Released Amazon SOA-C01 Updated Questions PDF
SOA-C01 Dumps and Practice Test (261 Exam Questions)
NEW QUESTION 21
An e-commerce company wants to lower costs on its nightly jobs that aggregate the current day's sales and store the results in Amazon S3. The jobs are currently run using multiple on-demand instances and the job take just under 2 hours to complete. If a job fails for any reason, it needs to be restarted from the beginning.
What method is the MOST cost effective based on these requirements?
- A. Use a mixture of On-Demand and Spot Instances for job execution.
- B. Purchase Reserved Instances to be used for job execution.
- C. Submit a request for a Spot block to be used for job execution.
- D. Submit a request for a one-time Spot Instance for job execution.
Answer: A
NEW QUESTION 22
What does Amazon IAM stand for?
- A. None of these
- B. Amazon Identity and Authentication Mechanism
- C. Amazon Identity and Access Management
- D. Amazon Integrated Access Management
Answer: C
Explanation:
Explanation
Amazon IAM stands for Amazon Identity and Access Management. The "identity" aspect of AWS IAM helps you with the question "Who is that user?", often referred to as authentication.
References:
NEW QUESTION 23
A SysOps Administrator is configuring AWS SSO for the first time. The Administrator has already created a directory in the master account using AWS Directory Service and enabled full access in AWS Organizations.
What should the Administrator do next to configure the service?
- A. Create IAM users in the master account, and use AWS SSO to associate the users with the accounts they will access.
- B. Create IAM roles in each account to be used by AWS SSO, and associate users with these roles using AWS SSO.
- C. Create service control policies (SCPs) in Organizations, and associate the SCPs with Directory Service users or groups.
- D. Create permission sets in AWS SSO, and associate the permission sets with Directory Service users or groups.
Answer: D
NEW QUESTION 24
A user has developed an application which is required to send the data to a NoSQL database. The user wants to decouple the data sending such that the application keeps processing and sending data but does not wait for an acknowledgement of DB. Which of the below mentioned applications helps in this scenario?
- A. AWS Simple Notification Service
- B. AWS Simple Queue Service
- C. AWS Simple Workflow
- D. AWS Simple Query Service
Answer: B
Explanation:
Explanation
Amazon Simple Queue Service (SQS. is a fast, reliable, scalable, and fully managed message queuing service.
SQS provides a simple and cost-effective way to decouple the components of an application. In this case, the user can use AWS SQS to send messages which are received from an application and sent to DB. The application can continue processing data without waiting for any acknowledgement from DB. The user can use SQS to transmit any volume of data without losing messages or requiring other services to always be available.
NEW QUESTION 25
What is Amazon CloudFront?
- A. An encrypted endpoint to upload files to the Cloud
- B. A web service to schedule regular data movement
- C. A global Content Delivery Network
- D. A development front-end to Amazon Web Services
Answer: C
Explanation:
Explanation
Amazon CloudFront is a global content delivery network (CDN) service that accelerates delivery of your websites, APIs, video content or other web assets through CDN caching. It integrates with other Amazon Web Services products to give developers and businesses an easy way to accelerate content to end users with no minimum usage commitments.
NEW QUESTION 26
A user has created an ELB with three instances. How many security groups will ELB create by default?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
Explanation:
Explanation
Elastic Load Balancing provides a special Amazon EC2 source security group that the user can use to ensure that back-end EC2 instances receive traffic only from Elastic Load Balancing. This feature needs two security groups: the source security group and a security group that defines the ingress rules for the back-end instances.
To ensure that traffic only flows between the load balancer and the back-end instances, the user can add or modify a rule to the back-end security group which can limit the ingress traffic. Thus, it can come only from the source security group provided by Elastic Load Balancing.
NEW QUESTION 27
In EC2, what happens to the data in an instance store if an instance reboots (either intentionally or unintentionally)?
- A. Data in the instance store will be lost.
- B. Data is deleted from the instance store for security reasons.
- C. Data is partially present in the instance store.
- D. Data persists in the instance store.
