SOA-C02 Free Practice Test

- (Exam Topic 1)
A SysOps administrator is evaluating Amazon Route 53 DNS options to address concerns about high availability for an on-premises website. The website consists of two servers: a primary active server and a secondary passive server. Route 53 should route traffic to the primary server if the associated health check returns 2xx or 3xx HTTP codes. All other traffic should be directed to the secondary passive server. The failover record type, set ID. and routing policy have been set appropriately for both primary and secondary servers.
Which next step should be taken to configure Route 53?

1. A. Create an A record for each serve
2. B. Associate the records with the Route 53 HTTP health check.
3. C. Create an A record for each serve
4. D. Associate the records with the Route 53 TCP health check.
5. E. Create an alias record for each server with evaluate target health set to ye
6. F. Associate the records withthe Route 53 HTTP health check.
7. G. Create an alias record for each server with evaluate target health set to ye
8. H. Associate the records with the Route 53 TCP health check.

Correct Answer: A

- (Exam Topic 1)
A company is trying to connect two applications. One application runs in an on-premises data center that has a hostname of hostl .onprem.private. The other application runs on an Amazon EC2 instance that has a hostname of hostl.awscloud.private. An AWS Site-to-Site VPN connection is in place between the on-premises network and AWS.
The application that runs in the data center tries to connect to the application that runs on the EC2 instance, but DNS resolution fails. A SysOps administrator must implement DNS resolution between on-premises and AWS resources.
Which solution allows the on-premises application to resolve the EC2 instance hostname?

1. A. Set up an Amazon Route 53 inbound resolver endpoint with a forwarding rule for the onprem.private hosted zon
2. B. Associate the resolver with the VPC of the EC2 instanc
3. C. Configure the on-premises DNS resolver to forward onprem.private DNS queries to the inbound resolver endpoint.
4. D. Set up an Amazon Route 53 inbound resolver endpoin
5. E. Associate the resolver with the VPC of the EC2 instanc
6. F. Configure the on-premises DNS resolver to forward awscloud.private DNS queries to the inbound resolver endpoint.
7. G. Set up an Amazon Route 53 outbound resolver endpoint with a forwarding rule for the onprem.private hosted zon
8. H. Associate the resolver with the AWS Region of the EC2 instanc
9. I. Configure theon-premises DNS resolver to forward onprem.private DNS queries to the outbound resolver endpoint.
10. J. Set up an Amazon Route 53 outbound resolver endpoin
11. K. Associate the resolver with the AWS Region of the EC2 instanc
12. L. Configure the on-premises DNS resolver to forward awscloud.private DNS queries to the outbound resolver endpoint.

Correct Answer: C

- (Exam Topic 1)
A company hosts a database on an Amazon RDS Multi-AZ DB instance. The database is not encrypted. The company's new security policy requires all AWS resources to be encrypted at rest and in transit.
What should a SysOps administrator do to encrypt the database?

1. A. Configure encryption on the existing DB instance.
2. B. Take a snapshot of the DB instanc
3. C. Encrypt the snapsho
4. D. Restore the snapshot to the same DB instance.
5. E. Encrypt the standby replica in a secondary Availability Zon
6. F. Promote the standby replica to the primary DB instance.
7. G. Take a snapshot of the DB instanc
8. H. Copy and encrypt the snapsho
9. I. Create a new DB instance by restoring the encrypted copy.

Correct Answer: B

- (Exam Topic 1)
A company is attempting to manage its costs in the AWS Cloud. A SysOps administrator needs specific company-defined tags that are assigned to resources to appear on the billing report.
What should the SysOps administrator do to meet this requirement?

1. A. Activate the tags as AWS generated cost allocation tags.
2. B. Activate the tags as user-defined cost allocation tags.
3. C. Create a new cost categor
4. D. Select the account billing dimension.
5. E. Create a new AWS Cost and Usage Repor
6. F. Include the resource IDs.

Correct Answer: B
https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/custom-tags.html "User-defined tags are tags that you define, create, and apply to resources. After you have created and applied the user-defined tags, you can activate by using the Billing and Cost Management console for cost allocation tracking. "
To meet this requirement, the SysOps administrator should activate the company-defined tags as user-defined cost allocation tags. This will ensure that the tags appear on the billing report and that the resources can be tracked with the specific tags. The other options (activating the tags as AWS generated cost allocation tags, creating a new cost category and selecting the account billing dimension, and creating a new AWS Cost and Usage Report and including the resource IDs) will not meet the requirements and are not the correct solutions for this issue.

- (Exam Topic 1)
A company uses AWS Organizations to manage its AWS accounts. A SysOps administrator must create a backup strategy for all Amazon EC2 instances across all the company's AWS accounts.
Which solution will meet these requirements In the MOST operationally efficient way?

1. A. Deploy an AWS Lambda function to each account to run EC2 instance snapshots on a scheduled basis.
2. B. Create an AWS CloudFormation stack set in the management account to add an AutoBackup=True tag to every EC2 instance
3. C. Use AWS Backup In the management account to deploy policies for all accounts and resources.
4. D. Use a service control policy (SCP) to run EC2 instance snapshots on a scheduled basis in each account.

Correct Answer: B