Amazon SOA-C02 Quiz 1 Topic 5 Questions 1-5

Question: 1

If your AWS Management Console browser does not show that you are logged in to an AWS account, close the browser and relaunch the

console by using the AWS Management Console shortcut from the VM desktop.

If the copy-paste functionality is not working in your environment, refer to the instructions file on the VM desktop and use Ctrl+C, Ctrl+V or Command-C , Command-V.

Configure Amazon EventBridge to meet the following requirements.

1. use the us-east-2LRegion for all resources,

2. Unless specified below, use the default configuration settings.

3. Use your own resource naming unless a resource

name is specified below.

4. Ensure all Amazon EC2 events in the default event

bus are replayable for the past 90 days.

5. Create a rule named RunFunction to send the exact message every 1 5 minutes to an existing AWS Lambda function named LogEventFunction.

6. Create a rule named SpotWarning to send a notification to a new standard Amazon SNS topic named TopicEvents whenever an Amazon EC2

Spot Instance is interrupted. Do NOT create any topic subscriptions. The notification must match the following structure:

q1_SOA-C02

Input template:

'' The EC2 Spot Instance <instance> has been on account.

AExplanation:
Solution as given below.

Show Answer

Question: 2

A SysOps administrator has successfully deployed a VPC with an AWS Cloud Formation template The SysOps administrator wants to deploy me same template across multiple accounts that are managed through AWS Organizations.

AAssume the OrganizationAccountAcccssKolc IAM role from the management account. Deploy the template in each of the accounts

BCreate an AWS Lambda function to assume a role in each account Deploy the template by using the AWS CloudFormation CreateStack API call

CCreate an AWS Lambda function to query fc a list of accounts Deploy the template by using the AWS Cloudformation

DCreateStack API call. Use AWS CloudFormation StackSets from the management account to deploy the template in each of the accounts

Show Answer

Question: 3

A company has mandated the use of multi-factor authentication (MFA) for all IAM users, and requires users to make all API calls using the CLI. However. users are not prompted to enter MFA tokens, and are able to run CLI commands without MF

AIn an attempt to enforce MFA, the company attached an IAM policy to all users that denies API calls that have not been authenticated with MFA.
What additional step must be taken to ensure that API calls are authenticated using MFA?

AEnable MFA on IAM roles, and require IAM users to use role credentials to sign API calls.

BAsk the IAM users to log into the AWS Management Console with MFA before making API calls using the CLI.

CRestrict the IAM users to use of the console, as MFA is not supported for CLI use.

DRequire users to use temporary credentials from the get-session token command to sign API calls.

Show Answer

Question: 4

A company is using an AWS KMS customer master key (CMK) with imported key material The company references the CMK by its alias in the Java application to encrypt data The CMK must be rotated every 6 months

What is the process to rotate the key?

AEnable automatic key rotation for the CMK and specify a period of 6 months

BCreate a new CMK with new imported material, and update the key alias to point to the new CMK.

CDelete the current key material, and import new material into the existing CMK

DImport a copy of the existing key material into a new CMK as a backup, and set the rotation schedule for 6 months

Show Answer

Question: 5

update an existing AWS CloudFormation stack. If needed, a copy 0t the CloudFormation template is available in an Amazon SB bucket named cloudformation-bucket

1. Use the us-east-2 Region for all resources.

2. Unless specified below, use the default configuration settings.

3. update the Amazon EQ instance named Devinstance by making the following changes to the stack named 1700182:

a) Change the EC2 instance type to us-east-t2.nano.

b) Allow SSH to connect to the EC2 instance from the IP address range

192.168.100.0/30.

c) Replace the instance profile IAM role with IamRoleB.

4. Deploy the changes by updating the stack using the CFServiceR01e role.

5. Edit the stack options to prevent accidental deletion.

6. Using the output from the stack, enter the value of the Prodlnstanceld in the text box below:

q5_SOA-C02

AExplanation:
Solution as given below.

Show Answer

Amazon SOA-C02 Quiz:1 Topic:5 Questions:1-5