Free AWS SOA-C02 Practice Questions & Answers 2026 Part1

Question #1

A company needs to upload gigabytes of files every day. The company need to achieve higher throughput and upload speeds to Amazon S3.Which action should a SysOps administrator take to meet this requirement?

A. Create an Amazon CloudFront distribution with the GET HTTP method allowed and the S3 bucket as an origin

B. Create an Amazon ElastiCache cluster and enable caching for the S3 bucket

C. Set up AWS Global Accelerator and configure it with the S3 bucket

D. Enable S3 Transfer Acceleration and use the acceleration endpoint when uploading files

View answer

Correct Answer: D

Question #2

A company hosts its website on Amazon EC2 instances in the us-east-1 Region. The company is preparing to extend its website into the eu-central-1 Region, but the database must remain only in us-east-1. After deployment, the EC2 instances in eu-central-1 are unable to connect to the database in us-east-1.What is the MOST operationally efficient solution that will resolve this connectivity issue?

A. Create a VPC peering connection between the two Regions

B. Create a VPC peering connection between the two Regions

C. Create a VPN connection between the two Regions

D. Create a VPN connection between the two Regions

View answer

Correct Answer: A

Question #3

A company has a stateful web application that is hosted on Amazon EC2 instances in an Auto Scaling group. The instances run behind an Application LoadBalancer (ALB) that has a single target group. The ALB is configured as the origin in an Amazon CloudFront distribution. Users are reporting random logouts from the web application.Which combination of actions should a SysOps administrator take to resolve this problem? (Choose two.)

A. Change to the least outstanding requests algorithm on the ALB target group

B. Configure cookie forwarding in the CloudFront distribution cache behavior

C. Configure header forwarding in the CloudFront distribution cache behavior

D. Enable group-level stickiness on the ALB listener rule

E. Enable sticky sessions on the ALB target group

View answer

Correct Answer: BE

Question #4

A SysOps administrator is examining the following AWS CloudFormation template:Why will the stack creation fail?

A. The Outputs section of the CloudFormation template was omitted

B. The Parameters section of the CloudFormation template was omitted

C. The PrivateDnsName cannot be set from a CloudFormation template

D. The VPC was not specified in the CloudFormation template

View answer

Correct Answer: C

Question #5

A company uses AWS CloudFormation to deploy its infrastructure. The company recently retired an application. A cloud operations engineer initiates CloudFormation stack deletion, and the stack gets stuck in DELETE_FAILED status.A SysOps administrator discovers that the stack had deployed a security group. The security group is referenced by other security groups in the environment. The SysOps administrator needs to delete the stack without affecting other applications.Which solution will meet these requirements in the MOST operationally efficient manner?

A. reate a CloudFormation change set to delete the security group

B. reate a new security group that has a different name

C. elete the stack again

D. erform CloudFormation drift detection

View answer

Correct Answer: B

Question #6

A company has an Amazon RDS DB instance. The company wants to implement a caching service while maintaining high availability. Which combination of actions will meet these requirements? (Choose two.)

A. Add Auto Discovery to the data store

B. Create an Amazon ElastiCache for Memcached data store

C. Create an Amazon ElastiCache for Redis data store

D. Enable Multi - AZ for the data store

E. Enable Multi - threading for the data store

View answer

Correct Answer: AD

Question #7

A software development company has multiple developers who work on the same product. Each developer must have their own development environments, and these development environments must be identical. Each development environment consists of Amazon EC2 instances and an Amazon RDS DB instance. The development environments should be created only when necessary, and they must be terminated each night to minimize costs.What is the MOST operationally efficient solution that meets these requirements?

A. Provide developers with access to the same AWS CloudFormation template so that they can provision their development environment when necessary

B. Provide developers with access to the same AWS CloudFormation template so that they can provision their development environment when necessary

C. Provide developers with CLI commands so that they can provision their own development environment when necessary

D. Provide developers with CLI commands so that they can provision their own development environment when necessary

View answer

Correct Answer: B

Question #8

A SysOps administrator is attempting to deploy resources by using an AWS CloudFormation template. An Amazon EC2 instance that is defined in the template fails to launch and produces an InsufficientInstanceCapacity error.Which actions should the SysOps administrator take to resolve this error? (Choose two.)

