Free AWS SOA-C02 Practice Questions & Answers 2026 Part2

Question #1

A company runs an application on an Amazon EC2 instance. A SysOps administrator creates an Auto Scaling group and an Application Load Balancer (ALB) to handle an increase in demand. However, the EC2 instances are failing the health check.What should the SysOps administrator do to troubleshoot this issue?

A. Verify that the Auto Scaling group is configured to use all AWS Regions

B. Verify that the application is running on the protocol and the port that the listener is expecting

C. Verify the listener priority in the ALB

D. Verify the maximum number of instances in the Auto Scaling group

View answer

Correct Answer: B

Question #2

A global company operates out of five AWS Regions. A SysOps administrator wants to identify all the company's tagged and untagged Amazon EC2 instances.The company requires the output to display the instance ID and tags.What is the MOST operationally efficient way for the SysOps administrator to meet these requirements?

A. Create a tag-based resource group in AWS Resource Groups

B. Use AWS Trusted Advisor

C. Use Cost Explorer

D. Use Tag Editor in AWS Resource Groups

View answer

Correct Answer: D

Question #3

A new website will run on Amazon EC2 instances behind an Application Load Balancer. Amazon Route 53 will be used to manage DNS records.What type of record should be set in Route 53 to point the website's apex domain name (for example, `company.com`) to the Application Load Balancer?

A. CNAME

B. SOA

C. TXT

D. ALIAS

View answer

Correct Answer: D

Question #4

A SysOps administrator has successfully deployed a VPC with an AWS CloudFormation template. The SysOps administrator wants to deploy the same template across multiple accounts that are managed through AWS Organizations.Which solution will meet this requirement with the LEAST operational overhead?

A. Assume the OrganizationAccountAccessRole IAM role from the management account

B. Create an AWS Lambda function to assume a role in each account

C. Create an AWS Lambda function to query for a list of accounts

D. Use AWS CloudFormation StackSets from the management account to deploy the template in each of the accounts

View answer

Correct Answer: D

Question #5

A company expanded its web application to serve a worldwide audience. A SysOps administrator has implemented a multi-Region AWS deployment for all production infrastructure. The SysOps administrator must route traffic based on the location of resources.Which Amazon Route 53 routing policy should the SysOps administrator use to meet this requirement?

A. Geolocation routing policy

B. Geoproximity routing policy

C. Latency-based routing policy

D. Multivalue answer routing policy

View answer

Correct Answer: B

Question #6

A company hosts a web portal on Amazon EC2 instances. The web portal uses an Elastic Load Balancer (ELB) and Amazon Route 53 for its public DNS service.The ELB and the EC2 instances are deployed by way of a single AWS CloudFormation stack in the us-east-1 Region. The web portal must be highly available across multiple Regions.Which configuration will meet these requirements?

A. Deploy a copy of the stack in the us-west-2 Region

B. Deploy a copy of the stack in the us-west-2 Region

C. Deploy a new group of EC2 instances in the us-west-2 Region

D. Deploy a new group of EC2 instances in the us-west-2 Region

View answer

Correct Answer: B

Question #7

A company is planning to host its stateful web-based applications on AWS. A SysOps administrator is using an Auto Scaling group of Amazon EC2 instances. The web applications will run 24 hours a day, 7 days a week throughout the year. The company must be able to change the instance type within the same instance family later in the year based on the traffic and usage patterns.Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?

A. Convertible Reserved Instances

B. On-Demand Instances

C. Spot Instances

D. Standard Reserved Instances

View answer

Correct Answer: A

Question #8

A company runs an application that hosts critical data for several clients. The company uses AWS CloudTrail to track user activities on various AWS resources. To meet new security requirements, the company needs to protect the CloudTrail log files from being modified, deleted, or forged.Which solution will meet these requirement?

A. Enable CloudTrail log file integrity validation

B. Use Amazon S3 MFA Delete on the S3 bucket where the CloudTrail log files are stored

C. Use Amazon S3 Versioning to keep all versions of the CloudTrail log files

D. Use AWS Key Management Service (AWS KMS) security keys to secure the CloudTrail log files

View answer

Correct Answer: A

Question #9

A company is using an AWS KMS customer master key (CMK) with imported key material. The company references the CMK by its alias in the Java application to encrypt data. The CMK must be rotated every 6 months.What is the process to rotate the key?