Answer: D
Explanation:
Explanation
The data in an instance store persists only during the lifetime of its associated instance. If an instance reboots (intentionally or unintentionally), data in the instance store persists. However, data on instance store volumes is lost under the following circumstances.
Failure of an underlying drive
The instance is stopped
Terminating an instance
NEW QUESTION 28
A user has setup an RDS DB with Oracle. The user wants to get notifications when someone modifies the security group of that DB. How can the user configure that?
- A. Configure event notification on the DB security group
- B. Configure SNS to monitor security group changes
- C. It is not possible to get the notifications on a change in the security group
- D. Configure the CloudWatch alarm on the DB for a change in the security group
Answer: A
Explanation:
Explanation
Amazon RDS uses the Amazon Simple Notification Service to provide a notification when an Amazon RDS event occurs. These events can be configured for source categories, such as DB instance, DB security group, DB snapshot and DB parameter group. If the user is subscribed to a Configuration Change category for a DB security group, he will be notified when the DB security group is changed.
NEW QUESTION 29
What would happen to an RDS (Relational Database Service) multi-Availability Zone deployment if the primary DB instance fails?
- A. The RDS (Relational Database Service) DB instance reboots.
- B. The IP of the primary DB Instance is switched to the standby DB Instance.
- C. A new DB instance is created in the standby availability zone.
- D. The canonical name record (CNAME) is changed from primary to standby.
Answer: D
Explanation:
Explanation
Failover Process for Amazon RDS:
In the event of a planned or unplanned outage of your DB instance, Amazon RDS automatically switches to a standby replica in another Availability Zone if you have enabled Multi-AZ. The time it takes for the failover to complete depends on the database activity and other conditions at the time the primary DB instance became unavailable.
The failover mechanism automatically changes the DNS record of the DB instance to point to the standby DB instance. As a result, you will need to re-establish any existing connections to your DB instance.
NEW QUESTION 30
A user is launching an instance with EC2. Which options below should the user consider before launching an instance?
- A. Select the OS of the AMI.
- B. Select the instance type.
- C. All choices are correct.
- D. Select the region where the instance is being launched.
Answer: C
Explanation:
Explanation
Regarding Amazon EC2, when launching an instance, the user needs to select the region the instance would be launched from. While launching, the user needs to plan for the instance type and the OS of the instance.
NEW QUESTION 31
A popular auctioning platform requires near-real-time access to dynamic bidding information The platform must be available at all times The current Amazon RDS instance often reaches 100% CPU utilization during peak bidding sessions and can no longer be resized. To improve application performance, a SysOps Administrator is evaluating Amazon ElastiCache and has chosen Redis over Memcached What advantages will this solution provide? (Select TWO )
- A. Online resharding
- B. Multi-threaded processing
- C. Data partitioning
- D. Multi-region with automatic failover
- E. Multi-AZ with automatic failover
Answer: D
NEW QUESTION 32
A user is planning to setup infrastructure on AWS for the Christmas sales. The user is planning to use Auto Scaling based on the schedule for proactive scaling. What advice would you give to the user?
- A. Wait till end of November before scheduling the activity
- B. It is good to schedule now because if the user forgets later on it will not scale up
- C. It is not advisable to use scheduled based scaling
- D. The scaling should be setup only one week before Christmas
Answer: A
Explanation:
Explanation
Auto Scaling based on a schedule allows the user to scale the application in response to predictable load changes. The user can specify any date in the future to scale up or down during that period. As per Auto Scaling the user can schedule an action for up to a month in the future. Thus, it is recommended to wait until end of November before scheduling for Christmas.
NEW QUESTION 33
A user has created a VPC with public and private subnets using the VPC wizard. Which of the below mentioned statements is not true in this scenario?
