SOA-C02 Free Practice Test

- (Exam Topic 1)
A Sysops administrator creates an Amazon Elastic Kubernetes Service (Amazon EKS) cluster that uses AWS Fargate. The cluster is deployed successfully. The Sysops administrator needs to manage the cluster by using the kubect1 command line tool.
Which of the following must be configured on the Sysops administrator's machine so that kubect1 can communicate with the cluster API server?

1. A. The kubeconfig file
2. B. The kube-proxy Amazon EKS add-on
3. C. The Fargate profile
4. D. The eks-connector.yaml file

Correct Answer: A
The kubeconfig file is a configuration file used to store cluster authentication information, which is required to make requests to the Amazon EKS cluster API server. The kubeconfig file will need to be configured on the SysOps administrator's machine in order for kubectl to be able to communicate with the cluster API server.
https://aws.amazon.com/blogs/developer/running-a-kubernetes-job-in-amazon-eks-on-aws-fargate-using-aws-ste

- (Exam Topic 1)
A company has an application that is running on Amazon EC2 instances in a VPC. The application needs access to download software updates from the internet. The VPC has public subnets and private signets. The company's security policy requires all ECS instances to be deployed in private subnets
What should a SysOps administrator do to meet those requirements?

1. A. Add an internet gateway to the VPC In the route table for the private subnets, odd a route to the interne; gateway.
2. B. Add a NAT gateway to a private subne
3. C. In the route table for the private subnets, add a route to the NAT gateway.
4. D. Add a NAT gateway to a public subnet in the route table for the private subnets, add a route to the NAT gateway.
5. E. Add two internet gateways to the VP
6. F. In The route tablet for the private subnets and public subnets, add a route to each internet gateway.

Correct Answer: C

- (Exam Topic 1)
A company uses AWS Cloud Formation templates to deploy cloud infrastructure. An analysis of all the company's templates shows that the company has declared the same components in multiple templates. A SysOps administrator needs to create dedicated templates that have their own parameters and conditions for these common components.
Which solution will meet this requirement?

1. A. Develop a CloudFormaiion change set.
2. B. Develop CloudFormation macros.
3. C. Develop CloudFormation nested stacks.
4. D. Develop CloudFormation stack sets.

Correct Answer: C

- (Exam Topic 1)
A company is testing Amazon Elasticsearch Service (Amazon ES) as a solution for analyzing system logs from a fleet of Amazon EC2 instances. During the test phase, the domain operates on a single-node cluster. A SysOps administrator needs to transition the test domain into a highly available production-grade deployment.
Which Amazon ES configuration should the SysOps administrator use to meet this requirement?

1. A. Use a cluster of four data nodes across two AWS Region
2. B. Deploy four dedicated master nodes in each Region.
3. C. Use a cluster of six data nodes across three Availability Zone
4. D. Use three dedicated master nodes.
5. E. Use a cluster of six data nodes across three Availability Zone
6. F. Use six dedicated master nodes.
7. G. Use a cluster of eight data nodes across two Availability Zone
8. H. Deploy four master nodes in a failover AWS Region.

Correct Answer: B

- (Exam Topic 1)
A company is managing multiple AWS accounts in AWS Organizations The company is reviewing internal security of Its AWS environment The company's security administrator has their own AWS account and wants to review the VPC configuration of developer AWS accounts
Which solution will meet these requirements in the MOST secure manner?

1. A. Create an IAM policy in each developer account that has read-only access related to VPC resources Assign the policy to an IAM user Share the user credentials with the security administrator
2. B. Create an IAM policy in each developer account that has administrator access to all Amazon EC2 actions, including VPC actions Assign the policy to an IAM user Share the user credentials with the security administrator
3. C. Create an IAM policy in each developer account that has administrator access related to VPC resources Assign the policy to a cross-account IAM role Ask the security administrator to assume the role from their account
4. D. Create an IAM policy m each developer account that has read-only access related to VPC resources Assign the policy to a cross-account IAM role Ask the security administrator to assume the role from their account

Correct Answer: D