Halloween Sale Special - 75% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: big75certs

Note! Following SOA-C01 Exam is Retired now. Please select the alternative replacement for your Exam Certification. The new exam code is SOA-C03

Verified By IT Certified Experts

CertsTopics.com Certified Safe Files

Up-To-Date Exam Study Material

99.5% High Success Pass Rate

100% Accurate Answers

Instant Downloads

Exam Questions And Answers PDF

Try Demo Before You Buy

Certification Exams with Helpful Questions And Answers

AWS Certified SysOps Administrator - Associate Questions and Answers

Question 1

A SysOps Administrator is attempting to use AWS Systems Manager Session Manager to initiate a SSH session with an Amazon EC2 instance running on a custom Linux Amazon Machine Image (AMI) The Administrator cannot find the target instance in the Session Manager console

Which combination of actions with solve this issue? (Select TWO )

Options:

A.

Add Systems Manager permissions to the instance profile

B.

Configure the bucket used by Session Manager logs to allow write access

C.

install Systems Manager Agent on the instance

D.

Modify the instance security group to allow inbound traffic on SSH port 22

E.

Reboot the instance with a new SSH key pair named ssm-user

Buy Now
Question 2

The Security team has decided that there will be no public internet access to HTTP (TCP port 80) because if it is moving to HTTPS for all incoming web traffic. The team has asked a SysOps Administrator to provide a report on any security groups that are not compliant.

What should the SysOps Administrator do to provide near real-time compliance reporting?

Options:

A.

Enable AWS Trusted Advisor and show the Security team that the Security Groups unrestricted access check will alarm.

B.

Schedule an AWS Lambda function to run hourly to scan and evaluate all security groups, and send a report to the Security team.

C.

Use AWS Config to enable the restricted-common-ports rule, and add port 80 to the parameters.

D.

Use Amazon Inspector to evaluate the security groups during scans, and send the completed reports to the Security team.

Question 3

An application is being developed that will be served across a fleet of Amazon EC2 instances, which require a consistent view of persistent data. Items stored vary in size from 1 KB lo 300MB; the items are read frequently, created occasionally, and often require partial changes without conflict. The data store is not expected to grow beyond 2TB. and items will be expired according to age and content type.

Which AWS service solution meets these requirements?

Options:

A.

Amazon S3 buckets with lifecycle policies to delete old objects

B.

Amazon ROS PostgreSQL and a job that deletes rows based on age and file type columns.

C.

Amazon EFS and a scheduled process to delete files based on age and extension.

D.

An EC2 instance store synced on boot from a central Amazon EBS-backed instance.