A. Enable automatic key rotation for the CMK, and specify a period of 6 months

B. Create a new CMK with new imported material, and update the key alias to point to the new CMK

C. Delete the current key material, and import new material into the existing CMK

D. Import a copy of the existing key material into a new CMK as a backup, and set the rotation schedule for 6 months

View answer

Correct Answer: B

Question #10

A company must ensure that any objects uploaded to an S3 bucket are encrypted.Which of the following actions will meet this requirement? (Choose two.)

A. Implement AWS Shield to protect against unencrypted objects stored in S3 buckets

B. Implement Object access control list (ACL) to deny unencrypted objects from being uploaded to the S3 bucket

C. Implement Amazon S3 default encryption to make sure that any object being uploaded is encrypted before it is stored

D. Implement Amazon Inspector to inspect objects uploaded to the S3 bucket to make sure that they are encrypted

E. Implement S3 bucket policies to deny unencrypted objects from being uploaded to the buckets

View answer

Correct Answer: CE

Question #11

A company hosts a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The company uses Amazon Route 53 to route traffic.The company also has a static website that is configured in an Amazon S3 bucket.A SysOps administrator must use the static website as a backup to the web application. The failover to the static website must be fully automated.Which combination of actions will meet these requirements? (Choose two.)

A. Create a primary failover routing policy record

B. Create an AWS Lambda function to switch from the primary website to the secondary website when the health check fails

C. Create a primary failover routing policy record

D. Create a secondary failover routing policy record

E. Create a secondary failover routing policy record

View answer

Correct Answer: CE

Question #12

A company decides to stop non-production Amazon EC2 instances during the EC2 instances.The company's IT manager must receive notification in near real time whenever an EC2 instance that has an environment type tag value of non-production is started during the night.Which solution will meet this requirement with the MOST operational efficiency?

A. reate an Amazon EventBridge rule that includes the EC2 Instance State-change Notification event type

B. eploy an AWS Lambda function that queries the Amazon EC2 API to determine the state of each EC2 instance

C. tore the EC2 instance metadata, including the environment type, in an Amazon DynamoDB table

D. onfigure an AWS Lambda function with an SMTP client library

View answer

Correct Answer: A

Question #13

A SysOps administrator is using Amazon EC2 instances to host an application. The SysOps administrator needs to grant permissions for the application to access an Amazon DynamoDB table.Which solution will meet this requirement?

A. Create access keys to access the DynamoDB table

B. Create an EC2 key pair to access the DynamoDB table

C. Create an IAM user to access the DynamoDB table

D. Create an IAM role to access the DynamoDB table

View answer

Correct Answer: D

Question #14

A company wants to create an automated solution for all accounts managed by AWS Organizations to detect any security groups that use 0.0.0.0/0 as the source address for inbound traffic. The company also wants to automatically remediate any noncompliant security groups by restricting access to a specific CIDR block that corresponds with the company's intranet.Which set of actions should the SysOps administrator take to create a solution?

A. Create an AWS Config rule to detect noncompliant security groups

B. Create an IAM policy to deny the creation of security groups that have 0

C. Create an AWS Lambda function to inspect new and existing security groups

D. Create a service control policy (SCP) for the organizational unit (OU) to deny the creation of security groups that have the 0

View answer

Correct Answer: A

Question #15

A company is running an application on premises and wants to use AWS for data backup. All of the data must be available locally. The backup application can write only to block - based storage that is compatible with the Portable Operating System Interface (POSIX). Which backup solution will meet these requirements?

A. Configure the backup software to use Amazon S3 as the target for the data backups

B. Configure the backup software to use Amazon S3 Glacier as the target for the data backups

C. Use AWS Storage Gateway, and configure it to use gateway - cached volumes

D. Use AWS Storage Gateway, and configure it to use gateway - stored volumes

View answer

Correct Answer: D

Question #16

A SysOps administrator has created an AWS Service Catalog portfolio and has shared the portfolio with a second AWS account in the company. The second account is controlled by a different administrator.Which action will the administrator of the second account be able to perform?

