SOA-C02 Question Bank · Latest 50 Questions Free Preview (Page 1/5)

A user is trying to understand AWS SNS. To which of the below mentioned end points is SNS unable to send a notification?

• A. Email JSON
• B. HTTP
• C. AWS SQS
• D. AWS SES

Answer: D

A user has configured ELB with three instances. The user wants to achieve High Availability as well as redundancy with ELB. Which of the below mentioned AWS services helps the user achieve this for ELB?

• A. Route 53
• B. AWS Mechanical Turk
• C. Auto Scaling
• D. AWS EMR

Answer: A

Malicious traffic is reaching company web servers. A SysOps Administrator is tasked with blocking this traffic. The malicious traffic is distributed over many IP addresses and represents much higher traffic than is typically seen from legitimate users. How should the Administrator protect the web servers?

• A. Create a security group for the web servers and add deny rules for malicious sources.
• B. Set the network access control list for the web servers' subnet and add deny entries.
• C. Place web servers behind AWS WAF and establish the rate limit to create a blacklist.
• D. Use Amazon CloudFront to cache all pages and remove the traffic from the web servers.

Answer: C

An organization is concerned that its Amazon RDS databases are not protected. The solution to address this issue must be low cost, protect against table corruption that could be overlooked for several days, and must offer a 30-day window of protection. How can these requirements be met?

• A. Enable Multi-AZ on the RDS instance to maintain the data in a second Availability Zone.
• B. Create a read replica of the RDS instance to maintain the data in a second region.
• C. Ensure that automated backups are enabled and set the appropriate retention period.
• D. Enable versioning in RDS to recover altered table data when needed.

Answer: C

A root account owner has created an S3 bucket testmycloud. The account owner wants to allow everyone to upload the objects as well as enforce that the person who uploaded the object should manage the permission of those objects. Which is the easiest way to achieve this?

• A. The root account owner should create a bucket policy which allows the IAM users to upload the object
• B. The root account owner should create the bucket policy which allows the other account owners to set the object policy of that bucket
• C. The root account should use ACL with the bucket to allow everyone to upload the object
• D. The root account should create the IAM users and provide them the permission to upload content to the bucket

Answer: C

An organization's security policy requires multiple copies of all critical data to be replicated across at least a primary and backup data center. The organization has decided to store some critical data on Amazon S3. Which option should you implement to ensure this requirement is met?

• A. Use the S3 copy API to replicate data between two S3 buckets in different regions
• B. You do not need to implement anything since S3 data is automatically replicated between regions
• C. Use the S3 copy API to replicate data between two S3 buckets in different facilities within an AWS Region
• D. You do not need to implement anything since S3 data is automatically replicated between multiple facilities within an AWS Region

Answer: D

The amount of data a company must back up has been increasing, and storage space is quickly running out. There is no budget to purchase new backup software that is capable of backing up data directly to the cloud. What is the MOST cost-effective way to make storage available to the company's legacy backup system?

• A. Launch an Amazon EC2 instance, add large Amazon EBS volumes, and connect using VPN
• B. Ship backup tapes to AWS for storage in secure AWS Availability Zones
• C. Use AWS Snowball on a weekly basis to transfer data to Amazon Glacier
• D. Use AWS Storage Gateway to present a VTL using iSCSI to the legacy application

Answer: C

A user has configured ELB with two EBS backed EC2 instances. The user is trying to understand the DNS access and IP support for ELB. Which of the below mentioned statements may not help the user understand the IP mechanism supported by ELB?

• A. The client can connect over IPV4 or IPV6 using Dualstack
• B. ELB DNS supports both IPV4 and IPV6
• C. Communication between the load balancer and back-end instances is always through IPV4
• D. The ELB supports either IPV4 or IPV6 but not both

Answer: D

A user has setup Auto Scaling with ELB on the EC2 instances. The user wants to configure that whenever the CPU utilization is below 10%, Auto Scaling should remove one instance. How can the user configure this?

• A. The user can get an email using SNS when the CPU utilization is less than 10%. The user can use the desired capacity of Auto Scaling to remove the instance
• B. Use CloudWatch to monitor the data and Auto Scaling to remove the instances using scheduled actions
• C. Configure CloudWatch to send a notification to Auto Scaling Launch configuration when the CPU utilization is less than 10% and configure the Auto Scaling policy to remove the instance
• D. Configure CloudWatch to send a notification to the Auto Scaling group when the CPU Utilization is less

Answer: D

A Systems Administrator is responsible for maintaining custom, approved AMIs for a company. These AMIs must be shared with each of the company's AWS accounts. How can the Administrator address this issue?

• A. Contact AWS Support for sharing AMIs with other AWS accounts.
• B. Modify the permissions on the AMIs so that they are publicly accessible.
• C. Modify the permissions on the IAM role that are associated with the AMI.
• D. Share the AMIs with each AWS account using the console or CLI.

Answer: D