Amazon SOA-C02 Free Sample Exam Questions 2026

Here you can get the actual Amazon SOA-C02 exam questions and answers in PDF for free and for all questions premium file. These best Amazon AWS Certified SysOps Administrator - Associate (2021) Exam SOA-C02 PDF questions are for every Amazon users. Real SOA-C02 exam dumps that will assist you to crack the %certification% certification exam in the PDF format. For Advance preparation premium PDF files available for perfect exam preparation on reilable price option.

UNLOCK FULL
SOA-C02 Exam Features

In Just $35 You can Access

• All Official Question Types
• Interactive Web-Based Practice Test Software
• No Installation or 3rd Party Software Required
• Customize your practice sessions (Free Demo)
• 24/7 Customer Support

Get Full Access

Page: 1 / 97
Total Questions: 484

Questions & Answers PDF

• Question 1

  

  A SysOps administrator has created a VPC that contains a public subnet and a private subnet. Amazon EC2 instances that were launched in the private subnet cannot access the internet. The default network ACL is active on all subnets in the VPC, and all security groups allow all outbound traffic:Which solution will provide the EC2 instances in the private subnet with access to the internet?

  • Create a NAT gateway in the public subnet. Create a route from the private subnet to the NAT gateway.
  • Create a NAT gateway in the public subnet. Create a route from the public subnet to the NAT gateway.
  • Create a NAT gateway in the private subnet. Create a route from the public subnet to the NAT gateway.
  • Create a NAT gateway in the private subnet. Create a route from the private subnet to the NAT gateway.

  Reveal Answer Answer: A Next Question

• Question 2

  

  A SysOps administrator manages the caching of an Amazon CloudFront distribution that serves pages of a website. The SysOps administrator needs to configure the distribution so that the TTL of individual pages can vary. The TTL of the individual pages must remain within the maximum TTL and the minimum TTL that are set for the distribution.Which solution will meet these requirements?

  • Create an AWS Lambda function that calls the Create Invalid at ion API operation when a change in cache time is necessary.
  • Add a Cache-Control: max-age directive to the object at the origin when content is being returned to CloudFront.
  • Add a no-cache header through a Lambda@Edge function in response to the Viewer response.
  • Add an Expires header through a CloudFront function in response to the Viewer response.

  Reveal Answer Answer: B Next Question

• Question 3

  

  A global company operates out of five AWS Regions. A SysOps administrator wants to identify all the company's tagged and untagged Amazon EC2 instances.The company requires the output to display the instance ID and tags.What is the MOST operationally efficient way for the SysOps administrator to meet these requirements?

  • Create a tag-based resource group in AWS Resource Groups.
  • Use AWS Trusted Advisor. Export the EC2 On-Demand Instances check results from Trusted Advisor.
  • Use Cost Explorer. Choose a service type of EC2-Instances, and group by Resource.
  • Use Tag Editor in AWS Resource Groups. Select all Regions, and choose a resource type of AWS::EC2::Instance.

  Reveal Answer Answer: D Next Question

• Question 4

  

  A company hosts its website in the us-east-1 Region. The company is preparing to deploy its website into the eu-central-1 Region. Website visitors who are located in Europe should access the website that is hosted in eu-central-1. All other visitors access the website that is hosted in us-east-1. The company uses Amazon Route 53 to manage the website's DNS records.Which routing policy should a SysOps administrator apply to the Route 53 record set to meet these requirements?

  • Geolocation routing policy
  • Geoproximity routing policy
  • Latency routing policy
  • Multivalue answer routing policy

  Reveal Answer Answer: A Next Question

• Question 5

  

  A SysOps administrator has an AWS CloudFormation template of the company's existing infrastructure in us-west-2. The administrator attempts to use the template to launch a new stack in eu-west-1, but the stack only partially deploys, receives an error message, and then rolls back.Why would this template fail to deploy? (Select TWO.)