A. Add a product from the imported portfolio to a local portfolio

B. Add new products to the imported portfolio

C. Change the launch role for the products contained in the imported portfolio

D. Customize the products in the imported portfolio

View answer

Correct Answer: A

Question #17

A company is partnering with an external vendor to provide data processing services. For this integration, the vendor must host the company's data in an AmazonS3 bucket in the vendor's AWS account. The vendor is allowing the company to provide an AWS Key Management Service (AWS KMS) key to encrypt the company's data. The vendor has provided an IAM role Amazon Resources Name (ARN) to the company for this integration.What should a SysOps administrator do to configure this integration?

A. Create a new KMS key

B. Create a new KMS key

C. Configure encryption using the KMS managed S3 key

D. Configure encryption using the KMS managed S3 key

View answer

Correct Answer: A

Question #18

ASysOps administrator configures an application to run on Amazon EC2 instances behind an Application Load Balancer (ALB) in a simple scaling Auto Scaling group with the default settings.The Auto Scaling group is configured to use the RequestCountPerTarget metric for scaling. The SysOps administrator notices that the RequestCountPerTarget metric exceeded the specified limit twice in 180 seconds.How will the number of EC2 instances in this Auto Scaling group be affected in this scenario?

A. he Auto Scaling group will launch one EC2 instance and will wait for the default cooldown period before launching another instance

B. he Auto Scaling group will send an alert to the ALB to rebalance the traffic and not add new EC2 instances until the load is normalized

C. he Auto Scaling group will try to distribute the traffic among all EC2 instances before launching another instance

D. he Auto Scaling group will launch an additional EC2 instance every time the RequestCountPerTarget metric exceeds the predefined limit

View answer

Correct Answer: A

Question #19

A SysOps administrator is notified that an Amazon EC2 instance has stopped responding. The AWS Management Console indicates that the system checks are failing.What should the administrator do first to resolve this issue?

A. Reboot the EC2 instance so it can be launched on a new host

B. Stop and then start the EC2 instance so that it can be launched on a new host

C. Terminate the EC2 instance and relaunch it

D. View the AWS CloudTrail log to investigate what changed on the EC2 instance

View answer

Correct Answer: B

Question #20

A company has a stateful web application that is hosted on Amazon EC2 instances in an Auto Scaling group. The instances run behind an Application LoadBalancer (ALB) that has a single target group. The ALB is configured as the origin in an Amazon CloudFront distribution. Users are reporting random logouts fromthe web application.Which combination of actions should a SysOps administrator take to resolve this problem? (Choose two.)

A. Change to the least outstanding requests algorithm on the ALB target group

B. Configure cookie forwarding in the CloudFront distribution cache behavior

C. Configure header forwarding in the CloudFront distribution cache behavior

D. Enable group-level stickiness on the ALB listener rule

E. Enable sticky sessions on the ALB target group

View answer

Correct Answer: BE

Question #21

A company plans to create many AWS accounts. Each account requires a VPC that has a unique IPv4 CIDR allocation. The company has an organization with all features enabled in AWS Organizations. The company uses Amazon VPC IP Address Manager (IPAM) and has deployed an IPAM.A SysOps administrator must automate the VPC creation process. The SysOps administrator creates an AWS CloudFormation template that contains the VPC resources. The SysOps administrator deploys the template as a stack set with the organization root as a deployment target.Which set of steps will complete the automation process?

A. reate an IPAM pool

B. onfigure trusted access for AWS Resource Access Manager (AWS RAM) and IPAM

C. reate an IPAM pool

D. onfigure trusted access for AWS Resource Access Manager (AWS RAM) and IPAM

View answer

Correct Answer: B

Question #22

A company has an infernal web application that runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 AutoScaling group in a single Availability Zone. A SysOps administrator must make the application highly available.Which action should the SysOps administrator take to meet this requirement?

A. Increase the maximum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage

B. Increase the minimum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage

C. Update the Auto Scaling group to launch new instances in a second Availability Zone in the same AWS Region

D. Update the Auto Scaling group to launch new instances in an Availability Zone in a second AWS Region

View answer

Correct Answer: C

Question #23

A company uses an AWS CloudFormation template to provision an Amazon EC2 instance and an Amazon RDS DB instance. A SysOps administrator must update the template to ensure that the DB instance is created before the EC2 instance is launched.What should the SysOps administrator do to meet this requirement?

