SOA-C01 sample questions

Question 1

A SysOps administrator is notified that an Amazon EC2 instance has stopped responding. The AWS Management Console indicates that the system checks are failing.

What should the administrator do first to resolve this issue?

Accepted Answer

stop and then start the EC2 instance so that it can be launched on a new host.

Answer

Reboot the EC2 instance so it can be launched on a new host.

Answer

Terminate the EC2 instance and relaunch it.

Answer

View the AWS CloudTrail log to investigate what changed on the EC2 instance.

Question 2

A SysOps administrator has created a VPC that contains a public subnet and a private subnet. Amazon EC2 instances that were launched in the private subnet cannot access the internet. The default network ACL is active on all subnets in the VPC, and all security groups allow all outbound traffic:

Which solution will provide the EC2 instances in the private subnet with access to the internet?

Accepted Answer

Create a NAT gateway in the public subnet. Create a route from the private subnet to the NAT gateway.

Answer

Create a NAT gateway in the public subnet. Create a route from the public subnet to the NAT gateway,

Answer

Create a NAT gateway in the private subnet. Create a route from the public subnet to the NAT gateway.

Answer

Create a NAT gateway in the private subnet. Create a route from the private subnet to the NAT gateway.

Question 3

A company is running a website on Amazon EC2 instances that are in an Auto Scaling group. When the website traffic increases, additional instances take several minutes to become available because of a long-running user data script that installs software. A SysOps administrator must decrease the time that is required for new instances to become available.

Which action should the SysOps administrator take to meet this requirement?

Accepted Answer

Update the Auto Scaling group to launch instances that have a storage optimized instance type.

Answer

Reduce the scaling thresholds so that instances are added before traffic increases.

Answer

Purchase Reserved Instances to cover 100% of the maximum capacity of the Auto Scaling group.

Answer

Use EC2 Image Builder to prepare an Amazon Machine Image (AMI) that has pre-installed software.

Question 4

A company uses Amazon Route 53 to manage the public DNS records for the domain example.com. The company deploys an Amazon CloudFront distribution to deliver static assets for a new corporate website. The company wants to create a subdomain that is named "static" and must route traffic for the subdomain to the CloudFront distribution.

How should a SysOps administrator create a new record for the subdomain in Route 53?

Accepted Answer

Create an A record. Enter static.example.com as the record name. Enter the CloudFront distribution's domain name as an alias target.

Answer

Create a CNAME record. Enter static.cloudfront.net as the record name. Enter the CloudFront distribution's public IP address as the value.

Answer

Create a CNAME record. Enter static.example.com as the record name. Enter the CloudFront distribution's private IP address as the value.

Answer

Create an A record. Enter static.cloudfront.net as the record name. Enter the CloudFront distribution's ID as an alias target.

Question 5

An existing, deployed solution uses Amazon EC2 instances with Amazon EBS General Purpose SSD volumes, an Amazon RDS PostgreSQL database, an Amazon EFS file system, and static objects stored in an Amazon S3 bucket. The Security team now mandates that at-rest encryption be turned on immediately for all aspects of the application, without creating new resources and without any downtime.

To satisfy the requirements, which one of these services can the SysOps administrator enable at-rest encryption on?

Accepted Answer

RDS PostgreSQL database

Answer

EBS General Purpose SSD volumes

Answer

Amazon EFS file systems

Answer

S3 objects within a bucket

Question 6

A manufacturing company uses an Amazon RDS DB instance to store inventory of all stock items. The company maintains several AWS Lambda functions that interact with the database to add, update, and delete items. The Lambda functions use hardcoded credentials to connect to the database.

A SysOps administrator must ensure that the database credentials are never stored in plaintext and that the password is rotated every 30 days.

Which solution will meet these requirements in the MOST operationally efficient manner?

Accepted Answer

Use AWS Secrets Manager to store credentials for the database. Create a Secrets Manager secret and select the database so that Secrets Manager will use a Lambda function to update the database password automatically. Specify an automatic rotation schedule of 30 days. Update each Lambda function to access the database password from Secrets Manager.

Answer

Store the database password as an environment variable for each Lambda function. Create a new Lambda function that is named Password Rotate. Use Amazon EventBridge (Amazon CloudWatch Events) to schedule the Password Rotate function every 30 days to change the database password and update the environment variable for each Lambda function.

Answer

Use AWS Key Management Service (AWS KMS) to encrypt the database password and to store the encrypted password as an environment variable for each Lambda function. Grant each Lambda function access to the KMS key so that the database password can be decrypted when required. Create a new Lambda function that is named Password Rotate to change the password every 30 days.

Answer

Use AWS Systems Manager Parameter Store to create a secure string to store credentials for the database. Create a new Lambda function called Password Rotate. Use Amazon EventBridge (Amazon CloudWatch Events) to schedule the PasswordRotate function every 30 days to change the database password and to update the secret within Parameter Store. Update each Lambda function to access the database password from Parameter Store.

Free SOA-C01 sample questions

A SysOps administrator is notified that an Amazon EC2 instance has stopped responding. The AWS Management Console indicates that the system checks are failing. What should the administrator do first to resolve this issue?

6 more free samples are waiting