Exam Logo

Amazon (SOA-C02) Exam Questions And Answers page 9

An Amazon EC2 instance needs to be reachable from the internet. The EC2 instance is in a subnet with the following route table:


Which entry must a SysOps administrator add to the route table to meet this requirement?
Networking and Content Delivery
An Amazon S3 Inventory report reveals that more than 1 million objects in an S3 bucket are not encrypted. These objects must be encrypted, and all future objects must be encrypted at the time they are written.

Which combination of actions should a SysOps administrator take to meet these requirements? (Choose two.)
Security and Compliance Cost and Performance Optimization
An errant process is known to use an entire processor and run at 100%. A SysOps administrator wants to automate restarting the instance once the problem occurs for more than 2 minutes.

How can this be accomplished?
Deployment, Provisioning, and Automation Security and Compliance
A new website will run on Amazon EC2 instances behind an Application Load Balancer. Amazon Route 53 will be used to manage DNS records.

What type of record should be set in Route 53 to point the website s apex domain name (for example, company.com ) to the Application Load Balancer?
Deployment, Provisioning, and Automation Networking and Content Delivery
A new website will run on Amazon EC2 instances behind an Application Load Balancer. Amazon Route 53 will be used to manage DNS records.

What type of record should be set in Route 53 to point the website s apex domain name (for example, company.com ) to the Application Load Balancer?
Deployment, Provisioning, and Automation Networking and Content Delivery
A new website will run on Amazon EC2 instances behind an Application Load Balancer. Amazon Route 53 will be used to manage DNS records.

What type of record should be set in Route 53 to point the website s apex domain name (for example, company.com ) to the Application Load Balancer?
Deployment, Provisioning, and Automation Networking and Content Delivery
An existing, deployed solution uses Amazon EC2 instances with Amazon EBS General Purpose SSD volumes, an Amazon RDS PostgreSQL database, an Amazon EFS file system, and static objects stored in an Amazon S3 bucket. The Security team now mandates that at-rest encryption be turned on immediately for all aspects of the application, without creating new resources and without any downtime.

To satisfy the requirements, which one of these services can the SysOps administrator enable at-rest encryption on?
Security and Compliance Networking and Content Delivery
An organization created an Amazon Elastic File System (Amazon EFS) volume with a file system ID of fs-85ba41fc, and it is actively used by 10 Amazon EC2 hosts. The organization has become concerned that the file system is not encrypted.

How can this be resolved?
Security and Compliance Networking and Content Delivery
An organization finds that a high number of gp2 Amazon EBS volumes are running out of space.

Which solution will provide the LEAST disruption with MINIMAL effort?
Monitoring and Reporting Networking and Content Delivery
An organization is running multiple applications for their customers. Each application is deployed by running a base AWS CloudFormation template that configures a new VPC. All applications are run in the same AWS account and AWS Region. A SysOps administrator has noticed that when trying to deploy the same AWS CloudFormation stack, it fails to deploy.

What is likely to be the problem?
Deployment, Provisioning, and Automation Networking and Content Delivery