Amazondumps.us SOA-C01 Exam Dumps With PDF Study Material
                     Amazon Web Services
SOA-C01
AWS Certified SysOps
[ Total Questions: 10]
Administrator –
Associate
https://www.amazondumps.us/aws-sysops.html
Amazon Web Services - SOA-C01
Topic 7, Exam Pool G
Question #:1 - (Exam Topic 7)
A SysOps Administrator is responsible for managing a set of 12.micro Amazon EC2 instances. The
Administrator wants to automatically reboot any instance that exceeds 80% CPU utilization.
Which of these solutions would meet the requirements?
A.  Create an Amazon CloudWatch alarm on the CPUCreditBalance metric and specify a terminate alarm
action.
B.  Create an Amazon CloudWatch alarm on the CPUUtilization metric and specify a reboot alarm action.
C.  Create an Amazon CloudWatch alarm on the CPUCreditBalance metric and specify a reboot alarm
action.
D.  Create an Amazon CloudWatch alarm on the CPUUtilization metric and specify a terminate alarm
action.
Answer: A
Question #:2 - (Exam Topic 7)
A SysOps Administrator runs a web application that is using a microservices approach whereby different
responsibilities of the application have been divided in a separate microservice running on a different Amazon
EC2 instance. The Administrator has been tasked with reconfiguring the infrastructure to support this
approach.
How can the Administrator accomplish this with the LEAST administrative overhead?
A.  Use Amazon CloudFront to log the URL and forward the request.
B.  Use Amazon CloudFront to rewrite the header based on the microservice and forward the request.
C.  Use an Application Load Balancer (ALB) and do path-based routing.
D.  Use a Network Load Balancer (NLB) and do path-based routing.
Answer: C
Explanation
References:
Amazon Web Services - SOA-C01
Topic 1, Exam Pool A
Question #:3 - (Exam Topic 1)
A customer has a web application that uses cookie Based sessions to track logged in users. It is deployed on
AWS using ELB and Auto Scaling. The customer observes that when load increases. Auto Scaling launches
new Instances but the load on the easting Instances does not decrease, causing all existing users have a
sluggish experience.
Which two answer choices independently describe a behavior that could be the cause of the sluggish user
experience? (Choose two.)
A.  ELB's normal behavior sends requests from the same user to the same backend instance
B.  ELB's behavior when sticky sessions are enabled causes ELB to send requests in the same session to the
same backend instance
C.  A faulty browser is not honoring the TTL of the ELB DNS name
D.  The web application uses long polling such as comet or websockets. Thereby keeping a connection open
to a web server tor a long time
Answer: B D
Question #:4 - (Exam Topic 1)
A system admin is managing buckets, objects and folders with AWS S3. Which of the below mentioned
statements is true and should be taken in consideration by the sysadmin?
A.  The folders support only ACL
B.  Both the object and bucket can have an Access Policy but folder cannot have policy
C.  Folders can have a policy
D.  Both the object and bucket can have ACL but folders cannot have ACL
Answer: D
Explanation
Amazon S3 Access Control Lists (ACLs) enable you to manage access to buckets and objects. Each bucket
and object has an ACL attached to it as a subresource. It defines which AWS accounts or groups are granted
access and the type of access. When a request is received against a resource, Amazon S3 checks the
corresponding ACL to verify the requester has the necessary access permissions.
Amazon Web Services - SOA-C01
Topic 2, Exam Pool B
Question #:5 - (Exam Topic 2)
A user is trying to connect to a running EC2 instance using SSH. However, the user gets a Host key not found
error. Which of the below mentioned options is a possible reason for rejection?
A.  The user has provided the wrong user name for the OS login
B.  The instance CPU is heavily loaded
C.  The security group is not configured properly
D.  The access key to connect to the instance is wrong
Answer: A
Explanation
If the user is trying to connect to a Linux EC2 instance and receives the Host Key not found error the probable
reasons are:
The private key pair is not right
The user name to login is wrong
Question #:6 - (Exam Topic 2)
A user has launched two EBS backed EC2 instances in the US-East-1a region. The user wants to change the
zone of one of the instances. How can the user change it?
