Online Access Free SOA-C02 Practice Test

A SysOps administrator is building a process for sharing Amazon RDS database snapshots between different accounts associated with different business units within the same company.
All data must be encrypted at rest.
How should the administrator implement this process?

• A.Update the key policy to grant permission to the AWS KMS encryption key used to encrypt the snapshot with all relevant accounts, then share the snapshot with those accounts.
• B.Create an Amazon EC2 instance based on the snapshot, then save the instance's Amazon EBS volume as a snapshot and share it with the other accounts. Require each account owner to create a new volume from that snapshot and encrypt it.
• C.Write a script to download the encrypted snapshot, decrypt it using the AWS KMS encryption key used to encrypt the snapshot, then create a new volume in each account.
• D.Create a new unencrypted RDS instance from the encrypted snapshot, connect to the instance using SSH/RDP. export the database contents into a file, then share this file with the other accounts.

A company has a policy that all Amazon EC2 instance logs must be published to Amazon CloudWatch Logs. A SysOps administrator is troubleshooting an EC2 instance that is running Amazon Linux 2. The EC2 instance is not publishing logs to CloudWatch Logs. The Amazon CloudWatch agent is running on the EC2 instance, and the agent configuration file is correct.
What should the SysOps administrator do to resolve the issue?

• A.Set up an Amazon Kinesis data stream that is running in the same AWS Region as the EC2 instance. Configure the CloudWatch agent on the EC2 instance to send CloudWatch events to the data stream.
• B.Configure the AWS CLI on the EC2 instance. Create a cron job that calls the PutLogEvents API operation to push the log files to CloudWatch every 5 minutes.
• C.Inspect the retention period of the CloudWatch Logs log group. Ensure that the retention period is set to a value that is greater than 1 day.
• D.Ensure that the IAM role that is attached to the EC2 instance has permissions in CloudWatch Logs for the CreateLogGroup, CreateLogStream, PutLogEvents, and DescribeLogStreams actions.

A SysOps administrator configures an Amazon S3 gateway endpoint in a VPC. The private subnets inside the VPC do not have outbound internet access. A user logs in to an Amazon EC2 instance in one of the private subnets and cannot upload a file to an Amazon S3 bucket in the same AWS Region.
Which solution will solve this problem?

• A.Update the S3 bucket policy to allow s3:PutObject access from the private subnet CIDR block.
• B.Update the EC2 security group to allow outbound traffic to 0.0.0.0/0 for port 80.
• C.Update the EC2 instance role policy to include s3:PutObject access to the target S3 bucket.
• D.Update the EC2 subnet route table to include the S3 prefix list destination routes to the S3 gateway endpoint.

A SysOps administrator has an AWS CloudFormation template that is used to deploy an encrypted Amazon Machine Image (AMI). The CloudFormation template will be used in a second account so the SysOps administrator copies the encrypted AMI to the second account. When launching the new CloudFormation stack in the second account, it fails.
Which action should the SysOps administrator take to correct the issue?

• A.Re-encrypt the destination AMI with an AWS Key Management Service (AWS KMS) key from the destination account.
• B.Update the CloudFormation template with the ID of the AMI in the destination account.
• C.Deregister the AMI in the source account.
• D.Change the AMI permissions to mark the AMI as public.

A company has an online gaming application that is experiencing increased usage. The application stores data in a single Amazon DynamoDB table. Forecasts indicate that the application will receive more than 2 million requests each second.
The load on the DynamoDB table consists mostly of read operations. The reads can have eventual consistency. A SysOps administrator must implement a solution to keep the application's response times as low as possible.
Which solution will meet these requirements?

• A.Configure the application use strongly consistent reads from the DynamoDB table.
• B.Load the data into the Amazon S3 Standard storage class. Create an accelerator in AWS Global Accelerator for the application.
• C.Create a DynamoDB Accelerator (DAX) cluster. Configure the application to use the DAX client.
• D.Create an Amazon RDS proxy. Configure the application to access DynamoDB by using the RDS proxy.