Passed Exam Today SOA-C02

AWS Certified SysOps Administrator - Associate (SOA-C02) Questions and Answers

Question 13

A company uses an AWS CloudFormation template to provision an Amazon EC2 instance and an Amazon RDS DB instance A SysOps administrator must update the template to ensure that the DB instance is created before the EC2 instance is launched

What should the SysOps administrator do to meet this requirement?

Options:

Add a wait condition to the template Update the EC2 instance user data script to send a signal after the EC2 instance is started

Add the DependsOn attribute to the EC2 instance resource, and provide the logical name of the RDS resource

Change the order of the resources in the template so that the RDS resource is listed before the EC2 instance resource

Create multiple templates Use AWS CloudFormation StackSets to wait for one stack to complete before the second stack is created

Question 14

A SysOps administrator is reviewing VPC Flow Logs to troubleshoot connectivity issues in a VPC. While reviewing the togs the SysOps administrator notices that rejected traffic is not listed.

What should the SysOps administrator do to ensure that all traffic is logged?

Options:

Create a new flow tog that has a titter setting to capture all traffic

Create a new flow log set the tog record format to a custom format Select the proper fields to include in the tog

Edit the existing flow log Change the fitter setting to capture all traffic

Edit the existing flow log. Set the log record format to a custom format Select the proper fields to include in the tog

Question 15

A large company is using AWS Organizations to manage its multi-account AWS environment. According to company policy, all users should have read-level access to a particular Amazon S3 bucket in a central account. The S3 bucket data should not be available outside the organization. A SysOps administrator must set up the permissions and add a bucket policy to the S3 bucket.

Which parameters should be specified to accomplish this in the MOST efficient manner?

Options:

Specify "' as the principal and PrincipalOrgld as a condition.

Specify all account numbers as the principal.

Specify PrincipalOrgld as the principal.

Specify the organization's management account as the principal.

Question 16

A SysOps administrator has enabled AWS CloudTrail in an AWS account. If CloudTrail is disabled, it must be re-enabled immediately. What should the SysOps administrator do to meet these requirements WITHOUT writing custom code?

Options:

Add the AWS account to AWS Organizations. Enable CloudTrail in the management account.

Create an AWS Config rule that is invoked when CloudTrail configuration changes. Apply the AWS-ConfigureCloudTrailLogging automatic remediation action.

Create an AWS Config rule that is invoked when CloudTrail configuration changes. Configure the rule to invoke an AWS Lambda function to enable CloudTrail.

Create an Amazon EventBridge (Amazon CloudWatch Events) hourly rule with a schedule pattern to run an AWS Systems Manager Automation document to enable CloudTrail.

Summer Special - Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: top65certs

AWS Certified SysOps Administrator - Associate (SOA-C02) Questions and Answers

Options:

Answer:

Explanation:

Options:

Answer:

Options:

Answer:

Explanation:

Options:

Answer: