Question 1

A company runs an application on an Amazon EC2 instance A SysOps administrator creates an Auto Scaling group and an Application Load Balancer (ALB) to handle an increase in demand However, the EC2 instances are failing tie health check.

What should the SysOps administrator do to troubleshoot this issue?

Options :

A : Verity that the Auto Scaling group is configured to use all AWS Regions.

B : Verily that the application is running on the protocol and the port that the listens is expecting.

C : Verify the listener priority in the ALB Change the priority if necessary.

D : Verify the maximum number of instances in the Auto Scaling group Change the number if necessary

Answer: B

Question 2

With the threat of ransomware viruses encrypting and holding company data hostage, which action should be taken to protect an Amazon S3 bucket?

Options :

A : Deny Post. Put. and Delete on the bucket.

B : Enable server-side encryption on the bucket.

C : Enable Amazon S3 versioning on the bucket.

D : Enable snapshots on the bucket.

Answer: C

Question 3

A SysOps administrator has an AWS CloudFormation template of the company's existing infrastructure in us-west-2. The administrator attempts to use the template to launch a new stack in eu-west-1, but the stack only partially deploys, receives an error message, and then rolls back.
Why would this template fail to deploy? (Select TWO.)

Options :

A : The template referenced an IAM user that is not available in eu-west-1. B. The template referenced an Amazon Machine Image (AMI) that is not available in eu-west-1.

B : The template did not have the proper level of permissions to deploy the resources.

C : The template requested services that do not exist in eu-west-1.

D : CloudFormation templates can be used only to update existing services.

Answer: B,D

Question 4

A company is undergoing an external audit of its systems, which run wholly on AWS. A SysOps administrator must supply documentation of Payment Card Industry Data Security Standard (PCI DSS) compliance for the infrastructure managed by AWS.

Which set of action should the SysOps administrator take to meet this requirement?

Options :

A : Download the applicable reports from the AWS Artifact portal and supply these to the auditors.

B : Download complete copies of the AWS CloudTrail log files and supply these to the auditors.

C : Download complete copies of the AWS CloudWatch logs and supply these to the auditors.

D : Provide the auditors with administrative access to the production AWS account so that the auditors can determine compliance.

Answer: A

Question 5

A SysOps administrator is unable to launch Amazon EC2 instances into a VPC because there are no available private IPv4 addresses in the VPC. Which combination of actions must the SysOps administrator take to launch the instances? (Select TWO.)

Options :

A : Associate a secondary IPv4 CIDR block with the VPC

B : Associate a primary IPv6 CIDR block with the VPC

C : Create a new subnet for the VPC

D : Modify the CIDR block of the VPC

E : Modify the CIDR block of the subnet that is associated with the instances

Answer: A,C

Smartly Prepare Exam with Free Online SOA-C02 Practice Test

Buying Options: