SOA-C01 Exam Dumps - AWS Certified SysOps Administrator - Associate

Go to page:

Question # 25

A companyâ€™s static website hosted on Amazon S3 was launched recently, and is being used by tens of thousands of users. Subsequently, website users are experiencing 503 service unavailable errors.

Why are these errors occurring?

The request rate to Amazon S3 is too high.

There is an error with the Amazon RDS database.

The requests to Amazon S3 do not have the proper permissions.

The users are in different geographical region and Amazon Route 53 is restricting access.

Full Access

Question # 26

An application running on Amazon EC2 needs login credentials to access a database. The login credentials are stored in AWS Systems Manager Parameter Store as secure string parameters.

What is the MOST secure way to grant the application access to the credentials?

Create an IAM EC2 role for the EC2 instances and grant the role permission to read the Systems Manager parameters

Create an IAM group for the application and grant the group permissions to read the Systems Manager parameters

Create an IAM policy for the application and grant the policy permission to read the Systems Manager parameters

Create an IAM user for the application and grant the user permission to read the Systems Manager parameters

Full Access

Question # 27

A company is deploying a web service to Amazon EC2 instances behind an Elastic Load Balancer. All resources will be defined and created in a single AWS CloudFormation stack using a template. The creation of each EC2 instance will not be considered complete until an initialization script has been run successfully on the EC2 instance. The Elastic Load Balancer cannot be created until all EC2 instances have been created.

Which CloudFormation resource will coordinate the Elastic Load Balancer creation in the CloudFormation stack template?

CustomResource

DependsOn

Init

WaitCondition

Full Access

Question # 28

A company backs up data from its data center using a tape gateway on AWS Storage Gateway. The SysOps Administrator needs to reboot the virtual machine running Storage Gateway.

What process will protect data integrity?

Stop Storage Gateway and reboot the virtual machine, then restart Storage Gateway.

Reboot the virtual machine, then restart Storage Gateway.

Reboot the virtual machine.

Shut down the virtual machine and stop Storage Gateway, then turn on the virtual machine.

Full Access

Question # 29

A company has several AWS accounts and has set up consolidated billing through AWS Organizations. The total monthly bill has been increasing over several months, and a SysOps administrator has been asked to determine what is causing this increase.

What is the Most comprehensive tool that will accomplish this task?

AWS Cost Explorer

AWS Trusted Advisor

Cost allocation tags

Resource groups

Full Access

Question # 30

A company has created a separate AWS account for all development work to protect the production environment. In this development account, developers have permission to manipulate IAM policies and roles. Corporate policies require that developers are blocked from accessing some services.

What is the BEST way to grant the developers privileges in the development account while still complying with corporate policies?

Create a service control policy in AWS Organizations and apply it to the development account.

Create a customer managed policy in IAM and apply it to all users within the development account.

Create a job function policy in IAM and apply it to all users within the development account.

Create an IAM policy and apply it in API Gateway to restrict the development account.

Full Access

Question # 31

An organization is running multiple applications for their customers. Each application is deployed by running a base AWS CloudFormation template that configures a new VPC. All applications are run in the same AWS account and AWS Region A sysops administrator has noticed that when trying to deploy the same AWS CloudFormation stack, it fails to deploy

What is likely to be the problem?

The Amazon Machine Image used is not available in that region

The AWS CloudFormation template needs to be updated to the latest version

The VPC configuration parameters have changed and must be updated in the template

The account has reached the default limit for VPCs allowed

Full Access

Question # 32

A company's IT department noticed an increase in the spend of their Developer AWS account. There are over 50 Developers using the account and the Finance Tram wants to determine the service costs incurred by each Developer.

What should a SysOps Administrator do to collect this information? (Select TWO)

Activate the createdBy tag in the account

Analyze the usage with Amazon CloudWatch dashboards

Analyze the usage with Cost Explorer

Configure AWS Trusted Advisor to track resource usage

Create a billing alarm in AWS Budgets

Full Access

Go to page: