Latest SOA-C02 Exam Questions

A company has a mobile app that uses Amazon S3 to store images The images are
popular for a week, and then the number of access requests decreases over time The
images must be highly available and must be immediately accessible upon request A
SysOps administrator must reduce S3 storage costs for the company Which solution will
meet these requirements MOST cost-effectively?

A SysOps administrator noticed that a large number of Elastic IP addresses are being
created on the company's AWS account, but they are not being associated with Amazon
EC2 instances, and are incurring Elastic IP address charges in the monthly bill.
How can the administrator identify who is creating the Elastic IP addresses?

An errant process is known to use an entire processor and run at 100%. A SysOps administrator wants to automate restarting the instance once the problem occurs for more than 2 minutes. How can this be accomplished?

A SysOps administrator is notified that an Amazon EC2 instance has stopped responding
The AWS Management Console indicates that the system status checks are failing What
should the administrator do first to resolve this issue?

A company has a VPC with public and private subnets. An Amazon EC2 based application
resides in the private subnets and needs to process raw .csv files stored in an Amazon S3
bucket. A SysOps administrator has set up the correct IAM role with the required
permissions for the application to access the S3 bucket, but the application is unable to
communicate with the S3 bucket.
Which action will solve this problem while adhering to least privilege access?

A company migrated an I/O intensive application to an Amazon EC2 general purpose
instance. The EC2 instance has a single General Purpose SSD Amazon Elastic Block
Store (Amazon EBS) volume attached.
Application users report that certain actions that require intensive reading and writing to the
disk are taking much longer than normal or are failing completely. After reviewing the
performance metrics of the EBS volume, a SysOps administrator notices that the
VolumeQueueLength metric is consistently high during the same times in which the users
are reporting issues. The SysOps administrator needs to resolve this problem to restore full
performance to the application.
Which action will meet these requirements?

A company has deployed AWS Security Hub and AWS Config in a newly implemented
organization in AWS Organizations. A SysOps administrator must implement a solution to
restrict all member accounts in the organization from deploying Amazon EC2 resources in
the ap-southeast-2 Region. The solution must be implemented from a single point and
must govern an current and future accounts. The use of root credentials also must be
restricted in member accounts.
Which AWS feature should the SysOps administrator use to meet these requirements?

A company hosts an internal application on Amazon EC2 instances. All application data
and requests route through an AWS Site-to-Site VPN connection between the on-premises
network and AWS. The company must monitor the application for changes that allow
network access outside of the corporate network. Any change that exposes the application
externally must be restricted automatically.
Which solution meets these requirements in the MOST operationally efficient manner?

The security team is concerned because the number of AWS Identity and Access
Management (IAM) policies being used in the environment is increasing. The team tasked
a SysOps administrator to report on the current number of IAM policies in use and the total
available IAM policies.
Which AWS service should the administrator use to check how current IAM policy usage
compares to current service limits?

An existing, deployed solution uses Amazon EC2 instances with Amazon EBS General
Purpose SSD volumes, an Amazon RDS PostgreSQL database, an
Amazon EFS file system, and static objects stored in an Amazon S3 bucket. The Security
team now mandates that at-rest encryption be turned on immediately for all aspects of the
application, without creating new resources and without any downtime.
To satisfy the requirements, which one of these services can the SysOps administrator
enable at-rest encryption on?