DON'T WANT TO MISS A THING?

Certification Exam Passing Tips

Latest exam news and discount info

Curated and up-to-date by our experts

Yes, send me the newsletter

Free AWS SOA-C02 Practice Questions & Answers 2026 Part3

Are you preparing for the AWS SOA-C02 certification exam? SPOTO offers the AWS SOA-C02 Premium File; all questions are aligned with the latest exam content and come with expert-provided answers. Our question banks cover the latest question types, core concepts, and detailed explanations, helping you familiarize yourself with the exam format and difficulty level. Whether you are reviewing core concepts or simulating a real exam environment, these resources will rapidly boost your confidence and readiness.
For over two decades, SPOTO has successfully helped numerous IT professionals secure their ideal positions at Fortune 500 companies. Download now to start practicing efficiently and ensure a high score on the actual exam. Don't miss this opportunity to pass your certification exam with ease!
Take other online exams
Question #1
A SysOps administrator maintains the security and compliance of a company's AWS account. To ensure the company's Amazon EC2 instances are following company policy, a SysOps administrator wants to terminate any EC2 instance that do not contain a department tag. Noncompliant resources must be terminated in near-real time.Which solution will meet these requirements?
A. Create an AWS Config rule with the required-tags managed rule to identify noncompliant resources
B. Create a new Amazon EventBridge (Amazon CloudWatch Events) rule to monitor when new EC2 instances are created
C. Ensure all users who can create EC2 instances also have the permissions to use the ec2:CreateTags and ec2:DescribeTags actions
D. Ensure AWS Systems Manager Compliance is configured to manage the EC2 instances
View answer
Correct Answer: A

View The Updated SOA-C02 Exam Questions

SPOTO Provides 100% Real SOA-C02 Exam Questions for You to Pass Your SOA-C02 Exam!

