AWS Certified CloudOps Engineer - Associate SOA-C03 Practice Test

AWS Certified CloudOps Engineer - Associate SOA-C03 Practice Test practice questions, page 6 of 8, with answer review and explanations.

Question 26

A company has an internal web application that runs on Amazon EC2 instances behind an Application Load Balancer. The instances run in an Amazon EC2 Auto Scaling group in a single Availability Zone. A CloudOps engineer must make the application highly available. Which action should the CloudOps engineer take to meet this requirement?

  1. Increase the maximum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.
  2. Increase the minimum number of instances in the Auto Scaling group to meet the capacity that is required at peak usage.
  3. Update the Auto Scaling group to launch new instances in a second Availability Zone in the same AWS Region.
  4. Update the Auto Scaling group to launch new instances in an Availability Zone in a second AWS Region.

Question 27

A CloudOps engineer is creating a simple, public-facing website running on Amazon EC2. The CloudOps engineer created the EC2 instance in an existing public subnet and assigned an Elastic IP address to the instance. Next, the CloudOps engineer created and applied a new security group to the instance to allow incoming HTTP traffic from 0.0.0.0/0. Finally, the CloudOps engineer created a new network ACL and applied it to the subnet to allow incoming HTTP traffic from 0.0.0.0/0. However, the website cannot be reached from the internet. What is the cause of this issue?

  1. The CloudOps engineer did not create an outbound rule that allows ephemeral port return traffic in the new network ACL
  2. The CloudOps engineer did not create an outbound rule in the security group that allows HTTP traffic from port 80.
  3. The Elastic IP address assigned to the EC2 instance has changed.
  4. There is an additional network ACL associated with the subnet that includes a rule that denies inbound HTTP traffic from port 80.

Question 28

A company wants to use AWS Systems Manager to manage a large fleet of Amazon EC2 instances. The company hosts the instances in private subnets. The company follows the principle of least privilege to assign access permissions. All private subnets have internet connectivity through a NAT gateway. A CloudOps engineer installs the latest version of the Systems Manager Agent (SSM Agent). However, the EC2 instances do not appear in Systems Manager Fleet Manager. The CloudOps engineer must resolve this issue. Which solution will meet this requirement?

  1. Replace the NAT gateway with a NAT instance that is deployed in the public subnet. Update the private subnet's route table to use the NAT instance.
  2. Create a VPC endpoint for Systems Manager. Remove routes to the internet through the NAT gateway from the private subnet's route table.
  3. Attach the AmazonSSMManagedInstanceCore AWS managed policy to the EC2 instance profile that is associated with the instances.
  4. Attach a custom policy that allows all actions to ssm* to the EC2 instance profile that is associated with the instances.

Question 29

A company has an application that collects notifications from thousands of alarm systems. The notifications include alarm notifications and information notifications. The information notifications include the system arming processes, disarming processes, and sensor status. All notifications are kept as messages in an Amazon Simple Queue Service (Amazon SQS) queue. Amazon EC2 instances that are in an Auto Scaling group process the messages. A CloudOps engineer needs to implement a solution that prioritizes alarm notifications over information notifications. Which solution will meet these requirements?

  1. Adjust the Auto Scaling group to scale faster when a high number of messages is in the queue.
  2. Use the Amazon Simple Notification Service (Amazon SNS) fanout feature with Amazon SQS to send the notifications in parallel to all the EC2 instances.
  3. Add an Amazon DynamoDB stream to accelerate the message processing.
  4. Create a queue for alarm notifications and a queue for information notifications. Update the application to collect messages from the alarm notifications queue first.

Question 30

A company is implementing security and compliance by using AWS Trusted Advisor. The company’s CloudOps team is validating the list of Trusted Advisor checks that it can access. Which factor will affect the quantity of available Trusted Advisor checks?

  1. Whether at least ono Amazon EC2 instance is in the running state
  2. The AWS Support plan
  3. An AWS Organizations service control policy (SCP)
  4. Whether the AWS account root user has multi-factor authentication (MFA) enabled