A. Create a separate AWS CloudFormation template for the EC2 instance

B. Modify the AWS CloudFormation template to not specify an Availability Zone for the EC2 instance

C. Modify the AWS CloudFormation template to use a different EC2 instance type

D. Use a different Amazon Machine Image (AMI) for the EC2 instance

E. Use the AWS CLI's validate-template command before creating a stack from the template

View answer

Correct Answer: BC

Question #9

A company hosts its website on Amazon EC2 instances behind an Application Load Balancer. The company manages its DNS with Amazon Route 53, and wants to point its domain's zone apex to the website.Which type of record should be used to meet these requirements?

A. An AAAA record for the domain's zone apex

B. An A record for the domain's zone apex

C. A CNAME record for the domain's zone apex

D. An alias record for the domain's zone apex

View answer

Correct Answer: D

Question #10

A SysOps administrator is using AWS Systems Manager Patch Manager to patch a fleet of Amazon EC2 instances. The SysOps administrator has configured a patch baseline and a maintenance window. The SysOps administrator also has used an instance tag to identify which instances to patch.The SysOps administrator must give Systems Manager the ability to access the EC2 instances.Which additional action must the SysOps administrator perform to meet this requirement?

A. Add an inbound rule to the instances' security group

B. Attach an IAM instance profile with access to Systems Manager to the instances

C. Create a Systems Manager activation

D. Manually specify the instances to patch instead of using tag-based selection

View answer

Correct Answer: B

Question #11

A company is running a website on Amazon EC2 instances behind an Application Load Balancer (ALB). The company configured an Amazon CloudFrontdistribution and set the ALB as the origin. The company created an Amazon Route 53 CNAME record to send all traffic through the CloudFront distribution. As anunintended side effect, mobile users are now being served the desktop version of the website.Which action should a SysOps administrator take to resolve this issue?

A. Configure the CloudFront distribution behavior to forward the User-Agent header

B. Configure the CloudFront distribution origin settings

C. Enable IPv6 on the ALB

D. Enable IPv6 on the CloudFront distribution

View answer

Correct Answer: A

Question #12

A company wants to prohibit its developers from using a particular family of Amazon EC2 instances. The company uses AWS Organizations and wants to apply the restriction across multiple accounts.What is the MOST operationally efficient way for the company to apply service control policies (SCPs) to meet these requirements?

A. Add the accounts to an organizational unit (OU)

B. Add the accounts to resource groups in AWS Resource Groups

C. Apply the SCPs to each developer account

D. Enroll the accounts with AWS Control Tower

View answer

Correct Answer: A

Question #13

A SysOps administrator must create a solution that immediately notifies software developers if an AWS Lambda function experiences an error.Which solution will meet this requirement?

A. reate an Amazon Simple Notification Service (Amazon SNS) topic with an email subscription for each developer

B. reate an Amazon Simple Notification Service (Amazon SNS) topic with a mobile subscription for each developer

C. erify each developer email address in Amazon Simple Email Service (Amazon SES)

D. erify each developer mobile phone in Amazon Simple Email Service (Amazon SES)

View answer

Correct Answer: A

Question #14

A company uses an Amazon CloudFront distribution to deliver its website. Traffic logs for the website must be centrally stored, and all data must be encrypted at rest.Which solution will meet these requirements?

A. Create an Amazon OpenSearch Service (Amazon Elasticsearch Service) domain with internet access and server-side encryption that uses the default AWS managed customer master key (CMK)

B. Create an Amazon OpenSearch Service (Amazon Elasticsearch Service) domain with VPC access and server-side encryption that uses AES-256

C. Create an Amazon S3 bucket that is configured with default server-side encryption that uses AES-256

D. Create an Amazon S3 bucket that is configured with no default encryption

View answer

Correct Answer: C

Question #15

A company is running distributed computing software to manage a fleet of 20 Amazon EC2 instances for calculations. The fleet includes 2 control nodes and 18 task nodes to run the calculations. Control nodes can automatically start the task nodes.Currently, all the nodes run on demand. The control nodes must be available 24 hours a day, 7 days a week. The task nodes run for 4 hours each day. A SysOps administrator needs to optimize the cost of this solution.Which combination of actions will meet these requirements? (Choose two.)

