Amazon exam practice test / soa-c02 dumps / soa-c02 exam / soa-c02 exam dumps / soa-c02 pdf / soa-c02 practice test

[SOA-C02 Questions Newly] Truly Amazon SOA-C02 Dumps Replace  

Do you want to pass the Amazon certification exam SOA-C02 quickly? Examdemosimulation is here to provide Amazon with n updated SOA-C02 dumps Mar2022 to help you pass the certification exam with a high score. You can get the latest Amazon exam dumps Learning Material Q&A 1-12 here.

Pass4itSure is the best learning resource for you to prepare for the Amazon certification exam SOA-C02 dumps https://www.pass4itsure.com/soa-c02.html. You will receive the latest Amazon SOA-C02 exam preparation materials in two formats:

  • Web-based SOA-C02 practice exam
  • SOA-C02 PDF (actual question)

Amazon SOA-C02 Dumps Real Question Answers 1-12

Q&A 1

A company is running a website on Amazon EC2 instances behind an Application Load Balancer (ALB). The company configured an Amazon CloudFront distribution and set the ALB as the origin.

The company created an Amazon Route 53 CNAME record to send all traffic through the CloudFront distribution. As an unintended side effect, mobile users are
now being served the desktop version of the website.

Which action should a SysOps administrator take to resolve this issue?

A. Configure the CloudFront distribution behavior to forward the User-Agent header.
B. Configure the CloudFront distribution origin settings. Add a User-Agent header to the list of origin custom headers.
C. Enable IPv6 on the ALB. Update the CloudFront distribution origin settings to use the dual-stack endpoint.
D. Enable IPv6 on the CloudFront distribution. Update the Route 53 record to use the dual-stack endpoint.

Reference: https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-to-elb-loadbalancer.html

Q&A 2

A company hosts an online shopping portal in the AWS Cloud. The portal provides HTTPS security by using a TLS certificate on an Elastic Load Balancer (ELB). Recently, the portal suffered an outage because the TLS certificate expired.

A SysOps administrator must create a solution to automatically renew certificates to avoid this issue in the future.

What is the MOST operationally efficient solution that meets these requirements?

A. Request a public certificate by using AWS Certificate Manager (ACM). Associate the certificate from ACM with the ELB. Write a scheduled AWS Lambda function to renew the certificate every 18 months.
B. Request a public certificate by using AWS Certificate Manager (ACM). Associate the certificate from ACM with the ELB. ACM will automatically manage the renewal of the certificate.
C. Register a certificate with a third-party certificate authority (CA). Import this certificate into the AWS Certificate Manager (ACM). Associate the certificate from ACM with the ELB. ACM will automatically manage the renewal of the certificate.
D. Register a certificate with a third-party certificate authority (CA). Configure the ELB to import the certificate directly from the CA. Set the certificate refresh cycle on the ELB to refresh when the certificate is within 3 months of the expiration date.

Q&A 3

A SysOps administrator is deploying a test site running on Amazon EC2 instances. The application requires both incoming and outgoing connections to the internet.

Which combination of steps are required to provide internet connectivity to the EC2 instances? (Choose two.)

A. Add a NAT gateway to a public subnet.
B. Attach a private address to the elastic network interface on the EC2 instance.
C. Attach an Elastic IP address to the internet gateway.
D. Add an entry to the routing table for the subnet that points to an internet gateway.
E. Create an internet gateway and attach it to a VPC.

Q&A 4

A company has an internal web application that runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto Scaling group in a single Availability Zone.

A SysOps administrator must make the application highly available.
Which action should the SysOps administrator take to meet this requirement?

A. Increase the maximum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.
B. Increase the minimum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.
C. Update the Auto Scaling group to launch new instances in a second Availability Zone in the same AWS Region.
D. Update the Auto Scaling group to launch new instances in an Availability Zone in a second AWS Region.

Q&A 5

A SysOps Administrator is managing a web application that runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances run in an EC2 Auto Scaling group. The administrator wants to set an alarm for when all target instances associated with the ALB are unhealthy.

Which condition should be used with the alarm?

A. AWS/ApplicationELB HealthyHostCount = 1
C. AWS/EC2 StatusCheckFailed = 1

Q&A 6

A company hosts a web application on an Amazon EC2 instance in a production VPC. Client connections to the application are failing. A SysOps administrator inspects the VPC flow logs and finds the following entry:

2 111122223333 eni- 192.0.2.15 203.0.113.56 40711 443 6 1 40 1418530010 1418530070 REJECT OK

What is a possible cause of these failed connections?

A. A security group is denying traffic on port 443.
B. The EC2 instance is shut down.
C. The network ACL is blocking HTTPS traffic.
D. The VPC has no internet gateway attached.

Q&A 7

A company is migrating its production file server to AWS. All data that is stored on the file server must remain accessible if an Availability Zone becomes unavailable or when system maintenance is performed.

Users must be able to interact with the file server through the SMB protocol. Users also must have the ability to manage file permissions by
using Windows ACLs.

Which solution will net these requirements?

A. Create a single AWS Storage Gateway file gateway.
B. Create an Amazon FSx for Windows File Server Multi-AZ file system.
C. Deploy two AWS Storage Gateway file gateways across two Availability Zones. Configure an Application Load Balancer in front of the file gateways.
D. Deploy two Amazon FSx for Windows File Server Single-AZ 2 file systems. Configure Microsoft Distributed File System Replication (DFSR).

Reference: https://docs.aws.amazon.com/fsx/latest/WindowsGuide/what-is.html

Q&A 8

A company monitors its account activity using AWS CloudTrail and is concerned that some log files are being tampered with after the logs have been delivered to the account\\’s Amazon S3 bucket.

Moving forward, how can the SysOps Administrator confirm that the log files have not been modified after being delivered to the S3 bucket?

A. Stream the CloudTrail logs to Amazon CloudWatch Logs to store logs at a secondary location.
B. Enable log file integrity validation and use digest files to verify the hash value of the log file.
C. Replicate the S3 log bucket across regions, and encrypt log files with S3 managed keys.
D. Enable S3 server access logging to track requests made to the log bucket for security audits.

Q&A 9

A SysOps administrator has created a VPC that contains a public subnet and a private subnet. Amazon EC2 instances that were launched in the private subnet cannot access the internet. The default network ACL is active on all subnets in the VPC and all security groups allow all outbound traffic:

Which solution will provide the EC2 instances in the private subnet with access to the internet?

A. Create a NAT gateway in the public subnet. Create a route from the private subnet to the NAT gateway.
B. Create a NAT gateway in the public subnet. Create a route from the public subnet to the NAT gateway.
C. Create a NAT gateway in the private subnet. Create a route from the public subnet to the NAT gateway.
D. Create a NAT gateway in the private subnet. Create a route from the private subnet to the NAT gateway.

Reference: https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html

Q&A 10

A company runs a web application on three Amazon EC2 instances behind an Application Load Balancer (ALB). The company notices that random periods of increased traffic cause a degradation in the application\\’s performance.

A SysOps administrator must scale the application to meet the increased traffic.
Which solution meets these requirements?

A. Create an Amazon CloudWatch alarm to monitor application latency and increase the size of each EC2 instance if the desired threshold is reached.
B. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to monitor application latency and add an EC2 instance to the ALB if the desired threshold is reached.
C. Deploy the application to an Auto Scaling group of EC2 instances with a target tracking scaling policy. Attach the ALB to the Auto Scaling group.
D. Deploy the application to an Auto Scaling group of EC2 instances with a scheduled scaling policy. Attach the ALB to the Auto Scaling group.

Q&A 11

their own development environments and these development environments must be identical. Each development environment consists of Amazon EC2 instances and an Amazon RDS DB instance. The development environments should be created only when necessary, and they must be terminated each night to minimize costs.

What is the MOST operationally efficient solution that meets these requirements?

A. Provide developers with access to the same AWS CloudFormation template so that they can provide their development environment when necessary. Schedule a nightly cron job on each development instance to stop all running processes to reduce CPU utilization to nearly zero.

B. Provide developers with access to the same AWS CloudFormation template so that they can provide their development environment when necessary. Schedule a nightly Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function to delete the AWS CloudFormation stacks.

C. Provide developers with CLI commands so that they can provide their own development environment when necessary. Schedule a nightly Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function to terminate all EC2 instances and the DB instance.

D. Provide developers with CLI commands so that they can provide their own development environment when necessary. Schedule a nightly Amazon EventBridge (Amazon CloudWatch Events) rule to cause AWS CloudFormation to delete all of the development environment resources.

Q&A 12

A company has a stateful web application that is hosted on Amazon EC2 instances in an Auto Scaling group. The instances run behind an Application Load Balancer (ALB) that has a single target group. The ALB is configured as the origin in an Amazon CloudFront distribution. Users are reporting random logouts from the web application.

Which combination of actions should a SysOps administrator take to resolve this problem? (Choose two.)

A. Change to the least outstanding requests algorithm on the ALB target group.
B. Configure cookie forwarding in the CloudFront distribution cache behavior.
C. Configure header forwarding in the CloudFront distribution cache behavior.
D. Enable group-level stickiness on the ALB listener rule.
E. Enable sticky sessions on the ALB target group.

Post the correct answer and correct it:

123456789101112
CCDECAABCACCCE

You will also receive a Pass4itSure Amazon SOA-C02 dumps in PDF format.

Never Fail With SOA-C02 Exam Dumps PDF 2022

free SOA-C02 exam pdf [google drive] https://drive.google.com/file/d/1swC43K9J3nAUA4ehjLuJOgEDtL9JuCgp/view?usp=sharing

If you’re looking for the latest Amazon Certification Exam SOA-C02 exam preparation study materials, then you must use Pass4itSure-designed SOA-C02 dumps Mar2022 exam questions 100% to help you pass the exam.

Free Share Link:

Get latest SOA-C02 exam dumps Mar2022 https://www.pass4itsure.com/soa-c02.html (Contains 115+ unique questions)

Download Authentic SOA-C02 Dumps (2022) – Free PDF https://drive.google.com/file/d/1swC43K9J3nAUA4ehjLuJOgEDtL9JuCgp/view?usp=sharing

Past Amazon SOA-C02 exam practice questions https://www.examdemosimulation.com/valid-amazon-soa-c02-practice-questions-free-share-from-pass4itsure/