SOA-C01 Online Practice Questions and Answers

You have started a new job and are reviewing your company's infrastructure on AWS You notice one web application where they have an Elastic Load Balancer (andB) in front of web instances in an Auto Scaling Group When you check the metrics for the ELB in CloudWatch you see four healthy instances in Availability Zone (AZ) A and zero in AZ B There are zero unhealthy instances. What do you need to fix to balance the instances across AZs?

A. Set the ELB to only be attached to another AZ

B. Make sure Auto Scaling is configured to launch in both AZs

C. Make sure your AMI is available in both AZs

D. Make sure the maximum size of the Auto Scaling Group is greater than 4

Which two AWS services provide out-of-the-box user configurable automatic backup-as-a-service and backup rotation options? (Choose two.)

A. Amazon S3

B. Amazon RDS

C. Amazon EBS

D. Amazon Red shift

You are attempting to connect to an instance in Amazon VPC without success. You have already verified

that the VPC has an Internet Gateway (IGW) the instance has an associated Elastic IP (EIP) and correct

security group rules are in place.

Which VPC component should you evaluate next?

A. The configuration of a NAT instance

B. The configuration of the Routing Table

C. The configuration of the internet Gateway (IGW)

D. The configuration of SRC/DST checking

A user has recently started using EC2. The user launched one EC2 instance in the default subnet in EC2VPC Which of the below mentioned options is not attached or available with the EC2 instance when it is launched?

A. Public IP address

B. Internet gateway

C. Elastic IP

D. Private IP address

A user has setup a billing alarm using CloudWatch for $200. The usage of AWS exceeded $200 after some days. The user wants to increase the limit from $200 to $400? What should the user do?

A. Create a new alarm of $400 and link it with the first alarm

B. It is not possible to modify the alarm once it has crossed the usage limit

C. Update the alarm to set the limit at $400 instead of $200

D. Create a new alarm for the additional $200 amount

A user is checking the CloudWatch metrics from the AWS console. The user notices that the CloudWatch data is coming in UTC. The user wants to convert the data to a local time zone. How can the user perform this?

A. In the CloudWatch dashboard the user should set the local time zone so that CloudWatch shows the data only in the local time zone

B. In the CloudWatch console select the local time zone under the Time Range tab to view the data as per the local timezone

C. The CloudWatch data is always in UTC; the user has to manually convert the data

D. The user should have send the local time zone while uploading the data so that CloudWatch will show the data only in the local time zone

A user is trying to understand the detailed CloudWatch monitoring concept. Which of the below mentioned services provides detailed monitoring with CloudWatch without charging the user extra?

A. AWS Auto Scaling

B. AWS Route 53

C. AWS EMR

D. AWS SNS

A system admin wants to add more zones to the existing ELB. The system admin wants to perform this activity from CLI. Which of the below mentioned command helps the system admin to add new zones to the existing ELB?

A. elb-enable-zones-for-lb

B. elb-add-zones-for-lb

C. It is not possible to add more zones to the existing ELB

D. elb-configure-zones-for-lb

What does the “configure” command allow an Administrator to do when setting up the AWS CLI? (Choose two.)

A. Decide which VPC to create instances in.

B. Designate the format of the response to CLI commands.

C. Choose the default EC2 instance.

D. Encrypt the CLI commands.

E. Designate the default region.

What does Amazon VPC stand for?

A. Amazon Virtual Private Cloud

B. Amazon Variable Power Cluster

C. Amazon Virtual Private Computer

D. Amazon Virtual Public Cloud

Which of the following services is offered by CloudWatch?

A. Fixing broken links on the client's instances

B. Creating IAM users for all services in AWS

C. Monitoring estimated AWS charges

D. Balancing the request load between various instances

A company hosts its website on Amazon ECF2 instances behind an ELB Application Load Balancer. The company manages its DNS with Amazon Route 53, and wants to point its domain's zone apex to the website.

Which type of record should be used to meet these requirements?

A. An AAA record for the domain's zone apex

B. An A record for the domain's zone apex

C. A CNAME record for the domain's zone apex

D. An alias record for the domain's zone apex

A Development team is designing an application that processes sensitive information within a hybrid deployment. The team needs to ensure the application data is protected both in transit and at rest.

Which combination of actions should be taken to accomplish this? (Choose two.)

A. Use a VPN to set up a tunnel between the on-premises data center and the AWS resources

B. Use AWS Certificate Manager to create TLS/SSL certificates

C. Use AWS CloudHSM to encrypt the data

D. Use AWS KMS to create TLS/SSL certificates

E. Use AWS KMS to manage the encryption keys used for data encryption

A company needs to deploy a web application on two Amazon EC2 instances behind an Application Load Balancer (ALB). Two EC2 instances will also be deployed to host the database. The infrastructure needs to be designed across Availability Zones for high availability and must limit public access to the instances as much as possible.

How should this be achieved within a VPC?

A. Create one public subnet for the Application Load Balancer, one public subnet for the web servers, and one private subnet for the database servers.

B. Create one public subnet for the Application Load Balancer, two public subnets for the web servers, and two private subnets for the database servers.

C. Create two public subnets for the Application Load Balancer, two private subnets for the web servers, and two private subnets for the database servers.

D. Create two public subnets for the Application Load Balancer, two public subnets for the web servers, and two public subnets for the database servers.

A SysOps administrator is investigating why a user has been unable to use RDP to connect over the internet from their home computer to a bastion server running on an Amazon EC2 Windows instance.

Which of the following are possible causes of this issue? (Choose two.)

A. A network ACL associated with the bastion's subnet is blocking the network traffic.

B. The instance does not have a private IP address.

C. The route table associated with the bastion's subnet does not have a route to the internet gateway.

D. The security group for the instance does not have an inbound rule on port 22.

E. The security group for the instance does not have an outbound rule on port 3389.