SOA-C01 Amazon Web Services AWS Certified SysOps Administrator

AWS Certified SysOps Administrator - Associate

Last Update 22 hours ago Total Questions : 263

The AWS Certified SysOps Administrator - Associate content is now fully updated, with all current exam questions added 22 hours ago. Deciding to include SOA-C01 practice exam questions in your study plan goes far beyond basic test preparation.

You'll find that our SOA-C01 exam questions frequently feature detailed scenarios and practical problem-solving exercises that directly mirror industry challenges. Engaging with these SOA-C01 sample sets allows you to effectively manage your time and pace yourself, giving you the ability to finish any AWS Certified SysOps Administrator - Associate practice test comfortably within the allotted time.

Question # 21

A company uses federation to authenticate users and grant AWS permissions. The SysOps Administrator has been asked to determine who made a request to AWS Organizations for a new AWS account.

What should the Administrator review to determine who made the request?

AWS CloudTrail for the federated identity user name

AWS IAM Access Advisor for the federated user name

AWS Organizations access log for the federated identity user name

Federated identity provider logs for the user name

Question # 22

A local agency plans to deploy 500 Raspberry Pi devices throughout a city. All the devices need to be managed centrally and their configurations need to be consistent. What is the BEST service for managing these devices?

AWS Config

AWS Systems Manager

Amazon inspector

AWS Service Catalog

Question # 23

A company is planning to deploy multiple ecommerce websites across the eu-west-1, ap-east-1, and us-west-1 Regions. The websites consist of Amazon S3 buckets Amazon EC2 instances, Amazon RDS databases and Elastic Load Balancers.

Which method will accomplish the deployment with the LEAST amount of effort?

Configure deployment automation using AWS OpsWorks

Configure S3 cross-Region replication

Use AWS CloudFormation stack sets to deploy the application

Use AWS Elastic Beanstalk to deploy the application

Question # 24

A SysOps Administrator is deploying an Amazon EC2 instance and is using third-party VPN software to route traffic to an on-premises data center Based on the shared responsibility model AWS is responsible for managing which element of this deployment?

Configuring IPsec tunnels for the VPN

Ensuring high availability of the EC2 instance

Ensuring high availability of the VPN connection

Managing the health of the underlying EC2 host

Question # 25

A SysOps administrator is impleme nting automated I/O load performance testing as part of lite continuous integraliorVcontinuous delivery (CI ' CD) process for an application The application uses an Amazon Elastic Block Store (Amazon E8S) Provisioned IOPS volume for each instance that is res tored from a snapshot and requires consistent I/O performance. During the initial tests, the I/O performance results are sporadic. The SysOps administrator must ensure that the tests yield more consistent results.

Which actions could the SysOps administrator take to accomplish this goal? (Select TWO.)

Restore the EBS volume from the snapshot with fast snapshot restore enabled

Restore the EBS volume from the snapshot using the cold HDD volume type.

Restore the EBS volume from the snapshot and pre-warm the volume by reading all of the blocks.

Restore the EBS volume from the snapshot and configure encryption.

Restore the EBS volume from the snapshot and configure I/O block sizes at random

Question # 26

An Applications team has successfully deployed an AWS CloudFormation stack consisting of 30 t2-medium Amazon EC2 instances in the us-west-2 Region. When using the same template to launch a stack in us-east-2, the launch failed and rolled back after launching only 10 EC2 instances.

What is a possible cause of this failure?

The IAM user did not have privileges to launch the CloudFormation template.

The t2 medium EC2 instance service limit was reached.

An AWS Budgets threshold was breached.

The application’s Amazon Machine Image (AMI) is not available in us-east-2.

Question # 27

A company has adopted a security policy that requires all customer data to be encrypted at rest. Currently, customer data is stored on a central Amazon EFS file system and accessed by a number of different applications from Amazon EC2 instances.

How can the SysOps Administrator ensure that all customer data stored on the EFS file system meets the new requirement?

Update the EFS file system settings to enable server-side encryption using AES-256.

Create a new encrypted EFS file system and copy the data from the unencrypted EFS file system to the new encrypted EFS file system.

Use AWS CloudHSM to encrypt the files directly before storing them in the EFS file system.

Modify the EFS file system mount options to enable Transport Layer Security (TLS) on each of the EC2 instances.

Question # 28

A company is using an AWS KMS customer master key (CMK) with imported key material. The company references the CMK by its alias in the Java application to encrypt data. The CMK must be rotated every 6 months

What is the process to rotate the key?

Enable automatic key rotation tor the CMK and specify a period of 6 months

Create a new CMK with new imported material and update the key alias to point to the new CMK

Delete the current key material and import new material into the existing CMK

Import a copy of the existing key material into a new CMK as a backup and set the rotation schedule for 6 months

Question # 29

A SySOps Administrator has created a new Amazon S3 bucket named mybucket for the Operations team. Members of the team are part of an IAM group to which the following IAM policy has been assigned.

Which of the following actions will be allowed on the bucket? (Select TWO.)

Get the bucket ' s region.

Delete an object.

Delete the bucket

Download an object

List all the buckets in the account.

Question # 30

A SysOps Administrator needs to control access to groups of Amazon EC2 instances. Specific tags on the EC2 instances have already been added. Which additional actions should the Administrator take to control access? (Select TWO)

Attach an IAM policy to the users or groups that require access to the EC2 instances

Attach an IAM role to control access to the EC2 instances

Create a placement group for the EC2 instances and add a specific tag

Create a service account and attach it to the EC2 instances that need to be controlled

Create an IAM policy that grants access to any EC2 instances with a tag specified in the condition element

Go to page: