SOA-C02 Question Bank · Latest 50 Questions Free Preview (Page 3/5)
Questions 21–30 of the latest 50 SOA-C02 questions (5 pages total), with answers and explanations, no login required. Practice all 1044 questions online.
Question 21 · No. 1015 · Single choice
A user is trying to delete an Auto Scaling group from CLI. Which of the below mentioned steps are to be performed by the user?
- A. Terminate the instances with the ec2-terminate-instance command
- B. Terminate the Auto Scaling instances with the as-terminate-instance command
- C. Set the minimum size and desired capacity to 0
- D. There is no need to change the capacity. Run the as-delete-group command and it will reset all values to 0
Answer: C
Explanation: If the user wants to delete the Auto Scaling group, the user should manually set the values of the minimum and desired capacity to 0. Otherwise Auto Scaling will not allow for the deletion of the group from CLI. While trying from the AWS console, the user need not set the values to 0 as the Auto Scaling console will automatically do so.
Question 22 · No. 1016 · Multiple choice
While creating the wait condition resource in AWS CloudFormation, a SysOps Administrator receives the error `received 0 signals out of the 1 expected from the
EC2 instance`.
What steps should be taken to troubleshoot this issue? (Choose two.)
- A. Confirm from the cfn logs that the cfn-signal command was successfully run on the instance.
- B. Try to re-create the stack with a different IAM user.
- C. Check that the instance has a route to the Internet through a NAT device.
- D. Update the AWS CloudFormation stack service role to have iam:PassRole permission.
- E. Delete the existing stack and attempt to create a new once.
Answer: A, D
Question 23 · No. 1017 · Single choice
A user has received a message from the support team that an issue occurred 1 week back between 3 AM to 4 AM and the EC2 server was not reachable. The user is checking the CloudWatch metrics of that instance. How can the user find the data easily using the CloudWatch console?
- A. The user can find the data by giving the exact values in the time Tab under CloudWatch metrics
- B. The user can find the data by filtering values of the last 1 week for a 1 hour period in the Relative tab under CloudWatch metrics
- C. It is not possible to find the exact time from the console. The user has to use CLI to provide the specific time
- D. The user can find the data by giving the exact values in the Absolute tab under CloudWatch metrics
Answer: D
Explanation: If the user is viewing the data inside the CloudWatch console, the console provides options to filter values either using the relative period, such as days /hours or using the Absolute tab where the user can provide data with a specific date and time. The console also provides the option to search using the local timezone under the time range caption in the console.
Question 24 · No. 1018 · Single choice
If you want to launch Amazon Elastic Compute Cloud (EC2) Instances and assign each Instance a predetermined private IP address you should:
- A. Assign a group or sequential Elastic IP address to the instances
- B. Launch the instances in a Placement Group
- C. Launch the instances in the Amazon virtual Private Cloud (VPC).
- D. Use standard EC2 instances since each instance gets a private Domain Name Service (DNS) already
- E. Launch the Instance from a private Amazon Machine image (Mil)
Answer: C
Explanation: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpc-ip-addressing.html
Question 25 · No. 1019 · Single choice
A SysOps Administrator must use a bastion host to administer a fleet of Amazon EC2 instances. All access to the bastion host is managed by the Security team.
What is the MOST secure way for the Security team to provide the SysOps Administrator access to the bastion host?
- A. Assign the same IAM role to the Administrator that is assigned to the bastion host.
- B. Provide the Administrator with the SSH key that was used for the bastion host when it was originally launched.
- C. Create a new IAM role with the same permissions as the Security team, and assign it to the Administrator.
- D. Create a new administrative account on the bastion host, and provide those credentials to the Administrator using AWS Secrets Manager.
Answer: B
Explanation: Reference:
https://cloud.ibm.com/docs/tutorials?topic=solution-tutorials-vpc-secure-management-bastion-server
Question 26 · No. 1020 · Single choice
A user has configured a VPC with a new subnet. The user has created a security group. The user wants to configure that instances of the same subnet communicate with each other. How can the user configure this with the security group?
- A. There is no need for a security group modification as all the instances can communicate with each other inside the same subnet
- B. Configure the subnet as the source in the security group and allow traffic on all the protocols and ports
- C. Configure the security group itself as the source and allow traffic on all the protocols and ports
- D. The user has to use VPC peering to configure this
Answer: C
Explanation: A Virtual Private Cloud (VPC. is a virtual network dedicated to the user's AWS account. AWS provides two features that the user can use to increase security in
VPC: security groups and network ACLs. Security groups work at the instance level. If the user is using the default security group, it will have a rule which allows the instances to communicate with other. For a new security group, the user has to specify the rule, add it to define the source as the security group itself, and select all the protocols and ports for that source.
Question 27 · No. 1021 · Single choice
A SysOps Administrator is responsible for a legacy, CPU-heavy application. The application can only be scaled vertically. Currently, the application is deployed on a single t2.large Amazon EC2 instance. The system is showing 90% CPU usage and significant performance latency after a few minutes.
What change should be made to alleviate the performance problem?
- A. Change the Amazon EBS volume to Provisioned IOPs.
- B. Upgrade to a compute-optimized instance.
- C. Add additional t2.large instances to the application.
- D. Purchase Reserved Instances.
Answer: D
Question 28 · No. 1022 · Single choice
A user is trying to save some cost on the AWS services. Which of the below mentioned options will not help him save cost?
- A. Delete the unutilized EBS volumes once the instance is terminated
- B. Delete the AutoScaling launch configuration after the instances are terminated
- C. Release the elastic IP if not required once the instance is terminated
- D. Delete the AWS ELB after the instances are terminated
Answer: B
Explanation: AWS bills the user on as pay as you go model. AWS will charge the user once the AWS resource is allocated. Even though the user is not using the resource,
AWS will charge if it is in service or allocated. Thus, it is advised that once the user's work is completed he should:
Terminate the EC2 instance Delete the EBS volumes Release the unutilized Elastic IPs Delete ELB The AutoScaling launch configuration does not cost the user.
Thus, it will not make any difference to the cost whether it is deleted or not.
Question 29 · No. 1023 · Single choice
A user has configured ELB with Auto Scaling. The user temporarily suspended the Auto Scaling terminate process. What might the Availability Zone Rebalancing process (AZRebalance) conse-quently cause during this period?
- A. Auto Scaling will keep launching instances in all AZs until the maximum instance number is reached.
- B. AZ Rebalancing might now allow Auto Scaling to launch or terminate any instances.
- C. AZ Rebalancing might allow the number instances in an Availability Zone to remain higher than the maximum size
- D. It is not possible to suspend the terminate process while keeping the launch active.
Answer: C
Explanation: AZ Rebalancing might allow the number instances in an Availability Zone to remain higher than the maximum size
Question 30 · No. 1024 · Single choice
A user has a weighing plant. The user measures the weight of some goods every 5 minutes and sends data to AWS CloudWatch for monitoring and tracking.
Which of the below mentioned parameters is mandatory for the user to include in the request list?
- A. Value
- B. Namespace
- C. Metric Name
- D. Time zone
Answer: B
Explanation: The user needs to include the Namespace parameter in the request list to send data to AWS CloudWatch.