Amazon Web Services SOA-C01 Exam Questions Free Practice Test

Viewing page 1 out of 8 pages

Viewing questions 1-10 out of questions

Questions # 1:

A company has a multi-tier web application. In the web tier, all the servers are in private subnets inside a VPC. The development team wants to make changes to the application that requires access to Amazon S3.

What should be done to accomplish this?

Options:

Create a customer gateway to connect to Amazon S3 Modify the route table of the private subnets to use the customer gateway

Create a gateway VPC endpoint for Amazon S3 Modify the route table of the private subnets to use the gateway VPC endpoint.

Create a NAT gateway in the private subnets. Modify the route table of the subnets to use the NAT gateway.

Create an S3 bucket policy to allow connections from the private subnets. Modify the route table.

Expert Solution

Questions # 2:

A sysops administrator created an AWS Lambda function within a VPC with no access to the internet. The Lambda function pulls messages from an Amazon SOS queue and stores them in an Amazon RDS instance in the same VPC. After executing the Lambda function, the data is not showing up on the RDS instance.

Which of the following are possible causes for this? (Select TWO.)

Options:

A VPC endpoint has not been created for Amazon RDS.

A VPC endpoint has not been created for Amazon SQS.

The RDS security group is not allowing connections from the Lambda function.

The subnet associated with the Lambda function does not have an internet gateway attached

The subnet associated with the Lambda function has a NAT gateway

Expert Solution

Questions # 3:

An application resides on multiple EC2 instances in public subnets in two Availability Zones. To improve security, the Information Security team has deployed an Application Load Balancer (ALB) in separate subnets and pointed the DNS at the ALB instead of the EC2 instances.

After the change, traffic is not reaching the instances, and an error is being returned from the ALB.

What steps must a SysOps Administrator take to resolve this issue and improve the security of the application? (Select TWO.)

Options:

Add the EC2 instances to the ALB target group, configure the health check, and ensure that the instances report healthy.

Add the EC2 instances to an Auto Scaling group, configure the health check to ensure that the instances report healthy, and remove the public IPs from the instances.

Create a new subnet in which EC2 instances and ALB will reside to ensure that they can communicate, and remove the public IPs from the instances.

Change the security group for the EC2 instances to allow access from only the ALB security group, and remove the public IPs from the instances.

Change the security group to allow access from 0.0.0.0/0, which permits access from the ALB.

Expert Solution

Questions # 4:

A company needs to deploy a web application on two Amazon EC2 instances behind an Application Load Balancer (ALB). Two EC2 instances will also be deployed to host the database. The infrastructure needs to be designed across Availability Zones for high availability and must limit public access to the instances as much as possible.

How should this be achieved within a VPC?

Options:

Create one public subnet for the Application Load Balancer, one public subnet for the servers, and private subnet for the database servers.

Create one public subnets for the Application Load Balancer, two private subnets for the web servers, and two private subnets for the database servers.

Create two public subnets for the Application Load Balancer, two public subnets for the web servers, and two public subnets for the database servers.

Expert Solution

Questions # 5:

A sysops administrator is creating two AWS Cloud Formation templates The first template will create a VPC with associated resources, such as subnets, route tables, and an internet gateway The second template will deploy application resources within the VPC that was created by the first template The second template should refer to the resources created by the first template

How can this be accomplished with the LEAST amount of administrative effort?

Options:

Add an export field to the outputs of the first template and import the values in the second template

Create a custom resource that queries the stack created by the first template and retrieves the required values.

Create a mapping in the first template that is referenced by the second template

Input the names of resources in the first template and refer to those names in the second template as a parameter

Expert Solution

Questions # 6:

A company has several accounts between different teams and wants to increase its auditing and compliance capabilities The accounts are managed through AWS Organizations. Management wants to provide the security team with secure access to the account logs while also restricting the possibility for the logs to be modified.

How can a sysops administrator achieve this is with the LEAST amount of operational overhead?

Options:

Store AWS CloudTrail logs in Amazon S3 in each account Create a new account to store compliance data and replicate the objects into the newly created account

Store AWS CloudTrail logs in Amazon S3 in each account. Create an 1AM user with read-only access to the CloudTrail logs

From the master account create an organization trail using AWS CloudTrail and apply it to all Regions Use 1AM roles to restrict access.

Use an AWS CloudFormation stack set to create an AWS CloudTrail trail in every account and restrict permissions to modify the logs

Expert Solution

Questions # 7:

A company’s website went down for several hours. The root cause was a full disk on one of the company’s Amazon EC2 instances.

Which steps should the SysOps Administrator take to prevent this from happening in this future?

Options:

Configure Amazon CloudWatch Events to filter and forward AWS Health events for disk space utilization to an Amazon SNS topic to notify the Administrator.

Create an AWS Lambda function to describe the volume status for each EC2 instance. Post a notification to an Amazon SNS topic when a volume status is impaired.

Enable detailed monitoring for the EC2 instances. Create an Amazon CloudWatch alarm to notify the

Administrator when disk space is running low.

Use the Amazon CloudWatch agent on the EC2 instances to collect disk metrics. Create a CloudWatch alarm to notify the Administrator when disk space is running low.

Expert Solution

Questions # 8:

A SysOps administrator is evaluating Amazon Route 53 DNS options to address concerns about high availability tor an on-premises website. The website consists of two servers: a primary active server and a secondary passive server. Route 53 should route traffic to the primary server if the associated health check returns 2xx or 3xx HTTP codes. AH other traffic should be directed to the secondary passive server. The failover record type, set ID, and routing policy have been set appropriately for both primary and secondary servers.

Which next step should be taken to configure Route 53?

Options:

Create an A record for each server. Associate the records with the Route 53 HTTP health check.

Create an A record for each server. Associate the records with the Route 53 TCP health check.

Create an alias record for each server with evaluate target health set to yes. Associate the records with the Route 53 HTTP health check.

Create an alias record for each server with evaluate target health set to yes. Associate the records with the Route 53 TCP health check.

Expert Solution

Questions # 9:

A company has deployed a NAT instance to allow web servers to obtain software updates from the internet. There latency on the NAT instance as the network grows. A SysOps Administrator needs to reduce latency on the instance in a manner that a efficient, cost effective, and allow for scaling with future demand.

Which action should be taken to accomplish this?

Options:

Add a second NAT instance and place both instance behind a load balancer.

Convert the NAT instance to a larger instance size.

Replace the NAT instance with NAT gateway.

Replace the NAT instance with a virtual private gateway.

Expert Solution

Questions # 10:

A SysOps Administrator manages an Amazon RDS MySQL DB instance in production. The database is accessed by several applications. The Administrator needs to ensure minimal downtime of the applications in the event the database suffers a failure. This change must not impact customer use during regular business hours.

Which action will make the database MORE highly available?

Options:

Contact AWS Support to pre-warm the database to ensure that it can handle any unexpected spikes in traffic

Create a new Multi-AZ RDS DB instance. Migrate the data to the new DB instance and delete the old one

Create a read replica from the existing database outside of business hours

Modify the DB instance to outside of business hours be a Multi-AZ deployment

Expert Solution

Viewing page 1 out of 8 pages

Viewing questions 1-10 out of questions

Pass the Amazon Web Services AWS Certified Associate SOA-C01 Questions and answers with CertsForce