[2021] SOA-C01 All-in-One Exam Guide Practice To your SOA-C01 Exam!
Preparations of SOA-C01 Exam 2021 Amazon AWS Certified Associate Unlimited 261 Questions
NEW QUESTION 24
A user is creating a Cloudformation stack. Which of the below mentioned limitations does not hold true for Cloudformation?
- A. One account by default is limited to 100 templates
- B. One account by default is limited to 20 stacks
- C. The template, parameter, output, and resource description fields are limited to 4096 characters
- D. The user can use 60 parameters and 60 outputs in a single template
Answer: A
Explanation:
Explanation
AWS Cloudformation is an application management tool which provides application modelling, deployment, configuration, management and related activities. The limitations given below apply to the Cloudformation template and stack. There are no limits to the number of templates but each AWS CloudFormation account is limited to a maximum of 20 stacks by default. The Template, Parameter, Output, and Resource description fields are limited to 4096 characters. The user can include up to 60 parameters and 60 outputs in a template.
NEW QUESTION 25
A sysops administrator is implementing SSL for a domain of an internet facing application running behind an Application load balancer (ALB). The administrator decides to use an SSL certificates from Amazon certificate Manager (ACM) to secure it. Upon creating a request for the ALB fully qualified domain name (FQND), it fails, and the error message "Domain not allowed" is displayed.
How can the administrator fix this issue?
- A. Place a new request with the proper domain name instead of the ALB FQDN.
- B. Contact the domain register and ask them to provide the verification required by AWS.
- C. Contact AWS support and verify the request by answering security challenge questions.
- D. Select the certificate request in the ACM console and resend the validation email.
Answer: A
NEW QUESTION 26
A SysOps Administrator must set up notifications for whenever combined billing exceeds a certain threshold for all AWS accounts within a company. The Administrator has set up AWS Organizations and enabled Consolidated Billing.
Which additional steps must the Administrator perform to set up the billing alerts?
- A. In the payer account: Enable billing alerts in the Billing and Cost Management console; publish an Amazon SNS message when the billing alert triggers.
- B. In the payer account: Enable billing alerts in the Billing and Cost Management console; set up a billing alarm in Amazon CloudWatch; publish an SNS message when the alarm triggers.
- C. In the payer account: Enable billing alerts in the Billing and Cost Management console; set up a billing alarm in the Billing and Cost Management console to publish an SNS message when the alarm triggers.
- D. In each account: Enable billing alerts in the Billing and Cost Management console; set up a billing alarm in Amazon CloudWatch; publish an SNS message when the alarm triggers.
Answer: B
Explanation:
Reference:
https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/monitor_estimated_charges_with_cloudwatch.html
NEW QUESTION 27
What is Amazon Import/Export?
- A. An international shipping division to help you enhance your sales reach
- B. A software developed by Amazon to migrate the data from/to your datacenter to AWS
- C. A properly configured service role and instance profile
- D. A service that accelerates transferring large amounts of data into and out of AWS using physical storage appliances
Answer: D
Explanation:
Explanation
AWS Import/Export accelerates transferring large amounts of data between the AWS cloud and portable storage devices that you mail to us. AWS transfers data directly onto and off of your storage devices using Amazon high-speed internal network.
NEW QUESTION 28
What does Amazon EBS stand for?
- A. Elastic Business Server
- B. Elastic Blade Server
- C. Elastic Block Store
- D. Elastic Basic Storage
Answer: C
Explanation:
Explanation
Amazon EBS stands for Elastic Block Store. It is a persistent storage that allows you to store the data of the Amazon EC2 Instances in a separated virtual storage automatically replicated within its Availability Zone in order to prevent component failure; with Amazon EBS the customer can add more storage every time they need it, and also add more performances with Amazon EBS Provisioned IOPS.
References:
NEW QUESTION 29
A web application accepts orders from online users and places the orders into an Amazon SQS queue. Amazon EC2 instances in an EC2 Auto Scaling group read the messages from the queue, process the orders, and email order confirmations to the users. The Auto Scaling group scales up and down based on the queue depth. At the beginning of each business day, users report confirmation emails are delayed.