A. Add a wait condition to the template

B. Add the DependsOn attribute to the EC2 instance resource, and provide the logical name of the RDS resource

C. Change the order of the resources in the template so that the RDS resource is listed before the EC2 instance resource

D. Create multiple templates

View answer

Correct Answer: B

Question #24

A SysOps administrator wants to protect objects in an Amazon S3 bucket from accidental overwrite and deletion. Noncurrent objects must be kept for 90 days and then must be permanently deleted. Objects must reside within the same AWS Region as the original S3 bucket.Which solution meets these requirements?

A. reate an Amazon Data Lifecycle Manager (Amazon DLM) lifecycle policy for the S3 bucket

B. reate an AWS Backup policy for the S3 bucket

C. nable S3 Cross-Region Replication on the S3 bucket

D. nable S3 Versioning on the S3 bucket

View answer

Correct Answer: D

Question #25

A company runs a retail website on multiple Amazon EC2 instances behind an Application Load Balancer (ALB). The company must secure traffic to the website over an HTTPS connection.Which combination of actions should a SysOps administrator take to meet these requirements? (Choose two.)

A. Attach the certificate to each EC2 instance

B. Attach the certificate to the AL

C. Create a private certificate in AWS Certificate Manager (ACM)

D. Create a public certificate in AWS Certificate Manager (ACM)

E. Export the certificate, and attach it to the website

View answer

Correct Answer: BD

Question #26

A company has two VPC networks named VPC A and VPC B. The VPC A CIDR block is 10.0.0.0/16 and the VPC B CIDR block is 172.31.0.0/16. The company wants to establish a VPC peering connection named pcx-12345 between both VPCs.Which rules should appear in the route table of VPC A after configuration? (Choose two.)

A. Destination: 10

B. Destination: 172

C. Destination: 10

D. Destination: 172

E. Destination: 10

View answer

Correct Answer: AD

Question #27

The security team is concerned because the number of AWS Identity and Access Management (IAM) policies being used in the environment is increasing. The team tasked a SysOps administrator to report on the current number of IAM policies in use and the total available IAM policies.Which AWS service should the administrator use to check how current IAM policy usage compares to current service limits?

A. AWS Trusted Advisor

B. Amazon Inspector

C. AWS Config

D. AWS Organizations

View answer

Correct Answer: A

Question #28

A SysOps administrator has used AWS CloudFormation to deploy a serverless application into a production VPC. The application consists of an AWS Lambda function, an Amazon DynamoDB table, and an Amazon API Gateway API. The SysOps administrator must delete the AWS CloudFormation stack without deleting the DynamoDB table.Which action should the SysOps administrator take before deleting the AWS CloudFormation stack?

A. Add a Retain deletion policy to the DynamoDB resource in the AWS CloudFormation stack

B. Add a Snapshot deletion policy to the DynamoDB resource in the AWS CloudFormation stack

C. Enable termination protection on the AWS CloudFormation stack

D. Update the application's IAM policy with a Deny statement for the dynamodb:DeleteTable action

View answer

Correct Answer: A

Question #29

A company analyzes sales data for its customers. Customers upload files to one of the company's Amazon S3 buckets, and a message is posted to an AmazonSimple Queue Service (Amazon SQS) queue that contains the object Amazon Resource Name (ARN). An application that runs on an Amazon EC2 instance polls the queue and processes the messages. The processing time depends on the size of the file.Customers are reporting delays in the processing of their files. A SysOps administrator decides to configure Amazon EC2 Auto Scaling as the first step. TheSysOps administrator creates an Amazon Machine Image (AMI) that is based on the existing EC2 instance. The SysOps administrator also creates a launch template that references the AMI.How should the SysOps administrator configure the Auto Scaling policy to improve the response time?

A. Add several different instance sizes in the launch template

B. Create an Auto Scaling policy based on the ApproximateNumberOfMessagesDelayed metric to scale the number of instances based on the number of messages in the queue that have been delayed

C. Create a custom metric based on the ASGAverageCPUUtilization metric and the GroupPendingInstances metric from the Auto Scaling group

D. Create a custom metric based on the ApproximateNumberOfMessagesVisible metric and the number of instances in the InService state in the Auto Scaling group

View answer

Correct Answer: D

Question #30

While setting up an AWS managed VPN connection, a SysOps administrator creates a customer gateway resource in AWS. The customer gateway device resides in a data center with a NAT gateway in front of it.What address should be used to create the customer gateway resource?