A. Purchase EC2 Instance Savings Plans for the control nodes

B. Use Dedicated Hosts for the control nodes

C. Use Reserved Instances for the task nodes

D. Use Spot Instances for the control nodes

E. Use Spot Instances for the task nodes

View answer

Correct Answer: AE

Question #16

A SysOps administrator is using AWS CloudFormation StackSets to create AWS resources in two AWS Regions in the same AWS account. A stack operation fails in one Region and returns the stack instance status of OUTDATED.What is the cause of this failure?

A. The CloudFormation template changed on the local disk and has not been submitted to CloudFormation

B. The CloudFormation template is trying to create a global resource that is not unique

C. The stack has not yet been deployed to the Region

D. The SysOps administrator is using an old version of the CloudFormation API

View answer

Correct Answer: B

Question #17

A SysOps administrator must configure Amazon S3 to host a simple nonproduction webpage. The SysOps administrator has created an empty S3 bucket from theAWS Management Console. The S3 bucket has the default configuration in place.Which combination of actions should the SysOps administrator take to complete this process? (Choose two.)

A. Configure the S3 bucket by using the "Redirect requests for an object" functionality to point to the bucket root URL

B. Turn off the "Block all public access" setting

C. Turn off the "Block all public access" setting

D. Turn off the "Block all public access" setting

E. Create an index

View answer

Correct Answer: DE

Question #18

A SysOps administrator is attempting to deploy resources by using an AWS CloudFormation template. An Amazon EC2 instance that is defined in the template fails to launch and produces an InsufficientInstanceCapacity error.Which actions should the SysOps administrator take to resolve this error? (Choose two.)

A. reate a separate AWS CloudFormation template for the EC2 instance

B. odify the AWS CloudFormation template to not specify an Availability Zone for the EC2 instance

C. odify the AWS CloudFormation template to use a different EC2 instance type

D. se a different Amazon Machine Image (AMI) for the EC2 instance

E. se the AWS CLI's validate-template command before creating a stack from the template

View answer

Correct Answer: BC

Question #19

A SysOps administrator is deploying an application on 10 Amazon EC2 instances. The application must be highly available. The instances must be placed on distinct underlying hardware.What should the SysOps administrator do to meet these requirements?

A. Launch the instances into a cluster placement group in a single AWS Region

B. Launch the instances into a partition placement group in multiple AWS Regions

C. Launch the instances into a spread placement group in multiple AWS Regions

D. Launch the instances into a spread placement group in a single AWS Region

View answer

Correct Answer: D

Question #20

A SysOps administrator is investigating issues on an Amazon RDS for MariaDB DB instance. The SysOps administrator wants to display the database load categorized by detailed wait events.How can the SysOps administrator accomplish this goal?

A. Create an Amazon CloudWatch dashboard

B. Enable Amazon RDS Performance Insights

C. Enable and configure Enhanced Monitoring

D. Review the database logs in Amazon CloudWatch Logs

View answer

Correct Answer: B

Question #21

A company hosts a website on multiple Amazon EC2 instances that run in an Auto Scaling group. Users are reporting slow responses during peak times between6 PM and 11 PM every weekend. A SysOps administrator must implement a solution to improve performance during these peak times.What is the MOST operationally efficient solution that meets these requirements?

A. Create a scheduled Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function to increase the desired capacity before peak times

B. Configure a scheduled scaling action with a recurrence option to change the desired capacity before and after peak times

C. Create a target tracking scaling policy to add more instances when memory utilization is above 70%

D. Configure the cooldown period for the Auto Scaling group to modify desired capacity before and after peak times

View answer

Correct Answer: B

Question #22

A company is expanding its fleet of Amazon EC2 instances before an expected increase of traffic. When a SysOps administrator attempts to add more instances, an InstanceLimitExceeded error is returned.What should the SysOps administrator do to resolve this error?

A. Add an additional CIDR block to the VPC

B. Launch the EC2 instances in a different Availability Zone

C. Launch new EC2 instances in another VP

D. Use Service Quotas to request an EC2 quota increase

View answer

Correct Answer: D

Question #23

A SysOps administrator is troubleshooting an AWS CloudFormation template whereby multiple Amazon EC2 instances are being created. The template is working in us-east-1, but it is failing in us-west-2 with the error code:AMI [ami-12345678] does not existHow should the Administrator ensure that the AWS CloudFormation template is working in every region?

