With the help of Our SOA-C02 braindumps you can easily pass your Amazon SOA-C02 Exam. If you already done your preparation for exam then we have perfect tool to check your preparation before going for exam. You can attempt exam in exam mode. Exactly same scenario will be provided by us for the help of students.
Our aim to help students not only earn. Our Aws exam question answers are fully verified by IT professionals that have number of year's experience. If you are scared to done transaction then you can check Amazon SOA-C02 demo before your order submission.
Our support staff available here 24/7 you can ask anything about your exam or you can ask for demo of your desired exam.
We are fully assure that you will not lose anything you will pass your AWS exam with highest possible scores.
Sample Questions
Question 1
A SysOps Administrator has implemented an Auto Scaling group with a step scaling policy.
The
Administrator notices that the additional instances have not been included in the
aggregated metrics.
Why are the additional instances missing from the aggregated metrics?
A. The warm-up period has not expired
B. The instances are still in the boot process
C. The instances have not been attached to the Auto Scaling group
D. The instances are included in a different set of metrics
ANSWER : B
Question 2
An Amazon S3 Inventory report reveals that more than 1 million objects in an S3 bucket
are not encrypted.
These objects must be encrypted, and all future objects must be encrypted at the time they
are written.
Which combination of actions should a SysOps administrator take to meet these
requirements? (Choose two.)
A. Create an AWS Config rule that runs evaluations against configuration changes to the
S3 bucket. When an
unencrypted object is found, run an AWS Systems Manager Automation document to
encrypt the object in
place.
B. Edit the properties of the S3 bucket to enable default server-side encryption.
C. Filter the S3 Inventory report by using S3 Select to find all objects that are not
encrypted. Create an S3
Batch Operations job to copy each object in place with encryption enabled.
D. Filter the S3 Inventory report by using S3 Select to find all objects that are not
encrypted. Send each object
name as a message to an Amazon Simple Queue Service (Amazon SQS) queue. Use the
SQS queue to
invoke an AWS Lambda function to tag each object with a key of "Encryption" and a value of "SSE-KMS".
E. Use S3 Event Notifications to invoke an AWS Lambda function on all new object-created
events for the S3
bucket. Configure the Lambda function to check whether the object is encrypted and to run
an AWS Systems Manager Automation document to encrypt the object in place when an
unencrypted object is
found.
ANSWER : B,E
Question 3
A company is running an application on premises and wants to use AWS for data backup.
All of the data must be available locally. The backup application can write only to blockbased storage that is compatible with the Portable Operating System Interface (POSIX).
Which backup solution will meet these requirements?
A. Configure the backup software to use Amazon S3 as the target for the data backups
B. Configure the backup software to use Amazon S3 Glacier as the target for the data
backups.
C. Use AWS Storage Gateway, and configure it to use gateway-cached volumes.
D. Use AWS Storage Gateway, and configure it to use gateway-stored volumes.
ANSWER : D
Question 4
A SysOps administrator is maintaining a web application using an Amazon CloudFront web
distribution, an
Application Load Balancer (ALB), Amazon RDS, and Amazon EC2 in a VPC. All services
have logging
enabled. The administrator needs to investigate HTTP Layer 7 status codes from the web
application.
Which log sources contain the status codes? (Choose two.)
A. VPC Flow Logs
B. AWS CloudTrail logs
C. ALB access logs
D. CloudFront access logs
E. RDS logs
ANSWER : C,D
Question 5
A company using AWS Organizations requires that no Amazon S3 buckets in its production
accounts should ever be deleted.
What is the SIMPLEST approach the SysOps Administrator can take to ensure S3 buckets
in those accounts can never be deleted?
A. Set up MFA Delete on all the S3 buckets to prevent the buckets from being ddeleted.
B. Use service control policies to deny the s3:DeleteBucket action on all buckets in
production accounts.
C. Create an IAM group that has an IAM policy to deny the s3:DeleteBucket action on all
buckets in production accounts.
D. Use AWS Shield to deny the s3:DeleteBucket action on the AWS account instead of all
S3 buckets.
ANSWER : B
