SOA-C02 Question Bank · Latest 50 Questions Free Preview (Page 2/5)
Questions 11–20 of the latest 50 SOA-C02 questions (5 pages total), with answers and explanations, no login required. Practice all 1044 questions online.
Question 11 · No. 1005 · Single choice
A user is trying to connect to a running EC2 instance using SSH. However, the user gets a connection time out error. Which of the below mentioned options is not a possible reason for rejection?
- A. The access key to connect to the instance is wrong
- B. The security group is not configured properly
- C. The private key used to launch the instance is not correct
- D. The instance CPU is heavily loaded
Answer: A
Explanation: If the user is trying to connect to a Linux EC2 instance and receives the connection time out error the probable reasons are:
Security group is not configured with the SSH port
The private key pair is not right The user name to login is wrong -
The instance CPU is heavily loaded, so it does not allow more connections
Question 12 · No. 1006 · Single choice
A system admin wants to add more zones to the existing ELB. The system admin wants to perform this activity from CLI. Which of the below mentioned command helps the system admin to add new zones to the existing
ELB?
- A. elb-enable-zones-for-lb
- B. elb-add-zones-for-lb
- C. It is not possible to add more zones to the existing ELB
- D. elb-configure-zones-for-lb
Answer: A
Explanation: The user has created an Elastic Load Balancer with the availability zone and wants to add more zones to the existing ELB. The user can do so in two ways:
1. From the console or CLI
2. add new zones to ELB
Question 13 · No. 1007 · Multiple choice
Which two steps are required to generate a report detailing specific cost allocation tags when creating a
Monthly Cost Allocation report (Select two.)
- A. Use AWS CloudTrail to export the events for the specified resources.
- B. Use an AWS Lambda function to read the resources metadata, and write the specified tags to a DynamoDB table.
- C. Activate the "requested" tags by clicking Manage report tags on the Billing Preferences page.
- D. Select the checkbox for Cost Allocation Report in the AWS account’s Billing Management Console.
- E. Create a new Budget using the Billing Management Console, use the "Include costs related to Tags"
Answer: B, D
Question 14 · No. 1008 · Single choice
A user has configured an EC2 instance in the US-East-1a zone. The user has enabled detailed monitoring of the instance. The user is trying to get the data from CloudWatch using a CLI. Which of the below mentioned
CloudWatch endpoint URLs should the user use?
- A. monitoring.us-east-1.amazonaws.com
- B. monitoring.us-east-1-a.amazonaws.com
- C. monitoring.us-east-1a.amazonaws.com
- D. cloudwatch.us-east-1a.amazonaws.com
Answer: A
Explanation: The CloudWatch resources are always region specific and they will have the end point as region specific. If the user is trying to access the metric in the US-East-1 region, the endpoint URL will be: monitoring.us-east-
1.amazonaws.com
Question 15 · No. 1009 · Single choice
A company hosts its website on Amazon ECF2 instances behind an ELB Application Load Balancer. The company manages its DNS with Amazon Route 53, and wants to point its domain's zone apex to the website.
Which type of record should be used to meet these requirements?
- A. An AAA record for the domain's zone apex
- B. An A record for the domain's zone apex
- C. A CNAME record for the domain's zone apex
- D. An alias record for the domain's zone apex
Answer: B
Explanation: Reference:
https://aws.amazon.com/route53/faqs/
Question 16 · No. 1010 · Single choice
A colleague is attempting to launch several new CloudFormation stacks, and receives the following error response:
<img class="in-exam-image" src="https://636c-cloud1-1gdf764w1cda3130-1314234794.tcb.qcloud.la/assets/media/exam-media/03859/0017800001.png" class="in-exam-image" />
What should be done to address the error?
- A. Add a Pause to the CloudFormation templates.
- B. Add an exponential backoff between CreateStack API calls.
- C. Run the CloudFormation API calls from a larger Amazon EC2 instance.
- D. Combine stack templates into one, and retry the CreateStack API call.
Answer: B
Explanation: Reference:
https://forums.aws.amazon.com/thread.jspa?threadID=100414
Question 17 · No. 1011 · Single choice
A user has enabled the Multi AZ feature with the MS SQL RDS database server. Which of the below mentioned statements will help the user understand the Multi AZ feature better?
