Amazon SOA-C02 Quiz 3 Topic 6 Questions 11-15

Question: 1

A company is running a website on Amazon EC2 instances that are in an Auto Scaling group. When the website traffic increases, additional instances take several minutes to become available because of a longrunning user data script that installs software. A SysOps administrator must decrease the time that is required for new instances to become available.

Which action should the SysOps administrator take to meet this requirement?

AReduce the scaling thresholds so that instances are added before traffic increases.

BPurchase Reserved Instances to cover 100% of the maximum capacity of the Auto Scaling group.

CUpdate the Auto Scaling group to launch instances that have a storage optimized instance type.

DUse EC2 Image Builder to prepare an Amazon Machine Image (AMI) that has pre-installed software.

Show Answer

Question: 2

A company has an infernal web application that runs on Amazon EC2 instances behind an Application Load

Balancer. The instances run in an Amazon EC2 Auto Scaling group in a single Availability Zone. A SysOps

administrator must make the application highly available.

Which action should the SysOps administrator take to meet this requirement?

AIncrease the maximum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.

BIncrease the minimum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.

CUpdate the Auto Scaling group to launch new instances in a second Availability Zone in the same AWS Region.

DUpdate the Auto Scaling group to launch new instances in an Availability Zone in a second AWS Region.

Show Answer

Question: 3

A company hosts its website on Amazon EC2 instances behind an Application Load Balancer. The company manages its DNS with Amazon Route 53, and wants to point its domain's zone apex to the website.

Which type of record should be used to meet these requirements?

AAn AAAA record for the domain's zone apex

BAn A record for the domain's zone apex

CA CNAME record for the domain's zone apex

DAn alias record for the domain's zone apex

Show Answer

Question: 4

An Amazon S3 Inventory report reveals that more than 1 million objects in an S3 bucket are not encrypted.

These objects must be encrypted, and all future objects must be encrypted at the time they are written.

Which combination of actions should a SysOps administrator take to meet these requirements? (Choose two.)

ACreate an AWS Config rule that runs evaluations against configuration changes to the S3 bucket. When an unencrypted object is found, run an AWS Systems Manager Automation document to encrypt the object in place.

BEdit the properties of the S3 bucket to enable default server-side encryption.

CFilter the S3 Inventory report by using S3 Select to find all objects that are not encrypted. Create an S3 Batch Operations job to copy each object in place with encryption enabled.

DFilter the S3 Inventory report by using S3 Select to find all objects that are not encrypted. Send each object name as a message to an Amazon Simple Queue Service (Amazon SQS) queue. Use the SQS queue to invoke an AWS Lambda function to tag each object with a key of 'Encryption' and a value of 'SSE-KMS'.

EUse S3 Event Notifications to invoke an AWS Lambda function on all new object-created events for the S3 bucket. Configure the Lambda function to check whether the object is encrypted and to run an AWS Systems Manager Automation document to encrypt the object in place when an unencrypted object is found.

Show Answer

Question: 5

A SysOps administrator is notified that an Amazon EC2 instance has stopped responding. The AWS

Management Console indicates that the system checks are failing.

What should the administrator do first to resolve this issue?

AReboot the EC2 instance so it can be launched on a new host.

BStop and then start the EC2 instance so that it can be launched on a new host.

CTerminate the EC2 instance and relaunch it.

DView the AWS CloudTrail log to investigate what changed on the EC2 instance.

Show Answer

Amazon SOA-C02 Quiz:3 Topic:6 Questions:11-15