  • The template referenced an IAM user that is not available in eu-west-1. B. The template referenced an Amazon Machine Image (AMI) that is not available in eu-west-1.
  • The template did not have the proper level of permissions to deploy the resources.
  • The template requested services that do not exist in eu-west-1.
  • CloudFormation templates can be used only to update existing services.

  Reveal Answer Answer: B, D Next Question

• Question 6

  

  A company hosts a database on an Amazon RDS Multi-AZ DB instance. The database is not encrypted. The company's new security policy requires all AWS resources to be encrypted at rest and in transit.What should a SysOps administrator do to encrypt the database?

  • Configure encryption on the existing DB instance.
  • Take a snapshot of the DB instance. Encrypt the snapshot. Restore the snapshot to the same DB instance.
  • Encrypt the standby replica in a secondary Availability Zone. Promote the standby replica to the primary DB instance.
  • Take a snapshot of the DB instance. Copy and encrypt the snapshot. Create a new DB instance by restoring the encrypted copy.

  Reveal Answer Answer: D Next Question

• Question 7

  

  A company uses Amazon Route 53 to manage the public DNS records for the domain example.com. The company deploys an Amazon CloudFront distribution to deliver static assets for a new corporate website. The company wants to create a subdomain that is named 'static' and must route traffic for the subdomain to theCloudFront distribution.How should a SysOps administrator create a new record for the subdomain in Route 53?

  • Create a CNAME record. Enter static.cloudfront.net as the record name. Enter the CloudFront distribution's public IP address as the value.
  • Create a CNAME record. Enter static.example.com as the record name. Enter the CloudFront distribution's private IP address as the value.
  • Create an A record. Enter static.cloudfront.net as the record name. Enter the CloudFront distribution's ID as an alias target.
  • Create an A record. Enter static.example.com as the record name. Enter the CloudFront distribution's domain name as an alias target.

  Reveal Answer Answer: D Next Question

• Question 8

  

  A company is managing many accounts by using a single organization in AWS Organizations. The organization has all features enabled. The company wants to turn on AWS Config in all the accounts of the organization and in all AWS Regions.What should a Sysops administrator do to meet these requirements in the MOST operationally efficient way?

  • Use AVVS CloudFormation StackSets to deploy stack instances that turn on AWS Config in all accounts and in all Regions.
  • Use AWS CloudFormation StackSets to deploy stack policies that turn on AWS Config in all accounts and in all Regions.
  • Use service control policies (SCPs) to configure AWS Config in all accounts and in all Regions.
  • Create a script that uses the AWS CLI to turn on AWS Config in all accounts in the organization. Run the script from the organization's management account.

  Reveal Answer Answer: A Next Question

• Question 9

  

  A company has an application that runs on Amazon EC2 instances. The application stores data on an Amazon RDS for MySQL Single-AZ DB instance. Requests to the DB instance from the application include reads and writes.A SysOps administrator must implement a solution that provides failover for the DB instance. The solution must minimize application downtime.Which solution will meet these requirements?

  • Modify the DB instance to be a Multi-AZ DB instance deployment.
  • Add a read replica in the same Availability Zone where the DB instance is deployed.
  • Add the DB instance to an Auto Scaling group that has a minimum capacity of 2 and a desired capacity of 2.
  • Use RDS Proxy to configure a proxy in front of the DB instance.

  Reveal Answer Answer: A Next Question

• Question 10

  

  The SysOps administrator needs to prevent launching EC2 instances without a specific tag in the application OU.Options:

  • Create an IAM group that has a policy allowing ec2:RunInstances when the CostCenter-Project tag is present. Place all IAM users in this group.
  • Create a service control policy (SCP) that denies ec2:RunInstances when the CostCenter-Project tag is missing. Attach the SCP to the application OU.
  • Create an IAM role with a policy that allows ec2:RunInstances when the CostCenter-Project tag is present. Attach the IAM role to users in the application OU accounts.
  • Create a service control policy (SCP) that denies ec2:RunInstances when the CostCenter-Project tag is missing. Attach the SCP to the root OU.

  Reveal Answer Answer: B Next Question

Page: 1 / 97
Total Questions: 484

Previous Page Next Page