Amazon SOA-C02 Quiz 5 Topic 11 Questions 21-25

Question: 1

A company has an Auto Scaling group of Amazon EC2 instances that scale based on average CPU utilization. The Auto Scaling group events log indicates an InsufficientlnstanceCapacity error.

Which actions should a SysOps administrator take to remediate this issue? (Select TWO.

AChange the instance type that the company is using.

BConfigure the Auto Scaling group in different Availability Zones.

CConfigure the Auto Scaling group to use different Amazon Elastic Block Store (Amazon EBS) volume sizes.

DIncrease the maximum size of the Auto Scaling group.

ERequest an increase in the instance service quota.

Show Answer

Question: 2

A company is using an AWS KMS customer master key (CMK) with imported key material The company references the CMK by its alias in the Java application to encrypt data The CMK must be rotated every 6 months

What is the process to rotate the key?

AEnable automatic key rotation for the CMK and specify a period of 6 months

BCreate a new CMK with new imported material, and update the key alias to point to the new CMK.

CDelete the current key material, and import new material into the existing CMK

DImport a copy of the existing key material into a new CMK as a backup, and set the rotation schedule for 6 months

Show Answer

Question: 3

A company is running a serverless application on AWS Lambd

a. The application stores data in an Amazon

RDS for MySQL DB instance. Usage has steadily increased, and recently there have been numerous "too many connections" errors when the Lambda function attempts to connect to the database. The company already has configured the database to use the maximum max_connections value that is possible.

What should a SysOps administrator do to resolve these errors?

ACreate a read replica of the database. Use Amazon Route 53 to create a weighted DNS record that
contains both databases.

BUse Amazon RDS Proxy to create a proxy. Update the connection string in the Lambda function.

CIncrease the value in the max_connect_errors parameter in the parameter group that the database uses.

DUpdate the Lambda function's reserved concurrency to a higher value.

Show Answer

Question: 4

A company is managing multiple AWS accounts in AWS Organizations The company is reviewing internal security of Its AWS environment The company's security administrator has their own AWS account and wants to review the VPC configuration of developer AWS accounts

Which solution will meet these requirements in the MOST secure manner?

ACreate an IAM policy in each developer account that has read-only access related to VPC resources Assign the policy to an IAM user Share the user credentials with the security administrator

BCreate an IAM policy in each developer account that has administrator access to all Amazon EC2 actions, including VPC actions Assign the policy to an IAM user Share the user credentials with the security administrator

CCreate an IAM policy in each developer account that has administrator access related to VPC resources Assign the policy to a cross-account IAM role Ask the security administrator to assume the role from their account

DCreate an IAM policy m each developer account that has read-only access related to VPC resources Assign the policy to a cross-account IAM role Ask the security administrator to assume the role from their account

Show Answer

Question: 5

A company is tunning a website on Amazon EC2 instances thai are in an Auto Scaling group When the website traffic increases, additional instances lake several minutes to become available because ot a long-running user data script that installs software A SysOps administrator must decrease the time that is required (or new instances to become available

Which action should the SysOps administrator take to meet this requirement?

AReduce the scaling thresholds so that instances are added before traffic increases

BPurchase Reserved Instances to cover 100% of the maximum capacity of the Auto Scaling group

CUpdate the Auto Scaling group to launch instances that have a storage optimized instance type

DUse EC2 Image Builder to prepare an Amazon Machine Image (AMI) that has pre-installed software

Show Answer

Amazon SOA-C02 Quiz:5 Topic:11 Questions:21-25