What action will address this issue?
- A. Modify the scaling policy to deploy more EC2 instances when scaling up.
- B. Change the Auto Scaling group to scale up and down based on CPU utilization.
- C. Change the launch configuration to launch larger EC2 instance types.
- D. Create a scheduled scaling action to scale up in anticipation of the traffic.
Answer: A
NEW QUESTION 30
A user has deployed an application on his private cloud. The user is using his own monitoring tool. He wants to configure that whenever there is an error, the monitoring tool should notify him via SMS. Which of the below mentioned AWS services will help in this scenario?
- A. AWS SNS
- B. AWS SMS
- C. None because the user infrastructure is in the private cloud/
- D. AWS SES
Answer: A
Explanation:
Explanation
Amazon Simple Notification Service (Amazon SNS. is a fast, flexible, and fully managed push messaging service. Amazon SNS can be used to make push notifications to mobile devices. Amazon SNS can deliver notifications by SMS text message or email to the Amazon Simple Queue Service (SQS. queues or to any HTTP endpoint. In this case user can use the SNS apis to send SMS.
NEW QUESTION 31
Developers are using 1AM access keys to manage AWS resources using AWS CL1 Company policy requires that access keys are automatically disabled when the access key age is greater than 90 days Which solution will accomplish this?
- A. Configure AWS Trusted Advisor to identify and disable keys older than 90 days.
- B. Use an AWS Config rule to identify noncompliant keys Create a custom AWS Systems Manager Automation document for remediation.
- C. Configure an Amazon CloudWatch alarm to trigger an AWS Lambda function that disables keys older than 90 days
- D. Set a password policy on the account with a 90-day expiration
Answer: D
NEW QUESTION 32
A user has configured an SSL listener at ELB as well as on the back-end instances. Which of the below mentioned statements helps the user understand ELB traffic handling with respect to the SSL listener?
- A. ELB will intercept the request to add the cookie details if sticky session is enabled
- B. ELB will modify headers to add requestor details
- C. It is not possible to have the SSL listener both at ELB and back-end instances
- D. ELB will not modify the headers
Answer: D
Explanation:
Explanation
When the user has configured Transmission Control Protocol (TCP. or Secure Sockets Layer (SSL. for both front-end and back-end connections of the Elastic Load Balancer, the load balancer forwards the request to the back-end instances without modifying the request headers unless the proxy header is enabled. SSL does not support sticky sessions. If the user has enabled a proxy protocol it adds the source and destination IP to the header.
NEW QUESTION 33
A company's Security team wants to track data encryption events across all company AWS accounts. The team wants to capture all AWS KMS events related to deleting or rotating customer master keys (CMKs) from all production AWS accounts. The KMS events will be sent to the Security team's AWS account for monitoring.
How can this be accomplished?
- A. Create an event bus in the Security team's account, create a new Amazon CloudWatch Events rule that matches the KMS events in each production account, and then add the Security team's event bus as the target.
- B. Set up AWS CloudTrail for KMS events in every production account, and have the logs sent to an Amazon S3 bucket that is managed by the Security team.
- C. Create an AWS Config rule that checks for KMS keys that are in a pending deletion or rotated state in every production account, then send Amazon SNS notifications of any non-compliant KMS resources to the Security team.
- D. Create an AWS Lambda function that will run every few minutes in each production account, parse the KMS log for KMS events, and sent the information to an Amazon SQS queue managed by the Security team.
Answer: A
NEW QUESTION 34
An organization has developed a new memory-intensive application that is deployed to a large Amazon EC2 Linux fleet. There is concern about potential memory exhaustion, so the Development team wants to monitor memory usage by using Amazon CloudWatch.
What is the MOST efficient way to accomplish this goal?
