Amazon SOA-C02 Exam Practice Test Instant Access

Question 1

The SysOps administrator needs to resolve high disk I/O issues during the bootstrap process of Nitro-based EC2 instances in an Auto Scaling group with gp3 EBS volumes.

Options (Select TWO):

AIncrease the EC2 instance size.

BIncrease the EBS volume capacity.

CIncrease the EBS volume IOPS.

DIncrease the EBS volume throughput.

EChange the instance type to an instance that is not Nitro-based.

Answer : C, D

To address high I/O requirements during the bootstrap process, increasing both IOPS and throughput on the EBS volume is recommended:

Increase EBS Volume IOPS: Enhances the instance's ability to handle multiple read and write operations per second, essential for data-heavy tasks like downloading Docker images.

Increase EBS Volume Throughput: Provides higher data transfer rates, reducing bottlenecks during intensive I/O operations.

Increasing instance size is unnecessary if the primary issue is disk I/O, and changing from Nitro-based instances would not address the underlying storage performance need.

Question 2

The SysOps administrator needs to deploy auditing software on all existing and new EC2 instances across multiple Regions, using AWS Systems Manager.

Options:

ACreate a Systems Manager Distributor package that includes the auditing software. Store the package in an Amazon S3 bucket. Create a Systems Manager State Manager association in each Region to install the software package on all managed instances in the company's AWS account.

BLoad the installer for the auditing software into an Amazon S3 bucket. Connect to every instance by using Systems Manager Fleet Manager Remote Desktop. Download the installer by using the AWS CLI. Run the installer manually.

CCreate an AWS Lambda function that calls the software installer. Merge the auditing software into the Lambda function by using Lambda layers. Run the Lambda function from each instance by using a scheduled Amazon EventBridge rule.

DCreate an Amazon EventBridge rule to react to Amazon EC2 RunInstances events. Configure the rule to modify the events to include a step that runs the software installer. Reboot all the instances.

Answer : A

Using AWS Systems Manager Distributor and State Manager is an automated and scalable solution for managing software installation across EC2 instances.

Systems Manager Distributor: Allows packaging and distributing the auditing software across multiple Regions.

State Manager Association: Automates software installation on both existing and new instances, ensuring consistent deployment across all managed instances.

Manually connecting to instances or using Lambda is not scalable or efficient for this type of ongoing software management.

Question 3

The company needs a shared file solution for EC2 Windows instances in a Multi-AZ deployment that uses native Windows storage capabilities and maximizes consistency.

Options:

ACreate an Amazon FSx for Windows File Server Multi-AZ file system. Map file shares on the instances by using the file system's DNS name.

BGrant the instances access to a shared Amazon S3 bucket. Use Windows Task Scheduler to synchronize the contents of the S3 bucket locally to each instance periodically.

CCreate an Amazon Elastic File System (Amazon EFS) file system that uses the EFS Standard storage class. Mount the file system to the instances by using the file system's DNS name and the EFS mount helper.

DCreate a new Amazon Elastic Block Store (Amazon EBS) Multi-Attach volume. Attach the EBS volume as an additional drive to each instance.

Answer : A

Amazon FSx for Windows File Server provides a fully managed, highly available, and native Windows file system compatible with the SMB protocol, ideal for Windows workloads requiring shared access.

Multi-AZ File System: Ensures high availability across multiple Availability Zones.

Native Windows Capabilities: Allows instances to map file shares and access files using Windows storage features, offering strong consistency and performance for shared files.

Other options, like Amazon S3 and Amazon EFS, either lack native Windows integration or do not offer the desired consistency and high availability for shared file systems in a Windows environment.

Question 4

The company wants to use three On-Demand Instances at all times and additional three Spot Instances when prices drop to a specific threshold, ensuring high availability with minimal management overhead.

Options:

AConfigure a launch template for the Spot Instances. Set the maximum price for the Spot Instances. Configure another launch template for the On-Demand Instances.

BConfigure a launch template that uses the InstanceMarketOptions property for the Spot Instances and the On-Demand Instances. Set the maximum price for the Spot Instances.

CConfigure a launch template that uses the MixedInstancesPolicy property for the Spot Instances and the On-Demand Instances. Set the maximum price for the Spot Instances.

DConfigure a launch template that uses the InstanceMarketOptions property and the MixedInstancesPolicy property for the Spot Instances and the On-Demand Instances. Set the maximum price for the Spot Instances.

