Go Back on SOA-C02 Exam
Available in 1, 3, 6 and 12 Months Free Updates Plans
PDF: $15 $60

Test Engine: $20 $80

PDF + Engine: $25 $99

SOA-C02 Practice Test


Page 8 out of 30 Pages

A company runs us Infrastructure on Amazon EC2 Instances that run In an Auto Scaling group. Recently, the company promoted faulty code to the entire EC2 fleet. This faulty code
caused the Auto Scaling group to scale the instances before any of the application logs could be retrieved. What should a SysOps administrator do to retain the application logs after instances are terminated?


A.

Configure an Auto Scaling lifecycle hook to create a snapshot of the ephemeral storage
upon termination of the instances.


B.

Create a new Amazon Machine Image (AMI) that has the Amazon CloudWatch agent installed and configured to send logs to Amazon CloudWatch Logs. Update the launch template to use the new AMI.


C.

Create a new Amazon Machine Image (AMI) that has a custom script configured to send
logs to AWS CloudTrail. Update the launch template to use the new AMI.


D.

Install the Amazon CloudWatch agent on the Amazon Machine Image (AMI) that is defined in the launch template. Configure the CloudWatch agent to back up the logs to ephemeral storage.





B.
  

Create a new Amazon Machine Image (AMI) that has the Amazon CloudWatch agent installed and configured to send logs to Amazon CloudWatch Logs. Update the launch template to use the new AMI.



A development team recently deployed a new version of a web application to production After the release, penetration testing revealed a cross-site scripting vulnerability that could expose user data Which AWS service will mitigate this issue?


A.

AWS Shield Standard


B.

AWS WAF


C.

Elastic Load Balancing


D.

Amazon Cognito





B.
  

AWS WAF



A company is running a serverless application on AWS Lambda The application stores
data in an Amazon RDS for MySQL DB instance Usage has steadily increased and
recently there have been numerous "too many connections" errors when the Lambda
function attempts to connect to the database The company already has configured the
database to use the maximum max_connections value that is possible
What should a SysOps administrator do to resolve these errors'?


A.

Create a read replica of the database Use Amazon Route 53 to create a weighted DNS record that contains both databases


B.

Use Amazon RDS Proxy to create a proxy Update the connection string in the Lambda function


C.

Increase the value in the max_connect_errors parameter in the parameter group that the database uses


D.

Update the Lambda function's reserved concurrency to a higher value





B.
  

Use Amazon RDS Proxy to create a proxy Update the connection string in the Lambda function



Explanation: https://aws.amazon.com/blogs/compute/using-amazon-rds-proxy-with-awslambda/
RDS Proxy acts as an intermediary between your application and an RDS database. RDS
Proxy establishes and manages the necessary connection pools to your database so that
your application creates fewer database connections. Your Lambda functions interact with
RDS Proxy instead of your database instance. It handles the connection pooling necessary
for scaling many simultaneous connections created by concurrent Lambda functions. This
allows your Lambda applications to reuse existing connections, rather than creating new
connections for every function invocation.
Check "Database proxy for Amazon RDS" section in the link to see how RDS proxy help
Lambda handle huge connections to RDS MySQL
https://aws.amazon.com/blogs/compute/using-amazon-rds-proxy-with-aws-lambda/

A company is running a flash sale on its website. The website is hosted on burstable
performance Amazon EC2 instances in an Auto Scaling group. The Auto Scaling group is
configured to launch instances when the CPU utilization is above 70%.
A couple of hours into the sale, users report slow load times and error messages for
refused connections. A SysOps administrator reviews Amazon CloudWatch metrics and
notices that the CPU utilization is at 20% across the entire fleet of instances.

The SysOps administrator must restore the website's functionality without making changes
to the network infrastructure.
Which solution will meet these requirements?


A.

Activate unlimited mode for the instances in the Auto Scaling group.


B.

Implement an Amazon CloudFront distribution to offload the traffic from the Auto Scaling
group.


C.

Move the website to a different AWS Region that is closer to the users.


D.

Reduce the desired size of the Auto Scaling group to artificially increase CPU average
utilization.





B.
  

Implement an Amazon CloudFront distribution to offload the traffic from the Auto Scaling
group.



Explanation: Implement an Amazon CloudFront distribution to offload the traffic from the
Auto Scaling group does not breach the requirement of no changes in the network
infrastructure. Reason is that cloudfront is a distribution that allows you to distribute content
using a worldwide network of edge locations that provide low latency and high data transfer
speeds. It plug in to existing setup, not changes to it.

An organization with a large IT department has decided to migrate to AWS With different
job functions in the IT department it is not desirable to give all users access to all AWS
resources Currently the organization handles access via LDAP group membership
What is the BEST method to allow access using current LDAP credentials?


A.

Create an AWS Directory Service Simple AD Replicate the on-premises LDAP directory to Simple AD


B.

Create a Lambda function to read LDAP groups and automate the creation of IAM users


C.

Use AWS CloudFormation to create IAM roles Deploy Direct Connect to allow access to the on-premises LDAP server


D.

Federate the LDAP directory with IAM using SAML Create different IAM roles to correspond to different LDAP groups to limit permissions





D.
  

Federate the LDAP directory with IAM using SAML Create different IAM roles to correspond to different LDAP groups to limit permissions




Page 8 out of 30 Pages
Previous