Contact Us Get SOA-C02 Practice Test
Question #2
A company uses an AWS Service Catalog portfolio to create and manage resources. A SysOps administrator must create a replica of the company's existing AWS infrastructure in a new AWS account.What is the MOST operationally efficient way to meet this requirement?
A. Create an AWS CloudFormation template to use the AWS Service Catalog portfolio in the new AWS account
B. In the new AWS account, manually create an AWS Service Catalog portfolio that duplicates the original portfolio
C. Run an AWS Lambda function to create a new AWS Service Catalog portfolio based on the output of the DescribePortfolio API operation
D. Share the AWS Service Catalog portfolio with the new AWS account
View answer
Correct Answer: D
Question #3
A SysOps administrator developed a Python script that uses the AWS SDK to conduct several maintenance tasks. The script needs to run automatically every night.What is the MOST operationally efficient solution that meets this requirement?
A. onvert the Python script to an AWS Lambda function
B. onvert the Python script to an AWS Lambda function
C. eploy the Python script to an Amazon EC2 instance
D. eploy the Python script to an Amazon EC2 instance
View answer
Correct Answer: A
Question #4
A company is running a website on Amazon EC2 instances behind an Application Load Balancer (ALB). The company configured an Amazon CloudFront distribution and set the ALB as the origin. The company created an Amazon Route 53 CNAME record to send all traffic through the CloudFront distribution. As an unintended side effect, mobile users are now being served the desktop version of the website.Which action should a SysOps administrator take to resolve this issue?
A. Configure the CloudFront distribution behavior to forward the User-Agent header
B. Configure the CloudFront distribution origin settings
C. Enable IPv6 on the ALB
D. Enable IPv6 on the CloudFront distribution
View answer
Correct Answer: A
Question #5
A data analytics application is running on an Amazon EC2 instance. A SysOps administrator must add custom dimensions to the metrics collected by the AmazonCloudWatch agent.How can the SysOps administrator meet this requirement?
A. Create a custom shell script to extract the dimensions and collect the metrics using the Amazon CloudWatch agent
B. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to evaluate the required custom dimensions and send the metrics to Amazon Simple Notification Service (Amazon SNS)
C. Create an AWS Lambda function to collect the metrics from AWS CloudTrail and send the metrics to an Amazon CloudWatch Logs group
D. Create an append_dimensions field in the Amazon CloudWatch agent configuration file to collect the metrics
View answer
Correct Answer: D
Question #6
A SysOps administrator is responsible for a large fleet of Amazon EC2 instances and must know whether any instances will be affected by upcoming hardware maintenance.Which option would provide this information with the LEAST administrative overhead?
A. eploy a third-party monitoring solution to provide real-time EC2 instance monitoring
B. ist any instances with failed system status checks using the AWS Management Console
C. onitor AWS CloudTrail for StopInstances API calls
D. eview the AWS Personal Health Dashboard
View answer
Correct Answer: D
Question #7
A company has a web application that is experiencing performance problems many times each night. A root cause analysis reveals sudden increases in CPU utilization that last 5 minutes on an Amazon EC2 Linux instance. A SysOps administrator must find the process ID (PID) of the service or process that is consuming more CPU.What should the SysOps administrator do to collect the process utilization information with the LEAST amount of effort?
A. Configure the Amazon CloudWatch agent procstat plugin to capture CPU process metrics
B. Configure an AWS Lambda function to run every minute to capture the PID and send a notification
C. Log in to the EC2 instance by using a
D. Use the default Amazon CloudWatch CPU utilization metric to capture the PID in CloudWatch
View answer
Correct Answer: A
Question #8
A SysOps administrator is using Amazon EC2 instances to host an application. The SysOps administrator needs to grant permissions for the application to access an Amazon DynamoDB table.Which solution will meet this requirement?
A. reate access keys to access the DynamoDB table
B. reate an EC2 key pair to access the DynamoDB table
C. reate an IAM user to access the DynamoDB table
D. reate an IAM role to access the DynamoDB table
View answer
Correct Answer: D
Question #9
A company hosts an online shopping portal in the AWS Cloud. The portal provides HTTPS security by using a TLS certificate on an Elastic Load Balancer (ELB). Recently, the portal suffered an outage because the TLS certificate expired. A SysOps administrator must create a solution to automatically renew certificates to avoid this issue in the future. What is the MOST operationally efficient solution that meets these requirements?
A. egister a certificate with a third-party certificate authority (CA)
B. egister a certificate with a third-party certificate authority (CA)
C. equest a public certificate by using AWS Certificate Manager (ACM)
D. equest a public certificate by using AWS Certificate Manager (ACM)
View answer
Correct Answer: C
Question #10
A company has a private Amazon S3 bucket that contains sensitive information. A SysOps administrator needs to keep logs of the IP addresses from authentication failures that result from attempts to access objects in the bucket. The logs must be stored so that they cannot be overwritten or deleted for 90 days.Which solution will meet these requirements?
A. reate an AWS CloudTrail trail
B. reate an AWS CloudTrail trail
C. urn on access logging for the S3 bucket
D. urn on access logging for the S3 bucket
View answer
Correct Answer: D
Question #11
A SysOps administrator migrates NAT instances to NAT gateways. After the migration, an application that is hosted on Amazon EC2 instances in a private subnet cannot access the internet.Which of the following are possible reasons for this problem? (Choose two.)
A. he application is using a protocol that the NAT gateway does not support
B. he NAT gateway is not in a security group
C. he NAT gateway is in an unsupported Availability Zone
D. he NAT gateway is not in the Available state
E. he port forwarding settings do not allow access to internal services from the internet
View answer
Correct Answer: AD
Question #12
A company uses AWS Organizations to manage multiple AWS accounts. Corporate policy mandates that only specific AWS Regions can be used to store and process customer data. A SysOps administrator must prevent the provisioning of Amazon EC2 instances in unauthorized Regions by anyone in the company.What is the MOST operationally efficient solution that meets these requirements?
A. Configure AWS CloudTrail in all Regions to record all API activity
B. In each AWS account, create a managed IAM policy that uses a Region condition to deny the ec2:RunInstances action in all unauthorized Regions
C. In each AWS account, create an IAM permissions boundary policy that uses a Region condition to deny the ec2:RunInstances action in all unauthorized Regions
D. Create a service control policy (SCP) in AWS Organizations to deny the ec2:RunInstances action in all unauthorized Regions
View answer
Correct Answer: D
Question #13
A company has a private Amazon S3 bucket that contains sensitive information. A SysOps administrator needs to keep logs of the IP addresses from authentication failures that result from attempts to access objects in the bucket. The logs must be stored so that they cannot be overwritten or deleted for 90 days.Which solution will meet these requirements?
A. Create an AWS CloudTrail trail
B. Create an AWS CloudTrail trail
C. Turn on access logging for the S3 bucket
D. Turn on access logging for the S3 bucket
View answer
Correct Answer: D
Question #14
A company is running a serverless application on AWS Lambda. The application stores data in an Amazon RDS for MySQL DB instance. Usage has steadily increased, and recently there have been numerous "too many connections" errors when the Lambda function attempts to connect to the database. The company already has configured the database to use the maximum max_connections value that is possible.What should a SysOps administrator do to resolve these errors?
A. Create a read replica of the database
B. Use Amazon RDS Proxy to create a proxy
C. Increase the value in the max_connect_errors parameter in the parameter group that the database uses
D. Update the Lambda function's reserved concurrency to a higher value
View answer
Correct Answer: B
Question #15
A company hosts a website on multiple Amazon EC2 instances that run in an Auto Scaling group. Users are reporting slow responses during peak times between6 PM and 11 PM every weekend. A SysOps administrator must implement a solution to improve performance during these peak times.What is the MOST operationally efficient solution that meets these requirements?
A. Create a scheduled Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function to increase the desired capacity before peak times
B. Configure a scheduled scaling action with a recurrence option to change the desired capacity before and after peak times
C. Create a target tracking scaling policy to add more instances when memory utilization is above 70%
D. Configure the cooldown period for the Auto Scaling group to modify desired capacity before and after peak times
View answer
Correct Answer: B
Question #16
An application runs on Amazon EC2 instances in an Auto Scaling group. Following the deployment of a new feature on the EC2 instances, some instances were marked as unhealthy and then replaced by the Auto Scaling group. The EC2 instances terminated before a SysOps administrator could determine the cause of the health status changes. To troubleshoot this issue, the SysOps administrator wants to ensure that an AWS Lambda function is invoked in this situation.How should the SysOps administrator meet these requirements?
A. Activate the instance scale-in protection setting for the Auto Scaling group
B. Activate the instance scale-in protection setting for the Auto Scaling group
C. Add a lifecycle hook to the Auto Scaling group to invoke the Lambda function through Amazon EventBridge (Amazon CloudWatch Events)
D. Add a lifecycle hook to the Auto Scaling group to invoke the Lambda function through Amazon Route 53
View answer
Correct Answer: C
Question #17
A company is supposed to receive a data file every hour in an Amazon S3 bucket. An S3 event notification invokes an AWS Lambda function each time a file arrives. The function processes the data for use by an application.The application team notices that sometimes the file does not arrive. The application team wants to receive a notification whenever the file does not arrive.What is the MOST operationally efficient solution that meets these requirements?
A. Add an S3 Lifecycle rule on the S3 bucket with a scope that is limited to objects that were created in the last hour
B. Configure another S3 event notification to invoke a Lambda function that posts a message to an Amazon Simple Queue Service (Amazon SQS) queue
C. Create an Amazon CloudWatch alarm to publish a message to an Amazon Simple Notification Service (Amazon SNS) topic to alert the application team when the Invocations metric of the Lambda function is zero for an hour
D. Create a new Lambda function to get the timestamp of the newest file in the S3 bucket
View answer
Correct Answer: C
Question #18
A SysOps administrator is tasked with deploying a company's infrastructure as code. The SysOps administrator want to write a single template that can be reused for multiple environments.How should the SysOps administrator use AWS CloudFormation to create a solution?
A. Use Amazon EC2 user data in a CloudFormation template
B. Use nested stacks to provision resources
C. Use parameters in a CloudFormation template
D. Use stack policies to provision resources
View answer
Correct Answer: C
Question #19
A company has migrated its application to AWS. The company will host the application on Amazon EC2 instances of multiple instance families.During initial testing, a SysOps administrator identifies performance issues on selected EC2 instances. The company has a strict budget allocation policy, so theSysOps administrator must use the right resource types with the performance characteristics to match the workload.What should the SysOps administrator do to meet this requirement?
A. Purchase regional Reserved Instances (RIs) for immediate cost savings
B. Purchase zonal Reserved Instances (RIs) for the existing instances
C. Review and take action on AWS Compute Optimizer recommendations
D. Review resource utilization metrics in the AWS Cost and Usage Report
View answer
Correct Answer: C
Question #20
A company is implementing security and compliance by using AWS Trusted Advisor. The company's SysOps team is validating the list of Trusted Advisor checks that it can access.Which factor will affect the quantity of available Trusted Advisor checks?
A. Whether at least one Amazon EC2 instance is in the running state
B. The AWS Support plan
C. An AWS Organizations service control policy (SCP)
D. Whether the AWS account root user has multi-factor authentication (MFA) enabled
View answer
Correct Answer: B
Question #21
A SysOps administrator is tasked with deploying a company's infrastructure as code. The SysOps administrator want to write a single template that can be reused for multiple environments.How should the SysOps administrator use AWS CloudFormation to create a solution?