A. Copy the source region's Amazon Machine Image (AMI) to the destination region and assign it the same ID

B. Edit the AWS CloudFormation template to specify the region code as part of the fully qualified AMI ID

C. Edit the AWS CloudFormation template to offer a drop-down list of all AMIs to the user by using the AWS::EC2::AMI::ImageID control

D. Modify the AWS CloudFormation template by including the AMI IDs in the ג€Mappingsג€ section

View answer

Correct Answer: D

Question #24

A company hosts its website on Amazon EC2 instances behind an Application Load Balancer. The company manages its DNS with Amazon Route 53, and wantsto point its domain's zone apex to the website.Which type of record should be used to meet these requirements?

A. An AAAA record for the domainג€™s zone apex

B. An A record for the domainג€™s zone apex

C. A CNAME record for the domainג€™s zone apex

D. An alias record for the domainג€™s zone apex

View answer

Correct Answer: D

Question #25

An Amazon EC2 instance is running an application that uses Amazon Simple Queue Service (Amazon SQS) queues.A SysOps administrator must ensure that the application can read, write, and delete messages from the SQS queues.Which solution will meet these requirements in the MOST secure manner?

A. reate and associate an IAM role that allows EC2 instances to call AWS services

B. reate and associate an IAM role that allows EC2 instances to call AWS services

C. reate an IAM user with an IAM policy that allows the sqs:SendMessage permission, the sqs:ReceiveMessage permission, and the sqs:DeleteMessage permission to the appropriate queues

D. reate an IAM user with an IAM policy that allows the sqs:SendMessage permission, the sqs:ReceiveMessage permission, and the sqs:DeleteMessage permission to the appropriate queues

View answer

Correct Answer: A

Question #26

A company has a stateful, long-running workload on a single xlarge general purpose Amazon EC2 On-Demand Instance Metrics show that the service is always using 80% of its available memory and 40% of its available CPU. A SysOps administrator must reduce the cost of the service without negatively affecting performance.Which change in instance type will meet these requirements?

A. Change to one large compute optimized On-Demand Instance

B. Change to one large memory optimized On-Demand Instance

C. Change to one xlarge general purpose Spot Instance

D. Change to two large general purpose On-Demand Instances

View answer

Correct Answer: B

Question #27

A SysOps administrator is deploying an application on 10 Amazon EC2 instances. The application must be highly available. The instances must be placed ondistinct underlying hardware.What should the SysOps administrator do to meet these requirements?

A. Launch the instances into a cluster placement group in a single AWS Region

B. Launch the instances into a partition placement group in multiple AWS Regions

C. Launch the instances into a spread placement group in multiple AWS Regions

D. Launch the instances into a spread placement group in a single AWS Region

View answer

Correct Answer: D

Question #28

A user working in the Amazon EC2 console increased the size of an Amazon Elastic Block Store (Amazon EBS) volume attached to an Amazon EC2 Windows instance. The change is not reflected in the file system.What should a SysOps administrator do to resolve this issue?

A. Extend the file system with operating system-level tools to use the new storage capacity

B. Reattach the EBS volume to the EC2 instance

C. Reboot the EC2 instance that is attached to the EBS volume

D. Take a snapshot of the EBS volume

View answer

Correct Answer: A

Question #29

A SysOps administrator has enabled AWS CloudTrail in an AWS account. If CloudTrail is disabled, it must be re-enabled immediately.What should the SysOps administrator do to meet these requirements WITHOUT writing custom code?

A. Add the AWS account to AWS Organizations

B. Create an AWS Config rule that is invoked when CloudTrail configuration changes

C. Create an AWS Config rule that is invoked when CloudTrail configuration changes

D. Create an Amazon EventBridge (Amazon CloudWatch Event) hourly rule with a schedule pattern to run an AWS Systems Manager Automation document to enable CloudTrail

View answer

Correct Answer: B

Question #30

A SysOps administrator has created an AWS Service Catalog portfolio and has shared the portfolio with a second AWS account in the company. The second account is controlled by a different administrator.Which action will the administrator of the second account be able to perform?