- A. The VPC will create a routing instance and attach it with a public subnet
- B. The VPC will create two subnets
- C. The VPC will create one internet gateway and attach it to VPC
- D. The VPC will launch one NAT instance with an elastic IP
Answer: A
Explanation:
Explanation
A user can create a subnet with VPC and launch instances inside that subnet. If the user has created a public private subnet, the instances in the public subnet can receive inbound traffic directly from the internet, whereas the instances in the private subnet cannot. If these subnets are created with Wizard, AWS will create a NAT instance with an elastic IP. Wizard will also create two subnets with route tables. It will also create an internet gateway and attach it to the VPC.
NEW QUESTION 34
A SysOps Administrator has implemented a VPC network design with the following requirements
* Two Availability Zones (AZs) - Two private subnets
* Two public subnets
* One internet gateway
* One NAT gateway
What would potentially cause applications in the VPC to fail during an AZ outage?
- A. The default VPC route table, because it can be associated with a single AZ only
- B. A single virtual private gateway, because it can be associated with a single AZ only.
- C. A single internet gateway, because it is not redundant across both AZs.
- D. A single NAT gateway, because it is not redundant across both AZs
Answer: D
NEW QUESTION 35
A user is planning to schedule a backup for an EBS volume. The user wants security of the snapshot data.
How can the user achieve data encryption with a snapshot?
- A. Use encrypted EBS volumes so that the snapshot will be encrypted by AWS
- B. While creating a snapshot select the snapshot with encryption
- C. Enable server side encryption for the snapshot using S3
- D. By default, the snapshot is encrypted by AWS
Answer: A
Explanation:
Explanation
AWS EBS supports encryption of the volume. It also supports creating volumes from existing snapshots provided the snapshots are created from encrypted volumes. The data at rest, the I/O as well as all the snapshots of the encrypted EBS will also be encrypted. EBS encryption is based on the AES-256 cryptographic algorithm, which is the industry standard.
NEW QUESTION 36
A SysOps administrator is creating an AWS CloudFormation template that uses Amazon EC2 auto scaling to launch EC2 instances with windows 2016. The administrator wants to configure the CloudFormation template to ensure that newly launched instances include recent security updates before serving application traffic. This will minimize the time it takes for the instance to start.
Which action will meet these requirements?
- A. Update the template with a user data script that runs windows update using the command line and then calls cfn-signal.
- B. Configure the template to use AWS system manager patch manager to update instances when they are launched.
- C. Configure the template to retrieve the latest windows Amazon machine image (AMI) from AWS systems manager parameter store.
- D. Create a CloudFormation nested stack that creates a new Amazon Machine Image (AMI), then use that AMI ID in the auto scaling launch configuration.
Answer: C
NEW QUESTION 37
A company is running multiple AWS Lambda functions in a non-VPC environment. Most of the functions are application-specific; an operational function is involved synchronously every hour.
Recently, the Applications team deployed new functions that are triggered based on an Amazon S3 event to process multiple files that are uploaded to an S3 bucket simultaneously. The SysOps Administrator notices that the operational function occasionally fails to execute due to throttling.
What step should the Administrator take to make sure that the operational function executes?
- A. Redeploy the operational function to a VPC.
- B. Increase the operational function timeout.
- C. Set the operational function concurrency to 1.
- D. Increase the operational function memory.
Answer: C
NEW QUESTION 38
A company would like to review each change in the infrastructure before deploying updates in its AWS CloudFormation stacks.
Which action will allow an Administrator to understand the impact of these changes before implementation?
- A. Implement a blue/green strategy using AWS Elastic Beanstalk.
- B. Perform a canary deployment using Application Load Balancers and target groups.
- C. Create a change set for the running stack.
- D. Submit the update using the UpdateStack API call.
Answer: C
NEW QUESTION 39
A SysOps Administrator has created an Amazon EC2 instance using an AWS CloudFormation template in the us-east-1 Region. The Administrator finds that this template has failed to create an EC2 instance in the uswest-2 Region.
What is one cause for this failure?
- A. The Amazon Machine Image (AMI) ID referenced in the CloudFormation template could not be found in the us-west-2 Region.
- B. The IAM user was not created in the specified Region.
- C. The cfn-init script did not execute during resource provisioning in the us-west-2 Region.
