AWS Certified SysOps Administrator - Associate

Here you have the best Amazon SOA-C02 practice exam questions

You have 443 total questions to study from
Each page has 5 questions, making a total of 89 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on April 18, 2025

Question 1 of 443

A company has an infernal web application that runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto

Scaling group in a single Availability Zone. A SysOps administrator must make the application highly available.

Which action should the SysOps administrator take to meet this requirement?

Increase the maximum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.

Increase the minimum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.

Update the Auto Scaling group to launch new instances in a second Availability Zone in the same AWS Region.

Update the Auto Scaling group to launch new instances in an Availability Zone in a second AWS Region.

Correct Answer: C

To make an application highly available, it's essential to distribute the resources across multiple Availability Zones within the same AWS Region. This ensures that the application can continue to operate even if one Availability Zone experiences an outage. Updating the Auto Scaling group to launch new instances in a second Availability Zone in the same AWS Region achieves this goal by providing redundancy and failover capability, thus maintaining high availability. Adjusting the number of instances, as stated in options A and B, only addresses capacity and does not provide the required high availability. Option D is incorrect because Auto Scaling groups are designed to operate within a single AWS Region, and using an Availability Zone in another AWS Region would not be feasible for this purpose.

Question 2 of 443

A company hosts a website on multiple Amazon EC2 instances that run in an Auto Scaling group. Users are reporting slow responses during peak times between

6 PM and 11 PM every weekend. A SysOps administrator must implement a solution to improve performance during these peak times.

What is the MOST operationally efficient solution that meets these requirements?

Create a scheduled Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function to increase the desired capacity before peak times.

Configure a scheduled scaling action with a recurrence option to change the desired capacity before and after peak times.

Create a target tracking scaling policy to add more instances when memory utilization is above 70%.

Configure the cooldown period for the Auto Scaling group to modify desired capacity before and after peak times.

Correct Answer: B

The most operationally efficient solution for improving performance during predictable peak times is to configure a scheduled scaling action with a recurrence option to change the desired capacity before and after peak times. This allows the system to automatically adjust the number of instances at specific times, ensuring adequate resources are available during peak usage without manual intervention. Scheduled scaling is ideal for scenarios with known patterns of demand.

Question 3 of 443

A company is running a website on Amazon EC2 instances behind an Application Load Balancer (ALB). The company configured an Amazon CloudFront distribution and set the ALB as the origin. The company created an Amazon Route 53 CNAME record to send all traffic through the CloudFront distribution. As an unintended side effect, mobile users are now being served the desktop version of the website.

Which action should a SysOps administrator take to resolve this issue?

Configure the CloudFront distribution behavior to forward the User-Agent header.

Configure the CloudFront distribution origin settings. Add a User-Agent header to the list of origin custom headers.

Enable IPv6 on the ALB. Update the CloudFront distribution origin settings to use the dualstack endpoint.

Enable IPv6 on the CloudFront distribution. Update the Route 53 record to use the dualstack endpoint.

Correct Answer: A

Reference:

https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-to-elb-load-balancer.html

Question 4 of 443

A SysOps administrator has enabled AWS CloudTrail in an AWS account. If CloudTrail is disabled, it must be re-enabled immediately.

What should the SysOps administrator do to meet these requirements WITHOUT writing custom code?

Add the AWS account to AWS Organizations. Enable CloudTrail in the management account.

Create an AWS Config rule that is invoked when CloudTrail configuration changes. Apply the AWS-ConfigureCloudTrailLogging automatic remediation action.

Create an AWS Config rule that is invoked when CloudTrail configuration changes. Configure the rule to invoke an AWS Lambda function to enable CloudTrail.

Create an Amazon EventBridge (Amazon CloudWatch Event) hourly rule with a schedule pattern to run an AWS Systems Manager Automation document to enable CloudTrail.

Correct Answer: B

To ensure that CloudTrail is re-enabled automatically without writing custom code, create an AWS Config rule that is triggered when there are changes to CloudTrail's configuration. Then apply the AWS-ConfigureCloudTrailLogging automatic remediation action. This configuration will automatically monitor changes to CloudTrail and re-enable it if it gets disabled, aligning with the requirements of the question.

Question 5 of 443

A company hosts its website on Amazon EC2 instances behind an Application Load Balancer. The company manages its DNS with Amazon Route 53, and wants to point its domain's zone apex to the website.

Which type of record should be used to meet these requirements?

An AAAA record for the domain's zone apex

An A record for the domain's zone apex

A CNAME record for the domain's zone apex

An alias record for the domain's zone apex

Correct Answer: D

To point a domain's zone apex to an Amazon EC2 instance behind an Application Load Balancer (ALB) using Route 53, you need to use an alias record. The DNS protocol does not allow the creation of a CNAME record at the zone apex. However, an alias record can be used at the zone apex to point to AWS resources such as an ALB. Address records (A or AAAA) would not be appropriate as they translate domain names to specific IP addresses, not to load balancers or other AWS resources.