- A. Deploy the solution to memory-optimized EC2 instances, and use the CloudWatch MemoryUtilization metric
- B. Enable the Memory Monitoring option by using AWS Config
- C. Monitor memory by using a script within the instance, and send it to CloudWatch as a custom metric
- D. Install the AWS Systems Manager agent on the applicable EC2 instances to monitor memory
Answer: B
NEW QUESTION 35
A sys admin is trying to understand EBS snapshots. Which of the below mentioned statements will not be useful to the admin to understand the concepts about a snapshot?
- A. It is recommended to stop the instance before taking a snapshot for consistent data
- B. The snapshot is incremental
- C. The snapshot captures the data that has been written to the hard disk when the snapshot command was executed
- D. The snapshot is synchronous
Answer: D
Explanation:
Explanation
The AWS snapshot is a point in time backup of an EBS volume. When the snapshot command is executed it will capture the current state of the data that is written on the drive and take a backup. For a better and consistent snapshot of the root EBS volume, AWS recommends stopping the instance. For additional volumes it is recommended to unmount the device. The snapshots are asynchronous and incremental.
NEW QUESTION 36
An application running on Amazon EC2 instances in an Auto Scaling group across multiple Availability Zones was deployed using an AWS CloudFormation template. A sysops administrator has patched the Amazon Machine Image (AMI) version and must update all the EC2 instances to use the new AMI.
How should Ihe administrator use CloudFormation to apply the new AMI while maintaining a minimum level of active instances to ensure service continuity?
- A. Run the awa cloudformation update-atack command with the -rollback-configuration option.
- B. Deploy a second CloudFormation stack and use Amazon Route 53 to redirect traffic to the new stack.
- C. Update the CloudFormation template with the new AMI ID. then reboot the EC2 instances.
- D. Set an AutoScal ingRollingUpdate policy in the CloudFormation template to update the stack.
Answer: D
NEW QUESTION 37
A user has enabled detailed CloudWatch monitoring with the AWS Simple Notification Service. Which of the below mentioned statements helps the user understand detailed monitoring better?
- A. AWS CloudWatch does not support monitoring for SNS
- B. SNS cannot provide data every minute
- C. SNS will send data every minute after configuration
- D. There is no need to enable since SNS provides data every minute
Answer: B
Explanation:
Explanation
CloudWatch is used to monitor AWS as well as the custom services. It provides either basic or detailed monitoring for the supported AWS products. In basic monitoring, a service sends data points to CloudWatch every five minutes, while in detailed monitoring a service sends data points to CloudWatch every minute. The AWS SNS service sends data every 5 minutes. Thus, it supports only the basic monitoring. The user cannot enable detailed monitoring with SNS.
NEW QUESTION 38
A SysOps Administrator must set up notifications for whenever combined billing exceeds a certain threshold for all AWS accounts within a company. The Administrator has set up AWS Organizations and enabled Consolidated Billing.
Which additional steps must the Administrator perform to set up the billing alerts?
- A. In the payer account: Enable billing alerts in the Billing and Cost Management console; publish an Amazon SNS message when the billing alert triggers.
- B. In the payer account: Enable billing alerts in the Billing and Cost Management console; set up a billing alarm in Amazon CloudWatch; publish an SNS message when the alarm triggers.
- C. In the payer account: Enable billing alerts in the Billing and Cost Management console; set up a billing alarm in the Billing and Cost Management console to publish an SNS message when the alarm triggers.
- D. In each account: Enable billing alerts in the Billing and Cost Management console; set up a billing alarm in Amazon CloudWatch; publish an SNS message when the alarm triggers.
Answer: B
NEW QUESTION 39
Amazon Relational Database Service integrates with _____, a service that lets your organization create users and groups under your organization's AWS account and assign unique security credentials to each user.
- A. Amazon RDS tags
- B. Amazon EMR
- C. AWS Lambda
- D. AWS IAM
Answer: D
Explanation:
Explanation
Amazon Relational Database Service integrates with AWS IAM, a service that lets your organization create users and groups under your organization's AWS account and assign unique security credentials to each user.
References:
NEW QUESTION 40
......
Focus on SOA-C01 All-in-One Exam Guide For Quick Preparation: https://www.vcetorrent.com/SOA-C01-valid-vce-torrent.html