A.  Stop one of the instances and change the availability zone
B.  The zone can only be modified using the AWS CLI
C.  From the AWS EC2 console, select the Actions - > Change zones and specify new zone
D.  Create an AMI of the running instance and launch the instance in a separate AZ
Answer: D
Explanation
With AWS EC2, when a user is launching an instance he can select the availability zone (AZ. at the time of
launch. If the zone is not selected, AWS selects it on behalf of the user. Once the instance is launched, the user
cannot change the zone of that instance unless he creates an AMI of that instance and launches a new instance
Amazon Web Services - SOA-C01
Topic 6, Exam Pool F
Question #:7 - (Exam Topic 6)
A customer enquires about whether all his data is secure on AWS, and is especially concerned about Elastic
Map Reduce (EMR). You need to inform him of some of the security features in place for AWS. Which of the
below statements is incorrect regarding EMR or S3?
A.  Every packet sent in the AWS network uses Internet Protocol Security (IPsec).
B.  Amazon S3 provides authentication mechanisms to ensure that stored data is secured against
unauthorized access.
C.  Customers may encrypt the input data before they upload it to Amazon S3.
D.  Amazon EMR customers can choose to send data to Amazon S3 using the HTTPS protocol for secure
transmission.
Answer: A
Explanation
Amazon S3 provides authentication mechanisms to ensure that stored data is secured against unauthorized
access. Unless the customer who is uploading the data specifies otherwise, only that customer can access the
data. Amazon EMR customers can also choose to send data to Amazon S3 using the HTTPS protocol for
secure transmission. In addition, Amazon EMR always uses HTTPS to send data between Amazon S3 and
Amazon EC2. For added security, customers may encrypt the input data before they upload it to Amazon S3
(using any common data compression tool); they then need to add a decryption step to the beginning of their
cluster when Amazon EMR fetches the data from Amazon S3. IPsec is a protocol suite for securing Internet
Protocol (IP) communications by authenticating and encrypting each IP packet of a data stream. Amazon
supports Internet Protocol security (IPsec) VPN connections, but does not protect all data packets at this level.
References:
Question #:8 - (Exam Topic 6)
During a security investigation, it is determined that there is a coordinated attack on the web applications
deployed on Amazon EC2. The attack is performed through malformed HTTP headers.
What AWS service of feature would prevent this traffic from reaching the EC2 instances?
A.  Amazon Inspector
B.  Amazon Security Groups
C.  AWS WAF
Amazon Web Services - SOA-C01
D.  Application Load Balancer (ALB)
Answer: C
Topic 5, Exam Pool E
Question #:9 - (Exam Topic 5)
References:
Which of the choices below best describes what Auto Scaling is well suited for?
A.  only for applications that experience hourly, daily, or weekly variability in usage.
B.  Both for applications that have stable demand patterns and that experience hourly, daily, or weekly
variability in usage.
C.  Both for applications that use frameworks and SDKs to enhance its customer relationship.
D.  only for applications with a stable usage pattern but extremely high workload.
Answer: B
Explanation
Auto Scaling is well suited to both applications that have stable demand patterns and that experience hourly,
daily, or weekly variability in usage. Whether the demand is predictable or unpredictable auto scaling can be a
good choice. If the demand is predictable and long term you may choose reserved instances. If the demand is
unpredictable you may choose on-demand or even spot instance (if you can afford to have an instance lost
unexpectedly).
References:
Question #:10 - (Exam Topic 5)
Which service is offered by Auto Scaling?
A.  Automatic scaling storage
B.  Automatic scale EC2 capacity
C.  Automatic scale ECS capacity
D.  Automatic scale elastic IP
Answer: B
Explanation
Auto Scaling is a service that allows users to scale the EC2 resources up or down automatically according to
the conditions or by manual intervention. It is a seamless process to scale the EC2 . compute units up and down.