Pass the Amazon Web Services AWS Certified Associate SOA-C01 Questions and answers with ValidTests

Exam SOA-C01 Premium Access

View all detail and faqs for the SOA-C01 exam

Go to Exam

Viewing page 5 out of 8 pages

Viewing questions 41-50 out of questions

Questions # 41:

Users are struggling to connect to a single public-facing development web server using its public IP address on a unique port number ot 8181 The security group is correctly configured to allow access on that port and the network ACLs are using the default configuration. Which log type will confirm whether users are trying to connect to the correct port?

Options:

AWS CloudTrail logs

Elastic Load Balancer access logs

Amazon S3 access logs

VPC Flow Logs

Expert Solution

Questions # 42:

A web application accepts orders from online users and places the orders into an Amazon SQS queue. Amazon EC2 instances in an EC2 Auto Scaling group read the messages from the queue, process the orders, and email order confirmations to the users. The Auto Scaling group scales up and down based on the queue depth. At the beginning of each business day, users report confirmation emails are delayed.

What action will address this issue?

Options:

Create a scheduled scaling action to scale up in anticipation of the traffic.

Change the Auto Scaling group to scale up and down based on CPU utilization.

Change the launch configuration to launch larger EC2 instance types.

Modify the scaling policy to deploy more EC2 instances when scaling up.

Expert Solution

Questions # 43:

A SysOps Administrator is responsible for managing a fleet of Amazon EC2 instances. These EC2 instances upload build artifacts to a third-party service. The third-party service recently implemented stncl IP whitelisting that requires all build uploads to come from a single IP address.

What change should the Systems Administrator make to the existing build fleet to comply with this new requirement?

Options:

Move all of the EC2 instances behind a NAT gateway and provide the gateway IP address to the service.

Move all of the EC2 instances behind an internet gateway and provide the gateway IP address to the service.

Move all of the EC2 instances into a single Availability Zone and provide the Availability Zone IP address to the service.

Move all of the EC2 instances to a peered VPC and provide the VPC IP address to the service.

Expert Solution

Questions # 44:

A SysOps Administrator must take a team’s single existing AWS CloudFormation template and split it into

smaller, service-specific templates. All of the services in the template reference a single, shared Amazon S3 bucket.

What should the Administrator do to ensure that this S3 bucket can be referenced by all the service

templates?

Options:

Include the S3 bucket as a mapping in each template.

Add the S3 bucket as a resource in each template.

Create the S3 bucket in its own template and export it.

Generate the S3 bucket using StackSets.

D18912E1457D5D1DDCBD40AB3BF70D5D

Expert Solution

Questions # 45:

A company uses AWS CloudFormation to deploy its application infrastructure. Recently, a user accidentally changed a property of a database in a CloudFormation template and performed a stack update that caused an interruption to the application. A SysOps Administrator must determine how to modify the deployment process to allow the DevOps team to continue to deploy the infrastructure, but prevent against accidental modifications to specific resources.

Which solution will meet these requirements?

Options:

Set up an AWS Config rule to alert based on changes to any Cloud Formation stack. An AWS Lambda function can then describe the stack to determine if any protected resources were modified and cancel the operation.

Set up an Amazon CloudWatch Events event with a rule to trigger based on any CloudFormation API call. An AWS Lambda function can then describe the stack to determine if any protected resources were modified and cancel the operation.

Launch the CloudFormation templates using a stack policy with an explicit allow for all resources and an explicit deny of the protected resources with an action of Update:*

Attach an IAM policy to the DevOps team role that prevents a CloudFormation stack from updating, with a condition based on the specific Amazon Resource names (ARNs) of the protected resources.

Expert Solution

Questions # 46:

An application is running on an Amazon EC2 instance. A SysOps Administrator is tasked with allowing the application access to an Amazon S3 bucket.

What should be done to ensure optimal security?

Options:

Apply an S3 bucket policy to allow access from all EC2 instances

Create an IAM user and create a script to inject the credentials on boot

Create and assign an IAM role tor Amazon S3 access to the EC2 instance.

Embed an AWS credential file for an IAM user inside the Amazon Machine Image (AMI)

Expert Solution

Questions # 47:

A company runs a web application that users access using the domain name www example com The company manages the domain name using Amazon Route 53 The company created an Amazon CloudFront distribution in front of the application and would like www example com to access the application through CloudFront

What is the MOST cost-effective way to achieve this?

Options:

Create a CNAME record in Amazon Route 53 that points to the CloudFront distribution URL

Create an ALIAS record in Amazon Route 53 that points to the CloudFront distribution URL

Creole an A record in Amazon Route 53 that points to the public IP address of the web application

Create a PTR record in Amazon Route 53 that points to the public IP address of the web application

Expert Solution

Questions # 48:

An enterprise is using federated Security Assertion Markup Language (SAML) to access the AWS Management Console.

How should the SAML assertion mapping be configured?

Options:

Map the group attribute to an AWS group. The AWS group is assigned IAM policies that govern access to AWS resources.

Map the policy attribute to IAM policies the federated user is assigned to. These policies govern access to AWS resources.

Map the role attribute to an AWS role. The AWS role is assigned IAM policies that govern access to AWS resources.

Map the user attribute to an AWS user. The AWS user is assigned specific IAM policies that govern access to AWS resources.

Expert Solution

Questions # 49:

Developers are using 1AM access keys to manage AWS resources using AWS CL1 Company policy requires that access keys are automatically disabled when the access key age is greater than 90 days

Which solution will accomplish this?

Options:

Configure an Amazon CloudWatch alarm to trigger an AWS Lambda function that disables keys older than 90 days

Configure AWS Trusted Advisor to identify and disable keys older than 90 days.

Set a password policy on the account with a 90-day expiration

Use an AWS Config rule to identify noncompliant keys Create a custom AWS Systems Manager Automation document for remediation.

Expert Solution

Questions # 50:

A company runs an application that uses Amazon RDS for MySQL. During load testing of equivalent production volumes, the Development team noticed a significant increase in query latency. A SysOps Administrator concludes from investigating Amazon CloudWatch Logs that the CPU utilization on the RDS MySQL instance was at 100%.

Which action will resolve this issue?

Options:

Configure AWS Database Migration Service (AWS DMS) to allow Amazon RDS for MySQL to scale and accept more requests.

Configure RDS for MySQL to scale horizontally by additional nodes to offload write requests.

Enable the Multi-AZ feature for the RDS instance.

Modify the RDS MySQL instance so it is a larger instance type.

Expert Solution

Viewing page 5 out of 8 pages

Viewing questions 41-50 out of questions

Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Pass the Amazon Web Services AWS Certified Associate SOA-C01 Questions and answers with ValidTests

Exam SOA-C01 Premium Access

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options:

Options: