Free Amazon AWS Certified SysOps Administrator – Associate (2021) Exam SOA-C02 Exam Practice Test

A SysOps administrator uses AWS Systems Manager Session Manager to connect to instances After the SysOps administrator launches a new Amazon EC2 instance the EC2 instance does not appear in the Session Manager list of systems that are available for connection. The SysOps administrator verities that Systems Manager Agent is installed updated and running on the EC2 instanceWhat is the reason for this issue?

• The SysOps administrator does not have access to the key pair that is required for connection
• The SysOps administrator has not attached a security group to the EC2 instance to allow SSH on port 22.
• The EC2 instance does not have an attached IAM role that allows Session Manager to connect to the EC2 instance.
• The EC2 instance ID has not been entered into the Session Manager configuration

A development team recently deployed a new version of a web application to production After the release, penetration testing revealed a cross-site scripting vulnerability that could expose user dataWhich AWS service will mitigate this issue?

• AWS Shield Standard
• AWS WAF
• Elastic Load Balancing
• Amazon Cognito

A company has many accounts in an organization in AWS Organizations The company must automate resource provisioning from the organization's management account to the member accounts.Which solution will meet this requirement?

• Create an AWS CkHJdFormation change set Deploy the change set to all member accounts
• Create an AWS CtoudFormation nested stack Deploy the nested stack to all member accounts.
• Create an AWS CtoudFormation stack set Deploy the stack set to all member accounts.
• Create an AWS Serverless Application Model (AWS SAM) template. Deploy the template to all member accounts.

A company with multiple AWS accounts needs to obtain recommendations for AWS Lambda functions and identify optimal resource configurations for each Lambda function. How should a SysOps administrator provide these recommendations?

• Create an AWS Serverless Application Repository and export the Lambda function recommendations.
• Enable AWS Compute Optimizer and export the Lambda function recommendations
• Enable all features of AWS Organization and export the recommendations from AWS CloudTrail Insights.
• Run AWS Trusted Advisor and export the Lambda function recommendations

A company's web application is available through an Amazon CloudFront distribution and directly through an internet-facing Application Load Balancer (ALB) A SysOps administrator must make the application accessible only through the CloudFront distribution and not directly through the ALB. The SysOps administrator must make this change without changing the application codeWhich solution will meet these requirements?

• Modify the ALB type to internal Set the distribution's origin to the internal ALB domain name
• Create a Lambda@Edge function Configure the function to compare a custom header value in the request with a stored password and to forward the request to the origin in case of a match Associate the function with the distribution.
• Replace the ALB with a new internal ALB Set the distribution's origin to the internal ALB domain name Add a custom HTTP header to the origin settings for the distribution In the ALB listener add a rule to forward requests that contain the matching custom header and the header's value Add a default rule to return a fixed response code of 403.
• Add a custom HTTP header to the origin settings for the distribution in the ALB listener add a rule to forward requests that contain the matching custom header and the header's value Add a default rule to return a fixed response code of 403.

A SysOps administrator creates two VPCs, VPC1 and VPC2, in a company's AWS account The SysOps administrator deploys a Linux Amazon EC2 instance in VPC1 and deploys an Amazon RDS for MySQL DB instance in VPC2. The DB instance is deployed in a private subnet. An application that runs on the EC2 instance needs to connect to the database.What should the SysOps administrator do to give the EC2 instance the ability to connect to the database?

• Enter the DB instance connection string into the VPC1 route table.
• Configure VPC peering between the two VPCs.
• Add the same IPv4 CIDR range for both VPCs.
• Connect to the DB instance by using the DB instance's public IP address.

A company runs a multi-tier web application with two Amazon EC2 instances in one Availability Zone in the us-east-1 Region. A SysOps administrator must migrate one of the EC2 instances to a new Availability ZoneWhich solution will accomplish this?

• Copy the EC2 instance to a different Availability Zone. Terminate the original instance
• Create an Amazon Machine Image (AMI) from the EC2 instance and launch it in a different Availability Zone. Terminate the original instance
• Move the EC2 instance to a different Availability Zone using the AWS CLI.
• Stop the EC2 instance, modify the Availability Zone, and start the instance.

A SysOps administrator must implement a limited rollout of a new version of the website to 20% of customers using Amazon Route 53.Options:

• Create a target group in Route 53. Set the routing algorithm to Weighted. Configure a weight of 80 for the original resource. Configure a weight of 20 for the new resource.
• Create a weighted routing policy. Configure a weight of 80 for the record that points to the original resource. Configure a weight of 20 for the record that points to the new resource.
• Create a multivalue answer routing policy. Configure a weight of 80 for the record that points to the original resource. Configure a weight of 20 for the record that points to the new resource. Enable session affinity (sticky sessions).
• Create a failover routing policy. Configure 80% of the website traffic to go to the original resource. Configure the remaining 20% of traffic as the failover record that points to the new resource.

A company's AWS Lambda function is experiencing performance issues. The Lambda function performs many CPU-intensive operations. The Lambda function is not running fast enough and is creating bottlenecks in the system.What should a SysOps administrator do to resolve this issue?

• In the CPU launch options for the Lambda function, activate hyperthreading.
• Turn off the AWS managed encryption.
• Increase the amount of memory for the Lambda function.
• Load the required code into a custom layer.

A global company operates out of five AWS Regions. A SysOps administrator wants to identify all the company's tagged and untagged Amazon EC2 instances.The company requires the output to display the instance ID and tags.What is the MOST operationally efficient way for the SysOps administrator to meet these requirements?

• Create a tag-based resource group in AWS Resource Groups.
• Use AWS Trusted Advisor. Export the EC2 On-Demand Instances check results from Trusted Advisor.
• Use Cost Explorer. Choose a service type of EC2-Instances, and group by Resource.
• Use Tag Editor in AWS Resource Groups. Select all Regions, and choose a resource type of AWS::EC2::Instance.