectivity.

Answer(s): C,D



A compliance team requires all administrator passwords for Amazon RDS DB instances to be changed at least annually.
Which solution meets this requirement in the MOST operationally efficient manner?

  1. Store the database credentials in AWS Secrets Manager. Configure automatic rotation for the secret every 365 days.
  2. Store the database credentials as a parameter in the RDS parameter group. Create a database trigger to rotate the password every 365 days.
  3. Store the database credentials in a private Amazon S3 bucket. Schedule an AWS Lambda function to generate a new set of credentials every 365 days.
  4. Store the database credentials in AWS Systems Manager Parameter Store as a secure string parameter. Configure automatic rotation for the parameter every 365 days.

Answer(s): A



A SysOps administrator is responsible for managing a fleet of Amazon EC2 instances. These EC2 instances upload build artifacts to a third-party service. The third-party service recently implemented a strict IP allow list that requires all build uploads to come from a single IP address.
What change should the systems administrator make to the existing build fleet to comply with this new requirement?

  1. Move all of the EC2 instances behind a NAT gateway and provide the gateway IP address to the service.
  2. Move all of the EC2 instances behind an internet gateway and provide the gateway IP address to the service.
  3. Move all of the EC2 instances into a single Availability Zone and provide the Availability Zone IP address to the service.
  4. Move all of the EC2 instances to a peered VPC and provide the VPC IP address to the service.

Answer(s): A



A company uses an Amazon CloudFront distribution to deliver its website. Traffic logs for the website must be centrally stored, and all data must be encrypted at rest.
Which solution will meet these requirements?

  1. Create an Amazon OpenSearch Service (Amazon Elasticsearch Service) domain with internet access and server-side encryption that uses the default AWS managed customer master key (CMK). Configure CloudFront to use the Amazon OpenSearch Service (Amazon Elasticsearch Service) domain as a log destination.
  2. Create an Amazon OpenSearch Service (Amazon Elasticsearch Service) domain with VPC access and server-side encryption that uses AES-256. Configure CloudFront to use the Amazon OpenSearch Service (Amazon Elasticsearch Service) domain as a log destination.
  3. Create an Amazon S3 bucket that is configured with default server-side encryption that uses AES-256. Configure CloudFront to use the S3 bucket as a log destination.
  4. Create an Amazon S3 bucket that is configured with no default encryption. Enable encryption in the CloudFront distribution, and use the S3 bucket as a log destination.

Answer(s): C



An organization created an Amazon Elastic File System (Amazon EFS) volume with a file system ID of fs-85ba41fc, and it is actively used by 10 Amazon EC2 hosts. The organization has become concerned that the file system is not encrypted.
How can this be resolved?

  1. Enable encryption on each host's connection to the Amazon EFS volume. Each connection must be recreated for encryption to take effect.
  2. Enable encryption on the existing EFS volume by using the AWS Command Line Interface.
  3. Enable encryption on each host's local drive. Restart each host to encrypt the drive.
  4. Enable encryption on a newly created volume and copy all data from the original volume. Reconnect each host to the new volume.

Answer(s): D



PDF
Viewing page 7 of 61

Share your comments for Amazon SOA-C02 exam with other users:

T
TestPD1
8/10/2023 12:19:00 PM

question 17 : responses arent b and c ?

EUROPEAN UNION
N
Nhlanhla
12/13/2023 5:26:00 AM

just passed the exam on my first try using these dumps.

Anonymous
R
Rizwan
1/6/2024 2:18:00 AM

very helpful

INDIA
Y
Yady
5/24/2023 10:40:00 PM

these questions look good.

SINGAPORE
K
Kettie
10/12/2023 1:18:00 AM

this is very helpful content

Anonymous
S
SB
7/21/2023 3:18:00 AM

please provide the dumps

UNITED STATES
D
David
8/2/2023 8:20:00 AM

it is amazing

Anonymous
U
User
8/3/2023 3:32:00 AM

quesion 178 about "a banking system that predicts whether a loan will be repaid is an example of the" the answer is classification. not regresion, you should fix it.

EUROPEAN UNION
Q
quen
7/26/2023 10:39:00 AM

please upload apache spark dumps

Anonymous
E
Erineo
11/2/2023 5:34:00 PM

q14 is b&c to reduce you will switch off mail for every single alert and you will switch on daily digest to get a mail once per day, you might even skip the empty digest mail but i see this as a part of the daily digest adjustment

Anonymous
P
Paul
10/21/2023 8:25:00 AM

i think it is good question

Anonymous
U
Unknown
8/15/2023 5:09:00 AM

good for students who wish to give certification.

INDIA
C
Ch
11/20/2023 10:56:00 PM

is there a google drive link to the images? the links in questions are not working.

AUSTRALIA
J
Joey
5/16/2023 5:25:00 AM

very promising, looks great, so much wow!

Anonymous
A
alaska
10/24/2023 5:48:00 AM

i scored 87% on the az-204 exam. thanks! i always trust

GERMANY
N
nnn
7/9/2023 11:09:00 PM

good need more

Anonymous
U
User-sfdc
12/29/2023 7:21:00 AM

sample questions seems good

Anonymous
T
Tamer dam
8/4/2023 10:21:00 AM

huawei is ok

UNITED STATES
Y
YK
12/11/2023 1:10:00 AM

good one nice

JAPAN
D
de
8/28/2023 2:38:00 AM

please continue

GERMANY
D
DMZ
6/25/2023 11:56:00 PM

this exam dumps just did the job. i donot want to ruffle your feathers but your exam dumps and mock test engine is amazing.

UNITED KINGDOM
J
Jose
8/30/2023 6:14:00 AM

nice questions

PORTUGAL
T
Tar01
7/24/2023 7:07:00 PM

the explanation are really helpful

Anonymous
D
DaveG
12/15/2023 4:50:00 PM

just passed my exam yesterday on my first attempt. these dumps were extremely helpful in passing first time. the questions were very, very similar to these questions!

Anonymous
A
A.K.
6/30/2023 6:34:00 AM

cosmos db is paas not saas

Anonymous
S
S Roychowdhury
6/26/2023 5:27:00 PM

what is the percentage of common questions in gcp exam compared to 197 dump questions? are they 100% matching with real gcp exam?

Anonymous
B
Bella
7/22/2023 2:05:00 AM

not able to see questions

Anonymous
S
Scott
9/8/2023 7:19:00 AM

by far one of the best sites for free questions. i have pass 2 exams with the help of this website.

CANADA
D
donald
8/19/2023 11:05:00 AM

excellent question bank.

Anonymous
A
Ashwini
8/22/2023 5:13:00 AM

it really helped

Anonymous
S
sk
5/13/2023 2:07:00 AM

excelent material

INDIA
C
Christopher
9/5/2022 10:54:00 PM

the new versoin of this exam which i downloaded has all the latest questions from the exam. i only saw 3 new questions in the exam which was not in this dump.

CANADA
S
Sam
9/7/2023 6:51:00 AM

question 8 - can cloudtrail be used for storing jobs? based on aws - aws cloudtrail is used for governance, compliance and investigating api usage across all of our aws accounts. every action that is taken by a user or script is an api call so this is logged to [aws] cloudtrail. something seems incorrect here.

UNITED STATES
T
Tanvi Rajput
8/14/2023 10:55:00 AM

question 13 tda - c01 answer : quick table calculation -> percentage of total , compute using table down

UNITED KINGDOM
AI Tutor 👋 I’m here to help!