SOA-C01 Exam Dumps - AWS Certified SysOps Administrator - Associate

Go to page:

Question # 33

A new Amazon Redshift Spectrum Cluster has been launched for a team of Business Analysis. When the team attempts to use the cluster to query the data in Amazon S3, they receive the following error:

What is one cause of this?

The cluster has Enhanced VPC Routing enabled and it must be turned off

The cluster is only a single node and needs to be expanded to multi-node.

The cluster login credentials are incorrect request new credentials from the Administrator

The cluster nodes are running in multiple Availability Zones, and all need to be placed in a single Availability Zone.

Full Access

Question # 34

An enterprise is using federated Security Assertion Markup Language (SAML) to access the AWS Management Console.

How should the SAML assertion mapping be configured?

Map the group attribute to an AWS group. The AWS group is assigned IAM policies that govern access to AWS resources.

Map the policy attribute to IAM policies the federated user is assigned to. These policies govern access to AWS resources.

Map the role attribute to an AWS role. The AWS role is assigned IAM policies that govern access to AWS resources.

Map the user attribute to an AWS user. The AWS user is assigned specific IAM policies that govern access to AWS resources.

Full Access

Question # 35

A company recently implemented an Amazon S3 lifecycle rule that accidentally deleted objects from one of its S3 buckets. The bucket has S3 versioning enabled.

Which actions will restore the objects? (Choose two.)

Use the AWS Management Console to delete the object delete markers.

Create a new lifecycle rule to delete the object delete markers that were created.

Use the AWS CLI to delete the object delete markers while specifying the version IDs of the delete markers.

Modify the existing lifecycle rule to delete the object delete markers that were created.

Use the AWS CLI to delete the object delete markers while specifying the name of the objects only.

Full Access

Question # 36

A company has deployed a NAT instance to allow web servers to obtain software updates from the internet. There latency on the NAT instance as the network grows. A SysOps Administrator needs to reduce latency on the instance in a manner that a efficient, cost effective, and allow for scaling with future demand.

Which action should be taken to accomplish this?

Add a second NAT instance and place both instance behind a load balancer.

Convert the NAT instance to a larger instance size.

Replace the NAT instance with NAT gateway.

Replace the NAT instance with a virtual private gateway.

Full Access

Question # 37

An existing data management application is running on a single Amazon EC2 instance and needs to be moved to a new AWS Region in another AWS account. How can a SysOps administrator achieve this while maintaining the security of the application?

Create an encrypted Amazon Machine Image (AMI) of the instance and make it public to allow the other account to search and launch an instance from it.

Create an AMI of the instance, add permissions for the AMI to the other AWS account, and start a new instance in the new region by using that AMI.

Create an AMI of the instance, copy the AMI to the new region, add permissions for the AMI to the other AWS account, and start the new instance.

Create an encrypted snapshot of the instance and make it public Provide only permissions to decrypt to the other AWS account.

Full Access

Question # 38

A SysOps Administrator is responsible for a legacy, CPU-heavy application. The application can only be scaled vertically Currently, the application is deployed on a single t2 large Amazon EC2 instance. The system is showing 90% CPU usage and significant performance latency alter a few minutes

What change should be made to alleviate the performance problem?

Change the Amazon EBS volume to Provisioned lOPs

Upgrade to a compute optimized instance

Add additional t2 large instances to the application

Purchase Reserved Instances

Full Access

Question # 39

A security officer has requested Ifial internet access be removed from subnets in a VPC. The subnets currently route internet-bound traffic to a NAT gateway. A SysOps administrator needs to remove this access while allowing access to Amazon S3.

Which solution will meet these requirements?

Set up an internet gateway. Update the route table on the subnets to use the internet gateway to route traffic to Amazon S3

Set up an S3 VPC gateway endpoint. Update the route table on the subnets to use the gateway endpoint to route traffic to Amazon S3.

Set up additional NAT gateways in each Availability Zone. Update the route table on the subnets to use the NAT gateways to route traffic to Amazon S3.

Set up an egress-only internet gateway. Update the route table on the subnets to use the egress-only internet gateway to route traffic to Amazon S3.

Full Access

Go to page: