SOA-C02 Free Practice Test

- (Exam Topic 1)
A company has deployed AWS Security Hub and AWS Config in a newly implemented organization in AWS Organizations. A SysOps administrator must implement a solution to restrict all member accounts in the organization from deploying Amazon EC2 resources in the ap-southeast-2 Region. The solution must be implemented from a single point and must govern an current and future accounts. The use of root credentials also must be restricted in member accounts.
Which AWS feature should the SysOps administrator use to meet these requirements?

1. A. AWS Config aggregator
2. B. IAM user permissions boundaries
3. C. AWS Organizations service control policies (SCPs)
4. D. AWS Security Hub conformance packs

Correct Answer: C

- (Exam Topic 1)
A company uses an Amazon Elastic File System (Amazon EFS) file system to share files across many Linux Amazon EC2 instances. A SysOps administrator notices that the file system's PercentIOLimit metric is consistently at 100% for 15 minutes or longer. The SysOps administrator also notices that the application that reads and writes to that file system is performing poorly. They application requires high throughput and IOPS while accessing the file system.
What should the SysOps administrator do to remediate the consistently high PercentIOLimit metric?

1. A. Create a new EFS file system that uses Max I/O performance mod
2. B. Use AWS DataSync to migrate data to the new EFS file system.
3. C. Create an EFS lifecycle policy to transition future files to the Infrequent Access (IA) storage class to improve performanc
4. D. Use AWS DataSync to migrate existing data to IA storage.
5. E. Modify the existing EFS file system and activate Max I/O performance mode.
6. F. Modify the existing EFS file system and activate Provisioned Throughput mode.

Correct Answer: A
To support a wide variety of cloud storage workloads, Amazon EFS offers two performance modes, General Purpose mode and Max I/O mode. You choose a file system's performance mode when you create it, and it cannot be changed. If the PercentIOLimit percentage returned was at or near 100 percent for a significant amount of time during the test, your application should use the Max I/O performance mode. https://docs.aws.amazon.com/efs/latest/ug/performance.html

- (Exam Topic 1)
A SysOps administrator creates an AWS CloudFormation template to define an application stack that can be deployed in multiple AWS Regions.
The SysOps administrator also creates an Amazon CloudWatch dashboard by using the AWS Management Console. Each deployment of the application requires its own CloudWatch dashboard.
How can the SysOps administrator automate the creation of the CloudWatch dashboard each time the application is deployed?

1. A. Create a script by using the AWS CLI to run the aws cloudformation put-dashboard command with the name of the dashboar
2. B. Run the command each time a new CloudFormation stack is created.
3. C. Export the existing CloudWatch dashboard as JSO
4. D. Update the CloudFormation template to define an AWS::CloudWatch::Dashboard resourc
5. E. Include the exported JSON in the resource's DashboardBody property.
6. F. Update the CloudFormation template to define an resourc
7. G. Use the intrinsic Ref function to reference the ID of the existing CloudWatch dashboard.
8. H. Update the CloudFormation template to define an AWS::CloudWatch::Dashboard resourc
9. I. Specify the name of the existingdashboard in the DashboardName property.

Correct Answer: B
You can only use the Intrinsic Ref function to reference a resource that is being created at the same time as the current CloudFormation template. The question states that the CloudWatch dashboard was previously created using the AWS Management Console, so there is no ID to reference the existing CloudWatch dashboard in the CloudFormation template. You would need to export the existing CloudWatch dashboard as JSON, then use the DashboardBody property in the CloudFormation template to replicate it upon each deployment
(https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/CloudWatch-Dashboard-Body-Structu

- (Exam Topic 1)
A SysOps administrator has enabled AWS CloudTrail in an AWS account If CloudTrail is disabled it must be re-enabled immediately What should the SysOps administrator do to meet these requirements WITHOUT writing custom code''

1. A. Add the AWS account to AWS Organizations Enable CloudTrail in the management account
2. B. Create an AWS Config rule that is invoked when CloudTrail configuration changes Apply the AWS-ConfigureCloudTrailLogging automatic remediation action
3. C. Create an AWS Config rule that is invoked when CloudTrail configuration changes Configure the rule to invoke an AWS Lambda function to enable CloudTrail
4. D. Create an Amazon EventBridge (Amazon CloudWatch Events) hourly rule with a schedule pattern to run an AWS Systems Manager Automation document to enable CloudTrail

Correct Answer: B

- (Exam Topic 1)
A SysOps administrator must configure a resilient tier of Amazon EC2 instances for a high performance computing (HPC) application. The HPC application requires minimum latency between nodes
Which actions should the SysOps administrator take to meet these requirements? (Select TWO.)

1. A. Create an Amazon Elastic File System (Amazon EPS) file system Mount the file system to the EC2 instances by using user data
2. B. Create a Multi-AZ Network Load Balancer in front of the EC2 instances
3. C. Place the EC2 instances in an Auto Scaling group within a single subnet
4. D. Launch the EC2 instances into a cluster placement group
5. E. Launch the EC2 instances into a partition placement group

Correct Answer: AD