- A. In a Multi AZ, AWS runs two DBs in parallel and copies the data asynchronously to the replica copy
- B. In a Multi AZ, AWS runs two DBs in parallel and copies the data synchronously to the replica copy
- C. In a Multi AZ, AWS runs just one DB but copies the data synchronously to the standby replica
- D. AWS MS SQL does not support the Multi AZ feature
Answer: C
Explanation: Amazon RDS provides high availability and failover support for DB instances using Multi-AZ deployments. In a
Multi-AZ deployment, Amazon RDS automatically provisions and maintains a synchronous standby replica in a different Availability Zone. The primary DB instance is synchronously replicated across Availability Zones to a standby replica to provide data redundancy, eliminate I/O freezes, and minimize latency spikes during system backups. Running a DB instance with high availability can enhance availability during planned system maintenance, and help protect your databases against DB instance failure and Availability Zone disruption.
Note that the high-availability feature is not a scaling solution for read-only scenarios; you cannot use a standby replica to serve read traffic. To service read-only traffic, you should use a read replica.
Question 18 · No. 1012 · Single choice
A company is using an AWS KMS customer master key (CMK) with imported key material. The company references the CMK by its alias in the Java application to encrypt data. The CMK must be rotated every 6 months.
What is the process to rotate the key?
- A. Enable automatic key rotation for the CMK, and specify a period of 6 months.
- B. Create a new CMK with new imported material, and update the key alias to point to the new CMK.
- C. Delete the current key material, and import new material into the existing CMK.
- D. Import a copy of the existing key material into a new CMK as a backup, and set the rotation schedule for 6 months.
Answer: A
Explanation: Cryptographic best practices discourage extensive reuse of encryption keys. To create new cryptographic material for your AWS Key Management Service (AWS
KMS) customer master keys (CMKs), you can create new CMKs, and then change your applications or aliases to use the new CMKs. Or, you can enable automatic key rotation for an existing CMK.
When you enable automatic key rotation for a customer managed CMK, AWS KMS generates new cryptographic material for the CMK every year. AWS KMS also saves the CMK's older cryptographic material in perpetuity so it can be used to decrypt data that it encrypted. AWS KMS does not delete any rotated key material until you delete the CMK.
Reference:
https://docs.aws.amazon.com/kms/latest/developerguide/rotate-keys.html
Question 19 · No. 1013 · Single choice
You need to design a VPC for a web-application consisting of an Elastic Load Balancer (ELB). a fleet of web/application servers, and an RDS database. The entire Infrastructure must be distributed over 2 availability zones.
Which VPC configuration works while assuring the database is not available from the Internet?
- A. One public subnet for ELB one public subnet for the web-servers, and one private subnet for the database
- B. One public subnet for ELB two private subnets for the web-servers, two private subnets for RDS
- C. Two public subnets for ELB two private subnets for the web-servers and two private subnets for RDS
- D. Two public subnets for ELB two public subnets for the web-servers, and two public subnets for RDS
Answer: C
Explanation: While using ELB for web applications, ensure that you place all other EC2 instances in private subnets wherever possible. Except where there is an explicit requirement for instances requiring outside world access and Elastic IP attached, place all the instances in private subnets only. In the Amazon VPC environment, only ELBs must be in the public subnet as secure practice.
You will need to select a Subnet for each Availability Zone where you wish traffic to be routed by your load balancer. If you have instances in only one Availability
Zone, please select at least two Subnets in different Availability Zones to provide higher availability for your load balance
Question 20 · No. 1014 · Single choice
The Database Administration team is interested in performing manual backups of an Amazon RDS Oracle DB instance.
What steps should be taken to perform the backups?
- A. Attach an Amazon EBS volume with Oracle RMAN installed to the RDS instance.
- B. Take a snapshot of the EBS volume that is attached to the DB instance.
- C. Install Oracle Secure Backup on the RDS instance and back up the Oracle database to Amazon S3.
- D. Take a snapshot of the DB instance.
Answer: D
Explanation: Reference:
https://aws.amazon.com/rds/faqs/