- D. Resources tags defined in the CloudFormation template are specific to the us-east-1 Region.
Answer: A
NEW QUESTION 40
A company has a web application that is used across all company divisions. Each application request contains a header that includes the name of the division making the request. The SysOps Administrator wants to identify and count the requests from each division.
Which condition should be added to the web ACL of the AWS WAF to accomplish this?
- A. Cross-site scripting
- B. IP match
- C. String match
- D. Geo match
Answer: B
NEW QUESTION 41
Your company Is moving towards tracking web page users with a small tracking Image loaded on each page Currently you are serving this image out of US-East, but are starting to get concerned about the time it takes to load the image for users on the west coast.
What are the two best ways to speed up serving this image? (Choose two.)
- A. Use EBS PIOPs to serve the image faster out of your EC2 instances
- B. Use Route 53's Latency Based Routing and serve the image out of US-West-2 as well as US-East-1
- C. Serve the image out of S3 so that it isn't being served oft of your web application tier
- D. Serve the image out through CloudFront
Answer: B,D
Explanation:
Explanation
Cloudfront gets the image closer to the user and Route53 ensures the best connection based on network latency.
NEW QUESTION 42
A user has configured ELB with two EBS backed instances. The user has stopped the instances for 1 week to save costs. The user restarts the instances after 1 week. Which of the below mentioned statements will help the user to understand the ELB and instance registration better?
- A. If the instances have the same Elastic IP assigned after reboot they will be registered with ELB
- B. The instances will automatically get registered with ELB
- C. There is no way to register the stopped instances with ELB
- D. The user cannot stop the instances if they are registered with ELB
Answer: B
Explanation:
Explanation
https://aws.amazon.com/about-aws/whats-new/2015/12/support-for-automatic-re-registration-of-ec2-back-end-in
NEW QUESTION 43
After installing and configuring the Amazon CloudWatch agent on an EC2 instance, the anticipated system logs are not being received by CloudWatch Logs.
Which of the following are likely to be the cause of this problem? (Select TWO.)
- A. The EC2 instance is in a private subnet, and the VPC does not have a NAT gateway.
- B. A billing constraint is limiting the number of CloudWatch Logs within this account.
- C. The CloudWatch agent does not support the operating system used.
- D. A custom of third-party solution for logs is being used.
- E. The IAM role attached to the EC2 instance does not have the proper permissions.
Answer: B,E
NEW QUESTION 44
A user has hosted an application on EC2 instances. The EC2 instances are configured with ELB and Auto Scaling. The application server session time out is 2 hours. The user wants to configure connection draining to ensure that all in-flight requests are supported by ELB even though the instance is being deregistered. What time out period should the user specify for connection draining?
- A. 30 minutes
- B. 5 minutes
- C. 1 hour
- D. 2 hours
Answer: C
Explanation:
Explanation
When you enable connection draining, you can specify a maximum time for the load balancer to keep connections alive before reporting the instance as de-registered. The maximum timeout value can be set between 1 and 3,600 seconds (the default is 300 seconds). When the maximum time limit is reached, the load balancer forcibly closes connections to the de-registering instance.
References:
NEW QUESTION 45
......
How much Amazon SOA-C01: AWS Certified SysOps Administrator-Associate Exam Cost
The cost of the AWS Certified SysOps Administrator-Associate Exam is USD 150. For more information related to exam price, please visit the official website AWS Website as the cost of exams may be subjected to vary county-wise.
How to book the Amazon SOA-C01: AWS Certified SysOps Administrator-Associate Exam
To apply for the AWS Certified SysOps Administrator-Associate Exam, You have to follow these steps:
- Step 1: Go to the AWS Certified SysOps Administrator-Associate Official Site
- Step 2: Read the instruction Carefully
- Step 3: Follow the given steps
- Step 4: Apply for the AWS Certified SysOps Administrator-Associate Exam
SOA-C01 Exam Dumps Pass with Updated 2021 Certified Exam Questions: https://www.bootcamppdf.com/SOA-C01_exam-dumps.html