A. dd a product from the imported portfolio to a local portfolio

B. dd new products to the imported portfolio

C. hange the launch role for the products contained in the imported portfolio

D. ustomize the products in the imported portfolio

View answer

Correct Answer: A

Question #31

A company has an application that customers use to search for records on a website. The application's data is stored in an Amazon Aurora DB cluster. The application's usage varies by season and by day of the week.The website's popularity is increasing, and the website is experiencing slower performance because of increased load on the DB cluster during periods of peak activity. The application logs show that the performance issues occur when users are searching for information. The same search is rarely performed multiple times.A SysOps administrator must improve the performance of the platform by using a solution that maximizes resource efficiency.Which solution will meet these requirements?

A. Deploy an Amazon ElastiCache for Redis cluster in front of the DB cluster

B. Deploy an Aurora Replica for the DB cluster

C. Use Provisioned IOPS on the storage volumes that support the DB cluster to improve performance sufficiently to support the peak load on the application

D. Increase the instance size in the DB cluster to a size that is sufficient to support the peak load on the application

View answer

Correct Answer: B

Question #32

A SysOps administrator developed a Python script that uses the AWS SDK to conduct several maintenance tasks. The script needs to run automatically every night.What is the MOST operationally efficient solution that meets this requirement?

A. Convert the Python script to an AWS Lambda function

B. Convert the Python script to an AWS Lambda function

C. Deploy the Python script to an Amazon EC2 instance

D. Deploy the Python script to an Amazon EC2 instance

View answer

Correct Answer: A

Question #33

A SysOps administrator is trying to set up an Amazon Route 53 domain name to route traffic to a website hosted on Amazon S3. The domain name of the website is www.example.com and the S3 bucket name DOC-EXAMPLE-BUCKET. After the record set is set up in Route 53, the domain name www.anycompany.com does not seem to work, and the static website is not displayed in the browser.Which of the following is a cause of this?

A. The S3 bucket must be configured with Amazon CloudFront first

B. The Route 53 record set must have an IAM role that allows access to the S3 bucket

C. The Route 53 record set must be in the same region as the S3 bucket

D. The S3 bucket name must match the record set name in Route 53

View answer

Correct Answer: D

Question #34

A company stores its data in an Amazon S3 bucket. The company is required to classify the data and find any sensitive personal information in its S3 files.Which solution will meet these requirements?

A. Create an AWS Config rule to discover sensitive personal information in the S3 files and mark them as noncompliant

B. Create an S3 event-driven artificial intelligence/machine learning (AI/ML) pipeline to classify sensitive personal information by using Amazon Rekognition

C. Enable Amazon GuardDuty

D. Enable Amazon Macie

View answer

Correct Answer: D

Question #35

A SysOps administrator must create a solution that immediately notifies software developers if an AWS Lambda function experiences an error.Which solution will meet this requirement?

A. Create an Amazon Simple Notification Service (Amazon SNS) topic with an email subscription for each developer

B. Create an Amazon Simple Notification Service (Amazon SNS) topic with a mobile subscription for each developer

C. Verify each developer email address in Amazon Simple Email Service (Amazon SES)

D. Verify each developer mobile phone in Amazon Simple Email Service (Amazon SES)

View answer

Correct Answer: A

Question #36

A compliance team requires all administrator passwords for Amazon RDS DB instances to be changed at least annually.Which solution meets this requirement in the MOST operationally efficient manner?

A. Store the database credentials in AWS Secrets Manager

B. Store the database credentials as a parameter in the RDS parameter group

C. Store the database credentials in a private Amazon S3 bucket

D. Store the database credentials in AWS Systems Manager Parameter Store as a secure string parameter

View answer

Correct Answer: A

Question #37

A company runs an application on an Amazon EC2 instance. A SysOps administrator creates an Auto Scaling group and an Application Load Balancer (ALB) to handle an increase in demand. However, the EC2 instances are failing the health check.What should the SysOps administrator do to troubleshoot this issue?

