Home
Amazon
SOA-C02 Exam Questions

Home ❯
Amazon ❯
SOA-C02 Exam Questions

Free SOA-C02 Exam Questions - Amazon SOA-C02 Exam

Amazon SOA-C02 Exam

AWS Certified SysOps Administrator - Associate

Total Questions: 535

Last Updated : 23-04-2025

Get Premium Files

Amazon SOA-C02 Exam - Prepare from Latest, Not Redundant Questions!

Many candidates desire to prepare their Amazon SOA-C02 exam with the help of only updated and relevant study material. But during their research, they usually waste most of their valuable time with information that is either not relevant or outdated. Study4Exam has a fantastic team of subject-matter experts that make sure you always get the most up-to-date preparatory material. Whenever there is a change in the syllabus of the AWS Certified SysOps Administrator - Associate exam, our team of experts updates SOA-C02 questions and eliminates outdated questions. In this way, we save you money and time.

Amazon SOA-C02 Exam Sample Questions:

Q1.

You need to update an existing AWS CloudFormation stack. If needed, a copy to the CloudFormation template is available in an Amazon SB bucket named cloudformation-bucket

1. Use the us-east-2 Region for all resources.

2. Unless specified below, use the default configuration settings.

3. update the Amazon EQ instance named Devinstance by making the following changes to the stack named 1700182:

a) Change the EC2 instance type to us-east-t2.nano.

b) Allow SSH to connect to the EC2 instance from the IP address range

192.168.100.0/30.

c) Replace the instance profile IAM role with IamRoleB.

4. Deploy the changes by updating the stack using the CFServiceR01e role.

5. Edit the stack options to prevent accidental deletion.

6. Using the output from the stack, enter the value of the Prodlnstanceld in the text box below:

q1_SOA-C02

AExplanation:
Here are the steps to update an existing AWS CloudFormation stack:
Log in to the AWS Management Console and navigate to the CloudFormation service in the us-east-2 Region.
Find the existing stack named 1700182 and click on it.
Click on the 'Update' button.
Choose 'Replace current template' and upload the updated CloudFormation template from the Amazon S3 bucket named 'cloudformation-bucket'
In the 'Parameter' section, update the EC2 instance type to us-east-t2.nano and add the IP address range 192.168.100.0/30 for SSH access.
Replace the instance profile IAM role with IamRoleB.
In the 'Capabilities' section, check the checkbox for 'IAM Resources'
Choose the role CFServiceR01e and click on 'Update Stack'
Wait for the stack to be updated.
Once the update is complete, navigate to the stack and click on the 'Stack options' button, and select 'Prevent updates to prevent accidental deletion'
To get the value of the Prodlnstanceld , navigate to the 'Outputs' tab in the CloudFormation stack and find the key 'Prodlnstanceld'. The value corresponding to it is the value that you need to enter in the text box below.
Note:
You can use AWS CloudFormation to update an existing stack.
You can use the AWS CloudFormation service role to deploy updates.
You can refer to the AWS CloudFormation documentation for more information on how to update and manage stacks: https://aws.amazon.com/cloudformation/

Q2.

A company plans to deploy a database on an Amazon Aurora MySQL DB cluster. The database will store data for a demonstration environment. The data must be reset on a daily basis.

What is the MOST operationally efficient solution that meets these requirements?

ACreate a manual snapshot of the DB cluster after the data has been populated. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function on a daily basis. Configure the function to restore the snapshot and then delete the previous DB cluster.

BEnable the Backtrack feature during the creation of the DB cluster. Specify a target backtrack window of 48 hours. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function on a daily basis. Configure the function to perform a backtrack operation.

CExport a manual snapshot of the DB cluster to an Amazon S3 bucket after the data has been populated. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function on a daily basis. Configure the function to restore the snapshot from Amazon S3.

DSet the DB cluster backup retention period to 2 days. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function on a daily basis. Configure the function to restore the DB cluster to a point in time and then delete the previous DB cluster.

Q3.

A Sysops administrator has created an Amazon EC2 instance using an AWS CloudFormation template in the us-east-I Region. The administrator finds that this

template has failed to create an EC2 instance in the us-west-2 Region.

What is one cause for this failure?

AResource tags defined in the CloudFormation template are specific to the us-east-I Region.

BThe Amazon Machine Image (AMI) ID referenced in the CloudFormation template could not be found in the us-west-2 Region.

CThe cfn-init script did not run during resource provisioning in the us-west-2 Region.

DThe IAM user was not created in the specified Region.

Q4.

A company hosts a web application on an Amazon EC2 instance. The web server logs are published to Amazon CloudWatch Logs. The log events have the same structure and include the HTTP response codes that are associated with the user requests. The company needs to monitor the number of times that the web server returns an HTTP 404 response.

What is the MOST operationally efficient solution that meets these requirements?

ACreate a CloudWatch Logs metric filter that counts the number of times that the web server returns an HTTP 404 response.

BCreate a CloudWatch Logs subscription filter that counts the number of times that the web server returns an HTTP 404 response.

CCreate an AWS Lambda function that runs a CloudWatch Logs Insights query that counts the number of 404 codes in the log events during the past hour.

DCreate a script that runs a CloudWatch Logs Insights query that counts the number of 404 codes in the log events during the past hour.

Q5.

A company has a compliance requirement that no security groups can allow SSH ports to be open to all IP addresses. A SysOps administrator must implement a solution that will notify the company's SysOps team when a security group rule violates this requirement. The solution also must remediate the security group rule automatically.

Which solution will meet these requirements?

AZ. Create an Amazon EventBridge (Amazon CloudWatch Events) rule that invokes an AWS Lambda function when a security group changes. Configure the Lambda function to evaluate the security group for compliance, remove all inbound security group rules on all ports, and notify the SysOps team if the security group is noncompliant.

BCreate an AWS CloudTrail metric filter for security group changes. Create an Amazon CloudWatch alarm to notify the SysOps team through an Amazon Simple Notification Service (Amazon SNS) topic when (he metric is greater than 0. Subscribe an AWS Lambda function to the SNS topic to remediate the security group rule by removing the rule.

CActivate the AWS Config restricted-ssh managed rule. Add automatic remediation to the AWS Config rule by using the AWS Systems Manager Automation AWS-
DisablePublicAccessForSecurityGroup runbook. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to notify the SysOps team when the rule is noncompliant.

DCreate an AWS CloudTrail metric filter for security group changes. Create an Amazon CloudWatch alarm for when the metric is greater than 0. Add an AWS Systems Manager action to the CloudWatch alarm to suspend the security group by using the Systems Manager Automation AWS-DisablePublicAccessForSecurityGroup runbook when the alarm is in ALARM state. Add an Amazon Simple Notification Service (Amazon SNS) topic as a second target to notify the SysOps team.

Solutions:

Question: 1 Answer: A

Question: 2 Answer: D

Question: 3 Answer: B

Question: 4 Answer: A

Question: 5 Answer: C

Disscuss Amazon SOA-C02 Topics, Questions or Ask Anything Related

Submit Cancel

− ∔

Vinod S 4 days ago

In the SOA-CO2 exam has "Lab" questions also. How you are providing that information in the pdf documents?

upvoted 1 times

...

− ∔

Layla 5 days ago

Although my preparation was good, I was nervous about my preparation. These practice tests contain real exam questions that gave me confidence and helped me pass the soa c02 amazon associate exam on the first try.

upvoted 1 times

− ∔

Admin 4 days ago

Thank you! Your feedback is valuable to us

upvoted 1 times

...

− ∔

Marie 6 days ago

I am a happy Study4Exam customer. I just passed my soa c02 amazon associate exam

upvoted 1 times

− ∔

Admin 5 days ago

Congratulations and Thanks for such kind words.

upvoted 1 times

...

− ∔

Christine 6 days ago

How long will the product be valid for a refund and support claim?

upvoted 1 times

− ∔

Admin 6 days ago

Since you bought the product, you have owned it for life. But the money-back guarantee and support are valid for 90 days after the purchase of your product.

upvoted 1 times

...