Free AWS Certified SysOps Administrator – Associate Exam SOA-C01 Exam Practice Test

A SysOps Administrator is responsible for maintaining an Amazo EC2 instance that acts as a bastion host. The Administrator can sucessfully connect to the instance using SSH, but attempts to ping the instance result in a timeout.What is one reason for the issue?

• The instance does not have an Elastic IP address.
• The instance has security group that does not allow Internet Control Message Protocol (ICMP) traffic
• The instance is not set up in a VPC using AWS Direct Connect.
• The instance is running in a peered VPC.

A SysOps Administrator is notified that an automated failover of an Amazon RDS database has occurred.What are possible causes for this? (Choose two.)

• A read contention on the database.
• A storage failure on the primary database.
• A write contention on the database.
• Database corruption errors.
• The database instance type was changed.

Which type routing protocol operates by exchanging the entire routing information?

• exterior gateway protocols
• link-state protocols
• distance-vector protocols
• Path-vector protocols

A company manages multiple AWS accounts and wants to provide access to AWS from a single management account using an existing on-premises Microsoft Active Directory domain. Which solution will meet these requirements with the LEAST amount of effort?

• Create an Active Directory connector using AWS Directory Service. Create 1AM users in the target accounts with the appropriate trust policy.
• Create an Active Directory connector using AWS Directory Service. Associate the directory with AWS Single Sign-On (AWS SSO). Configure user access to target accounts through AWS SSO.
• Create an Amazon Cognito federated identity pool. Associate the pool identity with the on-premises directory. Configure the 1AM roles with the appropriate trust policy,
• Create an identity provider in AWS 1AM associated with the on-premises directory. Create 1AM roles in the target accounts with the appropriate trust policy.

A recent AWS CloudFormation stack update has failed and returned the error update_rollback_failed. A Sysops administrator is tasked with returning the CloudFormation stack to its previous working state.What must be done to accomplish this?

• Fix the error that caused the attack to fail, then select the continue update Rollback action in the console.
• Select the update stack action with a working template in the console.
• Update the password of the IAM user, then select the continue update rollback action in the console.
• Use the AWS CLI to manually change the stack status to update_complete, then continue updating the stack with a working template.

A SysOps Administrator needs an Amazon EBS volume type for a big data application. The application data is accessed infrequently and stored sequentially.What EBS volume type will be the MOST cost-effective solution?

• Provisioned IOPS SSD (io1)
• Cold HDD (sc1)
• Throughput Optimized HDD (st1)
• General Purpose SSD (gp2)

An application running on Amazon EC2 allows users to launch batch jobs for data analysis. The jobs are run asynchronously, and the user is notified when they are complete. While multiple jobs can run concurrently, a user's request need not be fulfilled for up to 24 hours. To run a job, the application launches an additional EC2 instance that performs all the analytics calculations. A job takes between 75 and 110 minutes to complete and cannot be interrupted.What is the MOST cost-effective way to run this workload?

• Run the application on On-Demand EC2 instances. Run the jobs on Spot Instances with a specified duration.
• Run the application on Reserved Instance EC2 instances. Run the jobs on AWS Lambda.
• Run the application on On-Demand EC2 instances. Run the jobs on On-Demand EC2 instances.
• Run the application on Reserved instance EC2 instances. Run the jobs on Spot Instances with a specified duration.

In configuring an Amazon Route 53 health check, a SysOps Administrator selects 'Yes' to the String Matching option in the Advanced Configuration section. In the Search String box, the Administrator types the following text: /html.This is to ensure that the entire page is loading during the health check. Within 5 minutes of enabling thehealth check, the Administrator receives an alert stating that the check failed. However, when theAdministrator navigates to the page, it loads successfully.What is the MOST likely cause of this false alarm?

• The search string is not HTML-encoded.
• The search string must be put in quotes.
• The search string must be escaped with a backslash (\) before the forward slash (/).
• The search string is not in the first 5120 bytes of the tested page. https://docs.aws.amazon.com/Route53/latest/APIReference/API_HealthCheckConfig.html HTTP_STR_MATCH: Route 53 tries to establish a TCP connection. If successful, Route 53 submits an HTTP request and searches the first 5,120 bytes of the response body for the string that you specify in SearchString.

A company needs to restrict access to an Amazon S3 bucket to Amazon EC2 instances in a VPC only All traffic must be over the AWS private network What actions should the SysOps Administrator take to meet these requirements?

• Create a VPC endpoint for the S3 bucket, and create an IAM policy that conditionally limits al S3 actions on the bucket to the VPC endpoint as the source
• Create a VPC endpoint for the S3 bucket and create a S3 bucket policy that conditionally limits all S3 actions on the bucket to the VPC endpoint as the source
• Create a service-linked role for Amazon EC2 that allows the EC2 instances to interact directly with Amazon S3, and attach an IAM policy to the role that allows the EC2 instances full access to the S3 bucket
• Create a NAT gateway in the VPC, and modify the VPC route table to route all traffic destined for Amazon S3 through the NAT gateway

A company's Information Security team has requested information on AWS environment compliance for Payment Card Industry (PCI) workloads. They have requested assistance in understanding what specific areas of the PCI standards are the responsibility of the company.Which AWS tool will provide the necessary information?

• AWS Macie
• AWS Artifact
• AWS OpsWorks
• AWS Organizations