A. erify that the Auto Scaling group is configured to use all AWS Regions

B. erify that the application is running on the protocol and the port that the listener is expecting

C. erify the listener priority in the ALB

D. erify the maximum number of instances in the Auto Scaling group

View answer

Correct Answer: B

Question #38

A company runs hundreds of Amazon EC2 instances in a single AWS Region. Each EC2 instance has two attached 1 GiB General Purpose SSD (gp2) Amazon Elastic Block Store (Amazon EBS) volumes. A critical workload is using all the available IOPS capacity on the EBS volumes.According to company policy, the company cannot change instance types or EBS volume types without completing lengthy acceptance tests to validate that the company's applications will function properly. A SysOps administrator needs to increase the I/O performance of the EBS volumes as quickly as possible.Which action should the SysOps administrator take to meet these requirements?

A. dd all the EC2 instances to a cluster placement group

B. urn on Transfer Acceleration on the EBS volumes in the Region

C. dd two additional elastic network interfaces on each EC2 instance

D. ncrease the size of the 1 GiB EBS volumes

View answer

Correct Answer: D

Question #39

A company's public website is hosted in an Amazon S3 bucket in the us-east-1 Region behind an Amazon CloudFront distribution. The company wants to ensure that the website is protected from DDoS attacks. A SysOps administrator needs to deploy a solution that gives the company the ability to maintain control over the rate limit at which DDoS protections are applied.Which solution will meet these requirements?

A. eploy a global-scoped AWS WAF web ACL with an allow default action

B. eploy an AWS WAF web ACL with an allow default action in us-east-1

C. eploy a global-scoped AWS WAF web ACL with a block default action

D. eploy an AWS WAF web ACL with a block default action in us-east-1

View answer

Correct Answer: A

Question #40

A company is running a serverless application on AWS Lambda. The application stores data in an Amazon RDS for MySQL DB instance. Usage has steadilyincreased, and recently there have been numerous "too many connections" errors when the Lambda function attempts to connect to the database. The companyalready has configured the database to use the maximum max_connections value that is possible.What should a SysOps administrator do to resolve these errors?

A. Create a read replica of the database

B. Use Amazon RDS Proxy to create a proxy

C. Increase the value in the max_connect_errors parameter in the parameter group that the database uses

D. Update the Lambda functionג€™s reserved concurrency to a higher value

View answer

Correct Answer: B

Question #41

A company uses AWS Organizations to manage multiple AWS accounts. Corporate policy mandates that only specific AWS Regions can be used to store and process customer data. A SysOps administrator must prevent the provisioning of Amazon EC2 instances in unauthorized Regions by anyone in the company.What is the MOST operationally efficient solution that meets these requirements?

A. onfigure AWS CloudTrail in all Regions to record all API activity

B. n each AWS account, create a managed IAM policy that uses a Region condition to deny the ec2:RunInstances action in all unauthorized Regions

C. n each AWS account, create an IAM permissions boundary policy that uses a Region condition to deny the ec2:RunInstances action in all unauthorized Regions

D. reate a service control policy (SCP) in AWS Organizations to deny the ec2:RunInstances action in all unauthorized Regions

View answer

Correct Answer: D

Question #42

A SysOps administrator is responsible for managing a company's cloud infrastructure with AWS CloudFormation. The SysOps administrator needs to create a single resource that consists of multiple AWS services. The resource must support creation and deletion through the CloudFormation console.Which CloudFormation resource type should the SysOps administrator create to meet these requirements?

A. AWS::EC2::Instance with a cfn-init helper script

B. AWS::OpsWorks::Instance

C. AWS::SSM::Document

D. Custom::MyCustomType

View answer

Correct Answer: D

Question #43

A SysOps administrator wants to protect objects in an Amazon S3 bucket from accidental overwrite and deletion. Noncurrent objects must be kept for 90 days and then must be permanently deleted. Objects must reside within the same AWS Region as the original S3 bucket.Which solution meets these requirements?

A. Create an Amazon Data Lifecycle Manager (Amazon DLM) lifecycle policy for the S3 bucket

B. Create an AWS Backup policy for the S3 bucket

C. Enable S3 Cross-Region Replication on the S3 bucket

D. Enable S3 Versioning on the S3 bucket

View answer

Correct Answer: D

Question #44

A SysOps administrator is creating two AWS CloudFormation templates. The first template will create a VPC with associated resources, such as subnets, route tables, and an internet gateway. The second template will deploy application resources within the VPC that was created by the first template. The second template should refer to the resources created by the first template. How can this be accomplished with the LEAST amount of administrative effort?