Answer : C

The MixedInstancesPolicy feature in Auto Scaling groups allows for the configuration of both On-Demand and Spot Instances within a single Auto Scaling group, balancing cost savings and high availability:

MixedInstancesPolicy: Enables configuration to maintain a minimum of three On-Demand Instances and add Spot Instances when prices drop, without the need to create separate launch templates.

Setting Maximum Spot Price: Ensures that additional Spot Instances are launched only when within the defined budget.

This solution offers the least management overhead, as it combines both On-Demand and Spot instances seamlessly in one configuration.

Question 5

The SysOps administrator must modify the AWS Config rule that deletes noncompliant SSH inbound rules to update the rule to allow SSH from specific trusted IP addresses instead.

Options:

ACreate a new AWS Systems Manager Automation runbook that adds an IP set to the security group's inbound rule. Update the AWS Config rule to change the automatic remediation action to use the new runbook.

BCreate a new AWS Systems Manager Automation runbook that updates the security group's inbound rule with the IP addresses from the business units. Update the AWS Config rule to change the automatic remediation action to use the new runbook.

CCreate an AWS Lambda function that adds an IP set to the security group's inbound rule. Update the AWS Config rule to change the automatic remediation action to use the Lambda function.

DCreate an AWS Lambda function that updates the security group's inbound rule with the IP addresses from the business units. Update the AWS Config rule to change the automatic remediation action to use the Lambda function.

Answer : B

Using a Systems Manager Automation runbook is appropriate for managing security group rules within the AWS Config remediation framework. A runbook provides a reusable, automated solution that can update the security group rule based on an IP list.

Automation Runbook for Security Group Updates: A runbook can automate security group modifications, such as adding the trusted IP addresses specified by the business units.

AWS Config Integration: Config rules can be set to use this runbook for automatic remediation, ensuring that the rule is updated without deleting it, which aligns with the requirement for SSH access from specific IPs.

Lambda functions could work but would require additional customization and complexity, making the runbook a more manageable and scalable solution for this task.

Question 6

A SysOps administrator needs to share a new AMI with all accounts within an organization managed through AWS Organizations.

Options:

AMake the AMI public. Reference the AMI ID from within the member accounts of the organization.

BShare the AMI's associated snapshots with all the accounts in the organization.

CShare the AMI with the organization by specifying the organization Amazon Resource Name (ARN).

DUpload the AMI to AWS Marketplace. Search for the uploaded AMI when an instance is launched from a member account in the organization.

Answer : C

The most operationally efficient solution is to use the organization ARN to share the AMI across all accounts within AWS Organizations.

AMI Sharing with Organization ARN: AWS allows you to share AMIs with an entire AWS Organization by specifying the organization's ARN, simplifying access management for multiple accounts.

Efficient Management: This approach eliminates the need to share AMIs individually with each account or make them public, and it avoids the complexity of using snapshots.

Making the AMI public is not secure, and using AWS Marketplace or snapshots does not provide the operational efficiency required.

Question 7

A SysOps administrator must implement a limited rollout of a new version of the website to 20% of customers using Amazon Route 53.

Options:

ACreate a target group in Route 53. Set the routing algorithm to Weighted. Configure a weight of 80 for the original resource. Configure a weight of 20 for the new resource.

BCreate a weighted routing policy. Configure a weight of 80 for the record that points to the original resource. Configure a weight of 20 for the record that points to the new resource.

CCreate a multivalue answer routing policy. Configure a weight of 80 for the record that points to the original resource. Configure a weight of 20 for the record that points to the new resource. Enable session affinity (sticky sessions).

DCreate a failover routing policy. Configure 80% of the website traffic to go to the original resource. Configure the remaining 20% of traffic as the failover record that points to the new resource.

Answer : B

Weighted routing in Route 53 allows you to direct a percentage of traffic to different resources by configuring specific weights. For this requirement, you can:

Weighted Routing Policy: This is the most suitable approach for gradually rolling out a new version by controlling traffic distribution.

Weight Configuration: Setting a weight of 80 for the original resource and 20 for the new resource ensures that 80% of the traffic continues to go to the existing version, while 20% is directed to the new version.

Other routing policies, such as failover and multivalue answer, are not intended for traffic distribution based on percentage; they serve different use cases.

Amazon SOA-C02 AWS Certified SysOps Administrator - Associate Exam Practice Test