A. The private IP address of the customer gateway device

B. The MAC address of the NAT device in front of the customer gateway device

C. The public IP address of the customer gateway device

D. The public IP address of the NAT device in front of the customer gateway device

View answer

Correct Answer: D

Question #31

A company is planning to host an application on a set of Amazon EC2 instances that are distributed across multiple Availability Zones. The application must be able to scale to millions of requests each second.A SysOps administrator must design a solution to distribute the traffic to the EC2 instances. The solution must be optimized to handle sudden and volatile traffic patterns while using a single static IP address for each Availability Zone.Which solution will meet these requirements?

A. Amazon Simple Queue Service (Amazon SQS) queue

B. Application Load Balancer

C. AWS Global Accelerator

D. Network Load Balancer

View answer

Correct Answer: D

Question #32

A new application runs on Amazon EC2 instances and accesses data in an Amazon RDS database instance. When fully deployed in production, the application fails. The database can be queried from a console on a bastion host. When looking at the web server logs, the following error is repeated multiple times:*** Error Establishing a Database ConnectionWhich of the following may be causes of the connectivity problems? (Choose two.)

A. The security group for the database does not have the appropriate egress rule from the database to the web server

B. The certificate used by the web server is not trusted by the RDS instance

C. The security group for the database does not have the appropriate ingress rule from the web server to the database

D. The port used by the application developer does not match the port specified in the RDS configuration

E. The database is still being created and is not available for connectivity

View answer

Correct Answer: CD

Question #33

A company is using an Amazon Aurora MySQL DB cluster that has point-in-time recovery, backtracking, and automatic backup enabled. A SysOps administrator needs to be able to roll back the DB cluster to a specific recovery point within the previous 72 hours. Restores must be completed in the same production DB cluster.Which solution will meet these requirements?

A. Create an Aurora Replica

B. Create an AWS Lambda function to restore an automatic backup to the existing DB cluster

C. Use backtracking to rewind the existing DB cluster to the desired recovery point

D. Use point-in-time recovery to restore the existing DB cluster to the desired recovery point

View answer

Correct Answer: C

Question #34

A company asks a SysOps administrator to ensure that AWS CloudTrail files are not tampered with after they are created. Currently, the company uses AWSIdentity and Access Management (IAM) to restrict access to specific trails. The company's security team needs the ability to trace the integrity of each file.What is the MOST operationally efficient solution that meets these requirements?

A. Create an Amazon EventBridge (Amazon CloudWatch Events) rule that invokes an AWS Lambda function when a new file is delivered

B. Create an AWS Lambda function that is invoked each time a new file is delivered to the CloudTrail bucket

C. Enable the CloudTrail file integrity feature on an Amazon S3 bucket

D. Enable the CloudTrail file integrity feature on the trail

View answer

Correct Answer: D

Question #35

A company asks a SysOps administrator to ensure that AWS CloudTrail files are not tampered with after they are created. Currently, the company uses AWS Identity and Access Management (IAM) to restrict access to specific trails. The company's security team needs the ability to trace the integrity of each file. What is the MOST operationally efficient solution that meets these requirements?

A. Create an Amazon EventBridge (Amazon CloudWatch Events) rule that invokes an AWS Lambda function when a new file is delivered

B. Create an AWS Lambda function that is invoked each time a new file is delivered to the CloudTrail bucket

C. Enable the CloudTrail file integrity feature on an Amazon S3 bucket

D. Enable the CloudTrail file integrity feature on the trail

View answer

Correct Answer: C

Question #36

A SysOps administrator has enabled AWS CloudTrail in an AWS account. If CloudTrail is disabled, it must be re-enabled immediately.What should the SysOps administrator do to meet these requirements WITHOUT writing custom code?

A. Add the AWS account to AWS Organizations

B. Create an AWS Config rule that is invoked when CloudTrail configuration changes

C. Create an AWS Config rule that is invoked when CloudTrail configuration changes

D. Create an Amazon EventBridge (Amazon CloudWatch Event) hourly rule with a schedule pattern to run an AWS Systems Manager Automation document to enable CloudTrail

View answer

Correct Answer: B

Question #37

When the AWS Cloud infrastructure experiences an event that may impact an organization, which AWS service can be used to see which of the organization's resources are affected?