A. Add an export field to the outputs of the first template and import the values in the second template

B. Create a custom resource that queries the stack created by the first template and retrieves the required values

C. Create a mapping in the first template that is referenced by the second template

D. Input the names of resources in the first template and refer to those names in the second template as a parameter

View answer

Correct Answer: C

Question #45

A company stores files on 50 Amazon S3 buckets in the same AWS Region. The company wants to connect to the S3 buckets securely over a private connection from its Amazon EC2 instances.The company needs a solution that produces no additional cost.Which solution will meet these requirements?

A. reate an interface VPC endpoint for each S3 bucket

B. reate a gateway VPC endpoint for each S3 bucket

C. reate one gateway VPC endpoint for all the S3 buckets

D. reate one interface VPC endpoint for all the S3 buckets

View answer

Correct Answer: C

Question #46

A SysOps administrator is troubleshooting an AWS CloudFormation template whereby multiple Amazon EC2 instances are being created. The template is workingin us-east-1, but it is failing in us-west-2 with the error code:AMI [ami-12345678] does not existHow should the Administrator ensure that the AWS CloudFormation template is working in every region?

A. Copy the source regionג€™s Amazon Machine Image (AMI) to the destination region and assign it the same ID

B. Edit the AWS CloudFormation template to specify the region code as part of the fully qualified AMI ID

C. Edit the AWS CloudFormation template to offer a drop-down list of all AMIs to the user by using the AWS::EC2::AMI::ImageID control

D. Modify the AWS CloudFormation template by including the AMI IDs in the ג€Mappingsג€ section

View answer

Correct Answer: D

Question #47

A company has an application that customers use to search for records on a website. The application's data is stored in an Amazon Aurora DB cluster. The application's usage varies by season and by day of the week.The website's popularity is increasing, and the website is experiencing slower performance because of increased load on the DB cluster during periods of peak activity. The application logs show that the performance issues occur when users are searching for information. The same search is rarely performed multiple times.A SysOps administrator must improve the performance of the platform by using a solution that maximizes resource efficiency.Which solution will meet these requirements?

A. eploy an Amazon ElastiCache for Redis cluster in front of the DB cluster

B. eploy an Aurora Replica for the DB cluster

C. se Provisioned IOPS on the storage volumes that support the DB cluster to improve performance sufficiently to support the peak load on the application

D. ncrease the instance size in the DB cluster to a size that is sufficient to support the peak load on the application

View answer

Correct Answer: B

Question #48

A company must ensure that any objects uploaded to an S3 bucket are encrypted.Which of the following actions will meet this requirement? (Choose two.)

A. Implement AWS Shield to protect against unencrypted objects stored in S3 buckets

B. Implement Object access control list (ACL) to deny unencrypted objects from being uploaded to the S3 bucket

C. Implement Amazon S3 default encryption to make sure that any object being uploaded is encrypted before it is stored

D. Implement Amazon Inspector to inspect objects uploaded to the S3 bucket to make sure that they are encrypted

E. Implement S3 bucket policies to deny unencrypted objects from being uploaded to the buckets

View answer

Correct Answer: CE

Question #49

A SysOps administrator configured AWS Backup to capture snapshots from a single Amazon EC2 instance that has one Amazon Elastic Block Store (AmazonEBS) volume attached. On the first snapshot, the EBS volume has 10 GiB of data. On the second snapshot, the EBS volume still contains 10 GiB of data, but 4GiB have changed. On the third snapshot, 2 GiB of data have been added to the volume, for a total of 12 GiB.How much total storage is required to store these snapshots?

A. 12 GiB

B. 16 GiB

C. 26 GiB

D. 32 GiB

View answer

Correct Answer: B

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now

Free AWS SOA-C02 Practice Questions & Answers 2026 Part1

View The Updated SOA-C02 Exam Questions

View The Updated AWS Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE Get Now

Free AWS SOA-C02 Practice Questions & Answers 2026 Part1

View The Updated SOA-C02 Exam Questions

View The Updated AWS Exam Questions

View Answers after Submission

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now