A. se Amazon EC2 user data in a CloudFormation template
B. se nested stacks to provision resources
C. se parameters in a CloudFormation template
D. se stack policies to provision resources
View answer
Correct Answer: C
Question #22
A company recently acquired another corporation and all of that corporation's AWS accounts. A financial analyst needs the cost data from these accounts. ASysOps administrator uses Cost Explorer to generate cost and usage reports. The SysOps administrator notices that "No Tagkey" represents 20% of the monthly cost.What should the SysOps administrator do to tag the "No Tagkey" resources?
A. Add the accounts to AWS Organizations
B. Use an AWS Config rule to find the untagged resources
C. Use Cost Explorer to find and tag all the untagged resources
D. Use Tag Editor to find and tag all the untagged resources
View answer
Correct Answer: D
Question #23
A company has an infernal web application that runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 AutoScaling group in a single Availability Zone. A SysOps administrator must make the application highly available.Which action should the SysOps administrator take to meet this requirement?
A. Increase the maximum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage
B. Increase the minimum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage
C. Update the Auto Scaling group to launch new instances in a second Availability Zone in the same AWS Region
D. Update the Auto Scaling group to launch new instances in an Availability Zone in a second AWS Region
View answer
Correct Answer: C
Question #24
A SysOps administrator is provisioning an Amazon Elastic File System (Amazon EFS) file system to provide shared storage across multiple Amazon EC2 instances. The instances all exist in the same VPC across multiple Availability Zones. There are two instances in each Availability Zone. The SysOps administrator must make the file system accessible to each instance with the lowest possible latency.Which solution will meet these requirements?
A. Create a mount target for the EFS file system in the VPC
B. Create a mount target for the EFS file system in one Availability Zone of the VPC
C. Create a mount target for each instance
D. Create a mount target in each Availability Zone of the VPC
View answer
Correct Answer: D
Question #25
A SysOps administrator is investigating why a user has been unable to use RDP to connect over the internet from their home computer to a bastion server running on an Amazon EC2 Windows instance.Which of the following are possible causes of this issue? (Choose two.)
A. A network ACL associated with the bastion's subnet is blocking the network traffic
B. The instance does not have a private IP address
C. The route table associated with the bastion's subnet does not have a route to the internet gateway
D. The security group for the instance does not have an inbound rule on port 22
E. The security group for the instance does not have an outbound rule on port 3389
View answer
Correct Answer: AC
Question #26
A company has migrated its application to AWS. The company will host the application on Amazon EC2 instances of multiple instance families.During initial testing, a SysOps administrator identifies performance issues on selected EC2 instances. The company has a strict budget allocation policy, so theSysOps administrator must use the right resource types with the performance characteristics to match the workload.What should the SysOps administrator do to meet this requirement?
A. urchase regional Reserved Instances (RIs) for immediate cost savings
B. urchase zonal Reserved Instances (RIs) for the existing instances
C. eview and take action on AWS Compute Optimizer recommendations
D. eview resource utilization metrics in the AWS Cost and Usage Report
View answer
Correct Answer: C
Question #27
A company's application is hosted by an internet provider at app.example.com. The company wants to access the application by using www.company.com, which the company owns and manages with Amazon Route 53.Which Route 53 record should be created to address this?
A. A record
B. Alias record
C. CNAME record
D. Pointer (PTR) record
View answer
Correct Answer: C
Question #28
An organization created an Amazon Elastic File System (Amazon EFS) volume with a file system ID of fs-85ba41fc, and it is actively used by 10 Amazon EC2 hosts. The organization has become concerned that the file system is not encrypted.How can this be resolved?
A. Enable encryption on each host's connection to the Amazon EFS volume
B. Enable encryption on the existing EFS volume by using the AWS Command Line Interface
C. Enable encryption on each host's local drive
D. Enable encryption on a newly created volume and copy all data from the original volume
View answer
Correct Answer: D
Question #29
A company uploaded its website files to an Amazon S3 bucket that has S3 Versioning enabled. The company uses an Amazon CloudFront distribution with the S3 bucket as the origin. The company recently modified the files, but the object names remained the same. Users report that old content is still appearing on the website.How should a SysOps administrator remediate this issue?
A. Create a CloudFront invalidation, and add the path of the updated files
B. Create a CloudFront signed URL to update each object immediately
C. Configure an S3 origin access identity (OAI) to display only the updated files to users
D. Disable S3 Versioning on the S3 bucket so that the updated files can replace the old files
View answer
Correct Answer: A
Question #30
A company hosts a static website on Amazon S3. The website is served by an Amazon CloudFront distribution with a default TTL of 86,400 seconds.The company recently uploaded an updated version of the website to Amazon S3. However, users still see the old content when they refresh the site. A SysOps administrator must make the new version of the website visible to users as soon as possible.Which solution meets these requirements?
A. Adjust the TTL value for the DNS CNAME record that is pointing to the CloudFront distribution
B. Create an invalidation on the CloudFront distribution for the old S3 objects
C. Create a new CloudFront distribution
D. Update the DNS record for the website to point to the S3 bucket
View answer
Correct Answer: B

View The Updated AWS Exam Questions

SPOTO Provides 100% Real AWS Exam Questions for You to Pass Your AWS Exam!

Get AWS Practice Test

View Answers after Submission

Please submit your email and WhatsApp to get the answers of questions.

Note: Please make sure your email ID and Whatsapp are valid so that you can get the correct exam results.

Email:
Whatsapp/phone number:
Contact Us


Copyright © 2024. Designer by SPOTO Official Website. All Rights Reserved.