SOA-C02 Practice Test

A SysOps administrator is deploying a test site running on Amazon EC2 instances. The application requires both incoming and outgoing connectivity to the internet. Which combination of steps are required to provide internet connectivity to the EC2 instances? (Choose two.)

A.

Add a NAT gateway to a public subnet.

B.

Attach a private address to the elastic network interface on the EC2 instance.

C.

Attach an Elastic IP address to the internet gateway.

D.

Add an entry to the route table for the subnet that points to an internet gateway.

E.

Create an internet gateway and attach it to a VPC.

A company uses AWS CloudFormation to deploy its application infrastructure Recently, a
user accidentally changed a property of a database in a CloudFormation template and
performed a stack update that caused an interruption to the application A SysOps
administrator must determine how to modify the deployment process to allow the DevOps
team to continue to deploy the infrastructure, but prevent against accidental modifications
to specific resources.
Which solution will meet these requirements?

A.

Set up an AWS Config rule to alert based on changes to any CloudFormation stack An
AWS Lambda function can then describe the stack to determine if any protected resources
were modified and cancel the operation

B.

Set up an Amazon CloudWatch Events event with a rule to trigger based on any
CloudFormation API call An AWS Lambda function can then describe the stack to
determine if any protected resources were modified and cancel the operation

C.

Launch the CloudFormation templates using a stack policy with an explicit allow for all
resources and an explicit deny of the protected resources with an action of Update

D.

Attach an IAM policy to the DevOps team role that prevents a CloudFormation stack
from updating, with a condition based on the specific Amazon Resource Names (ARNs) of
the protected resources

A SysOps administrator is evaluating Amazon Route 53 DNS options to address concerns
about high availability for an on-premises website. The website consists of two servers: a
primary active server and a secondary passive server. Route 53 should route traffic to the
primary server if the associated health check returns 2xx or 3xx HTTP codes. All other
traffic should be directed to the secondary passive server. The failover record type, set ID.
and routing policy have been set appropriately for both primary and secondary servers.
Which next step should be taken to configure Route 53?

A.

Create an A record for each server. Associate the records with the Route 53 HTTP
health check.

B.

Create an A record for each server. Associate the records with the Route 53 TCP health
check.

C.

Create an alias record for each server with evaluate target health set to yes. Associate
the records with the Route 53 HTTP health check.

D.

Create an alias record for each server with evaluate target health set to yes. Associate
the records with the Route 53 TCP health check

A company is migrating its production file server to AWS. All data that is stored on the file server must remain accessible if an Availability Zone becomes unavailable or when system maintenance is performed. Users must be able to interact with the file server through the SMB protocol. Users also must have the ability to manage file permissions by using Windows ACLs. Which solution will net these requirements?

A.

Create a single AWS Storage Gateway file gateway.

B.

Create an Amazon FSx for Windows File Server Multi-AZ file system.

C.

Deploy two AWS Storage Gateway file gateways across two Availability Zones.
Configure an Application Load Balancer in front of the file gateways.

D.

Deploy two Amazon FSx for Windows File Server Single-AZ 2 file systems. Configure Microsoft Distributed File System Replication (DFSR).

A SysOps administrator is using Amazon EC2 instances to host an application. The SysOps administrator needs to grant permissions for the application to access an Amazon DynamoDB table. Which solution will meet this requirement?

A.

Create access keys to access the DynamoDB table. Assign the access keys to the EC2
instance profile.

B.

Create an EC2 key pair to access the DynamoDB table. Assign the key pair to the EC2 instance profile.

C.

Create an IAM user to access the DynamoDB table. Assign the IAM user to the EC2 instance profile.

D.

Create an IAM role to access the DynamoDB table. Assign the IAM role to the EC2 instance profile.