A. AWS Service Health Dashboard

B. AWS Trusted Advisor

C. AWS Personal Health Dashboard

D. AWS Systems Manager

View answer

Correct Answer: C

Question #38

A company requires that all activity in its AWS account be logged using AWS CloudTrail. Additionally, a SysOps administrator must know when CloudTrail log files are modified or deleted.How should the SysOps administrator meet these requirements?

A. Enable log file integrity validation

B. Enable log file integrity validation

C. Use CloudTrail Insights to monitor the log files for modifications

D. Use Amazon CloudWatch Logs to monitor the log files for modifications

View answer

Correct Answer: A

Question #39

A team is managing an AWS account that is a member of an organization in AWS Organizations. The organization has consolidated billing features enabled. The account hosts several applications.A SysOps administrator has applied tags to resources within the account to reflect the environment. The team needs a report of the breakdown of charges by environment.What should the SysOps administrator do to meet this requirement?

A. Filter, map, and categorize resource groups in Tag Editor

B. Ensure that the organization's service control policies (SCPs) allow access to cost allocation tags

C. Ensure that the IAM credentials that are used to access Cost Explorer have permissions to group cost by tags

D. Activate the tag keys for cost allocation on the organization's management account

View answer

Correct Answer: D

Question #40

A company runs a multi-tier web application with two Amazon EC2 instances in one Availability Zone in the us-east-1 Region. A SysOps administrator must migrate one of the EC2 instances to a new Availability Zone.Which solution will accomplish this?

A. Copy the EC2 instance to a different Availability Zone

B. Create an Amazon Machine Image (AMI) from the EC2 instance and launch it in a different Availability Zone

C. Move the EC2 instance to a different Availability Zone using the AWS CLI

D. Stop the EC2 instance, modify the Availability Zone, and start the instance

View answer

Correct Answer: B

Question #41

A company has deployed a web application in a VPC that has subnets in three Availability Zones. The company launches three Amazon EC2 instances from an EC2 Auto Scaling group behind an Application Load Balancer (ALB). A SysOps administrator notices that two of the EC2 instances are in the same Availability Zone, rather than being distributed evenly across all three Availability Zones. There are no errors in the Auto Scaling group's activity history. What is the MOST likely reason for the unexpected placement of EC2 instances?

A. One Availability Zone did not have sufficient capacity for the requested EC2 instance type

B. The ALB was configured for only two Availability Zones

C. The Auto Scaling group was configured for only two Availability Zones

D. Amazon EC2 Auto Scaling randomly placed the instances in Availability Zones

View answer

Correct Answer: B

Question #42

A SysOps administrator is responsible for managing a fleet of Amazon EC2 instances. These EC2 instances upload build artifacts to a third-party service. The third-party service recently implemented a strict IP allow list that requires all build uploads to come from a single IP address.What change should the systems administrator make to the existing build fleet to comply with this new requirement?

A. Move all of the EC2 instances behind a NAT gateway and provide the gateway IP address to the service

B. Move all of the EC2 instances behind an internet gateway and provide the gateway IP address to the service

C. Move all of the EC2 instances into a single Availability Zone and provide the Availability Zone IP address to the service

D. Move all of the EC2 instances to a peered VPC and provide the VPC IP address to the service

View answer

Correct Answer: A

Question #43

A SysOps administrator must manage the security of an AWS account. Recently, an IAM user's access key was mistakenly uploaded to a public code repository.The SysOps administrator must identify anything that was changed by using this access key.How should the SysOps administrator meet these requirements?

A. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to send all IAM events to an AWS Lambda function for analysis

B. Query Amazon EC2 logs by using Amazon CloudWatch Logs Insights for all events initiated with the compromised access key within the suspected timeframe

C. Search AWS CloudTrail event history for all events initiated with the compromised access key within the suspected timeframe

D. Search VPC Flow Logs for all events initiated with the compromised access key within the suspected timeframe

View answer

Correct Answer: C

Question #44

A SysOps administrator wants to upload a file that is 1 TB in size from on-premises to an Amazon S3 bucket using multipart uploads.What should the SysOps administrator do to meet this requirement?

