SOA-C02 Free Practice Test

- (Exam Topic 1)
A company runs a web application on three Amazon EC2 instances behind an Application Load Balancer (ALB). The company notices that random periods of increased traffic cause a degradation in the application's performance. A SysOps administrator must scale the application to meet the increased traffic. Which solution meets these requirements?

1. A. Create an Amazon CloudWatch alarm to monitor application latency and increase the size of each EC2 instance if the desired threshold is reached.
2. B. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to monitor application latency and add an EC2 instance to the ALB if the desired threshold is reached.
3. C. Deploy the application to an Auto Scaling group of EC2 instances with a target tracking scaling policy.Attach the ALB to the Auto Scaling group.
4. D. Deploy the application to an Auto Scaling group of EC2 instances with a scheduled scaling policy.Attach the ALB to the Auto Scaling group.

Correct Answer: C

- (Exam Topic 1)
A SysOps administrator has created an AWS Service Catalog portfolio and has shared the portfolio with a second AWS account in the company. The second account is controlled by a different administrator.
Which action will the administrator of the second account be able to perform?

1. A. Add a product from the imported portfolio to a local portfolio.
2. B. Add new products to the imported portfolio.
3. C. Change the launch role for the products contained in the imported portfolio.
4. D. Customize the products in the imported portfolio.

Correct Answer: A

- (Exam Topic 1)
A company runs a stateless application that is hosted on an Amazon EC2 instance. Users are reporting performance issues. A SysOps administrator reviews the Amazon CloudWatch metrics for the application and notices that the instance's CPU utilization frequently reaches 90% during business hours.
What is the MOST operationally efficient solution that will improve the application's responsiveness?

1. A. Configure CloudWatch logging on the EC2 instanc
2. B. Configure a CloudWatch alarm for CPU utilization to alert the SysOps administrator when CPU utilization goes above 90%.
3. C. Configure an AWS Client VPN connection to allow the application users to connect directly to the EC2 instance private IP address to reduce latency.
4. D. Create an Auto Scaling group, and assign it to an Application Load Balance
5. E. Configure a target tracking scaling policy that is based on the average CPU utilization of the Auto Scaling group.
6. F. Create a CloudWatch alarm that activates when the EC2 instance's CPU utilization goes above 80%.Configure the alarm to invoke an AWS Lambda function that vertically scales the instance.

Correct Answer: C

- (Exam Topic 1)
A company uses Amazon Elasticsearch Service (Amazon ES) to analyze sales and customer usage data. Members of the company's geographically dispersed sales team are traveling. They need to log in to Kibana by using their existing corporate credentials that are stored in Active Directory. The company has deployed
Active Directory Federation Services (AD FS) to enable authentication to cloud services. Which solution will meet these requirements?

1. A. Configure Active Directory as an authentication provider in Amazon E
2. B. Add the Active Directory server's domain name to Amazon E
3. C. Configure Kibana to use Amazon ES authentication.
4. D. Deploy an Amazon Cognito user poo
5. E. Configure Active Directory as an external identity provider for the user poo
6. F. Enable Amazon Cognito authentication for Kibana on Amazon ES.
7. G. Enable Active Directory user authentication in Kiban
8. H. Create an IP-based custom domain access policy in Amazon ES that includes the Active Directory server's IP address.
9. I. Establish a trust relationship with Kibana on the Active Directory serve
10. J. Enable Active Directory user authentication in Kiban
11. K. Add the Active Directory server's IP address to Kibana.

Correct Answer: B
https://aws.amazon.com/blogs/security/how-to-enable-secure-access-to-kibana-using-aws-single-sign-on/ https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/es-cognito-auth.html

- (Exam Topic 1)
A company hosts its website on Amazon EC2 instances behind an Application Load Balancer. The company manages its DNS with Amazon Route 53. and wants to point its domain's zone apex to the website.
Which type of record should be used to meet these requirements?

1. A. A CNAME record for the domain's zone apex
2. B. An A record for the domain's zone apex
3. C. An AAAA record for the domain's zone apex
4. D. An alias record for the domain's zone apex

Correct Answer: D
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resource-record-sets-choosing-alias-non-alias.htm https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-to-elb-load-balancer.html