SOA-C01 Online Practice Questions and Answers

A user has launched a large EBS backed EC2 instance in the US-East-1a region. The user wants to achieve Disaster Recovery (DR. for that instance by creating another small instance in Europe. How can the user achieve DR?

A. Copy the running instance using the “Instance Copy” command to the EU region

B. Create an AMI of the instance and copy the AMI to the EU region. Then launch the instance from the EU AMI

C. Copy the instance from the US East region to the EU region

D. Use the “Launch more like this” option to copy the instance from one region to another

A user has created a Cloudformation stack. The stack creates AWS services, such as EC2 instances, ELB, AutoScaling, and RDS. While creating the stack it created EC2, ELB and AutoScaling but failed to create RDS. What will Cloudformation do in this scenario?

A. Cloudformation can never throw an error after launching a few services since it verifies all the steps before launching

B. It will warn the user about the error and ask the user to manually create RDS

C. Rollback all the changes and terminate all the created services

D. It will wait for the user's input about the error and correct the mistake after the input

A user has created a VPC with public and private subnets using the VPC Wizard. The VPC has CIDR 20.0.0.0/16. The private subnet uses CIDR 20.0.0.0/24. Which of the below mentioned entries are required in the main route table to allow the instances in VPC to communicate with each other?

A. Destination : 20.0.0.0/24 and Target : VPC

B. Destination : 20.0.0.0/16 and Target : ALL

C. Destination : 20.0.0.0/0 and Target : ALL

D. Destination : 20.0.0.0/24 and Target : Local

When rebalancing, Auto Scaling launches new instances before terminating the old ones, so that re-balancing does not compromise the performance or availability of your application. Because Auto Scaling attempts to launch new instances before terminating the old ones, being at or near the speci-fied maximum capacity could impede or completely halt rebalancing activities. What does Auto Scaling do in order to avoid this problem?

A. It can temporarily exceed the specified maximum capacity of a group by a 20 percent margin (or by a 2-instance margin, whichever is greater) during a rebalancing activity.

B. It can add new reserved instances you have defined.

C. It can temporarily exceed the specified maximum capacity of a group by a 10 percent margin (or by a 1-instance margin, whichever is greater) during a rebalancing activity.

D. It can temporarily exceed the specified maximum capacity of a group by a 5 percent margin (or by a 1instance margin, whichever is greater) during a rebalancing activity.

A company has an application that is running on an EC2 instance in one Availability Zone. A SysOps Administrator has been tasked with making the application highly available. The Administrator created a launch configuration from the running EC2 instance. The Administrator also properly configured a load balancer.

What step should the Administrator complete next to make the application highly available?

A. Create an Auto Scaling group by using the launch configuration across at least 2 Availability Zones with a minimum size of 1, desired capacity of 1, and a maximum size of 1.

B. Create an Auto Scaling group by using the launch configuration across at least 3 Availability Zones with a minimum size of 2, desired capacity of 2, and a maximum of 2.

C. Create an Auto Scaling group by using the launch configuration across at least 2 regions with a minimum size of 1, desired capacity of 1, and a maximum size of 1.

D. Create an Auto Scaling group by using the launch configuration across at least 3 regions with a minimum size of 2, desired capacity of 2, and a maximum size of 2.

A SysOps Administrator must provide data to show the overall usage of Amazon EC2 instances within each department, and must determine if the purchased Reserved Instances are being used effectively.

Which service should be used to provide the necessary information?

A. AWS Personal Health Dashboard

B. AWS Cost Explorer

C. AWS Service Catalog

D. AWS Application Discovery Service

Which of the following steps are required to configure SAML 2.0 for federated access to AWS? (Choose two.)

A. Create IAM users for each identity provider (IdP) user to allow access to the AWS environment.

B. Define assertions that map the company's identity provider (IdP) users to IAM roles.

C. Create IAM roles with a trust policy that lists the SAML provider as the principal.

D. Create IAM users, place them in a group named SAML, and grant them necessary IAM permissions.

E. Grant identity provider (IdP) users the necessary IAM permissions to be able to log in to the AWS environment.

An application running on Amazon EC2 needs login credentials to access a database. The login credentials are stored in AWS Systems Manager Parameter Store as secure string parameters.

What is the MOST secure way to grant the application access to the credentials?

A. Create an IAM EC2 role for the EC2 instances and grant the role permission to read the Systems Manager parameters

B. Create an IAM group for the application and grant the group permissions to read the Systems Manager parameters

C. Create an IAM policy for the application and grant the policy permission to read the Systems Manager parameters

D. Create an IAM user for the application and grant the user permission to read the Systems Manager parameters

A company developed and now runs a memory-intensive application on multiple Amazon EC2 Linux instances. The memory utilization metrics of the EC2 Linux instances must be monitored.

Which combination of actions must be taken to accomplish this? (Choose two.)

A. Enable detailed monitoring on the instance within Amazon CloudWatch.

B. Implement an AWS Lambda function to track memory metrics.

C. Install Amazon CloudWatch agent to track memory metrics.

D. Publish the memory metrics to Amazon CloudWatch Events.

E. Publish the memory metrics using Amazon CloudWatch Logs.

A SysOps Administrator must remove public IP addresses from all Amazon EC2 Instances to prevent exposure to the internet. However, many corporate applications running on those EC2 instances need to access Amazon S3 buckets. The administrator is tasked with allowing the EC2 instances to continue to access the S3 buckets. Which solutions can be used? (Select Two).

A. Deploy a NAT Gateway and configure the route tables according in the VPC where the EC2 instances are running.

B. Modify the network ACLs with the private IP addresses in the routes to connect to Amazon S3.

C. Modify the security groups on the EC2 instances with private IP addresses in the routes to connect to Amazon S3.

D. Set up AWS Direct connect and configure a virtual interface between the EC2 instances and the S3 buckets.

E. Set up VPC endpoint in the VPC where the EC2 instances are running and configure the routes tables accordingly.