A. Upload the file using the S3 console

B. Use the s3api copy-object command

C. Use the s3api put-object command

D. Use the s3 cp command

View answer

Correct Answer: D

Question #45

An application is running on an Amazon EC2 instance in a VPC with the default DHCP option set. The application connects to an on-premises Microsoft SQLServer database with the DNS name mssql.example.com. The application is unable to resolve the database DNS name.Which solution will fix this problem?

A. Create an Amazon Route 53 Resolver inbound endpoint

B. Create an Amazon Route 53 Resolver inbound endpoint

C. Create an Amazon Route 53 Resolver outbound endpoint

D. Create an Amazon Route 53 Resolver outbound endpoint

View answer

Correct Answer: C

Question #46

A company's public website is hosted in an Amazon S3 bucket in the us-east-1 Region behind an Amazon CloudFront distribution. The company wants to ensure that the website is protected from DDoS attacks. A SysOps administrator needs to deploy a solution that gives the company the ability to maintain control over the rate limit at which DDoS protections are applied.Which solution will meet these requirements?

A. Deploy a global-scoped AWS WAF web ACL with an allow default action

B. Deploy an AWS WAF web ACL with an allow default action in us-east-1

C. Deploy a global-scoped AWS WAF web ACL with a block default action

D. Deploy an AWS WAF web ACL with a block default action in us-east-1

View answer

Correct Answer: A

Question #47

A SysOps administrator is responsible for a large fleet of Amazon EC2 instances and must know whether any instances will be affected by upcoming hardware maintenance.Which option would provide this information with the LEAST administrative overhead?

A. Deploy a third-party monitoring solution to provide real-time EC2 instance monitoring

B. List any instances with failed system status checks using the AWS Management Console

C. Monitor AWS CloudTrail for StopInstances API calls

D. Review the AWS Personal Health Dashboard

View answer

Correct Answer: D

Question #48

A company has internal hybrid applications that have resources in the AWS Cloud and on premises. Users report that the applications sometimes are not available. The company has configured an Amazon CloudWatch alarm to monitor the tunnel status of its AWS Site-to-Site VPN connection.A SysOps administrator must implement a solution that creates a high-priority ticket in an internal ticketing tool when the VPN tunnel is down.Which solution will meet this requirement?

A. reate an Amazon Simple Notification Service (Amazon SNS) topic for the CloudWatch alarm

B. reate an Amazon EventBridge rule that monitors the VPN tunnel directly

C. reate an AWS Lambda function

D. reate an Amazon Simple Queue Service (Amazon SQS) queue as the target for the CloudWatch alarm

View answer

Correct Answer: A

Question #49

Users of a company's internal web application recently experienced application performance issues for a brief period. The application includes frontend web servers that run in an Amazon Elastic Kubernetes Service (Amazon EKS) cluster. The application also includes a backend Amazon Aurora PostgreSQL DB cluster that includes one DB instance.A SysOps administrator determines that the source of the performance issues was high utilization of the DB cluster. The single writer instance experienced more than 90% utilization for 11 minutes. The cause of the high utilization was an automated report that is scheduled to run one time each week.What should the SysOps administrator do to ensure that users do not experience performance issues each week when the report runs?

A. dd another writer instance

B. ncrease the size of the DB instance

C. dd a reader instance

D. onfigure auto scaling for the DB cluster

View answer

Correct Answer: B

Question #50

A SysOps administrator migrates NAT instances to NAT gateways. After the migration, an application that is hosted on Amazon EC2 instances in a private subnet cannot access the internet.Which of the following are possible reasons for this problem? (Choose two.)

A. The application is using a protocol that the NAT gateway does not support

B. The NAT gateway is not in a security group

C. The NAT gateway is in an unsupported Availability Zone

D. The NAT gateway is not in the Available state

E. The port forwarding settings do not allow access to internal services from the internet

View answer

Correct Answer: AD

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now

Free AWS SOA-C02 Practice Questions & Answers 2026 Part2

View The Updated SOA-C02 Exam Questions

View The Updated AWS Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE Get Now

Free AWS SOA-C02 Practice Questions & Answers 2026 Part2

View The Updated SOA-C02 Exam Questions

View The Updated AWS Exam Questions

View Answers after Submission

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now