SOA-C03 Practice Questions

A.  

Collect Amazon CloudWatch logs for the Lambda function. Create a metric filter to extract the PostRuntimeExtensionsDuration metric from the logs. Create a CloudWatch alarm to publish a notification to the SNS topic when the function runtime exceeds 10 seconds.

B.  

Collect Amazon CloudWatch metrics for the Lambda function to extract the function runtime. Create a CloudWatch alarm to publish a notification to the SNS topic when the runtime exceeds 10 seconds.

C.  

Configure an Amazon CloudWatch metric filter to capture the runtime of the Lambda function. Set the function ' s timeout setting to 10 seconds. Create an SNS subscription to alert the SysOps administrator if the function times out.

D.  

Use Amazon CloudWatch Logs Insights to query Lambda logs for the function runtime. Set up a CloudWatch alarm based on the query result. Configure Amazon SNS to send notifications when function runtime exceeds 10 seconds.

A.  

Configure an Amazon CloudWatch alarm that invokes an AWS Systems Manager Automation runbook to vertically scale the EC2 instance when the CPU utilization exceeds 80%.

B.  

Configure an AWS Systems Manager Automation runbook to run a script that automatically restarts the application when CPU utilization exceeds 80%.

C.  

Configure an Amazon EventBridge rule that invokes an AWS Systems Manager Automation document. Configure the document to increase the EC2 instance size when CPU utilization exceeds 80%.

D.  

Set up an Auto Scaling group with an Amazon CloudWatch alarm that triggers a scaling policy to launch additional EC2 instances when the CPU utilization exceeds 80%.

A.  

Delete the EFS file share. Create an Amazon FSx for Windows File Server file share for the EC2 instances.

B.  

Use the correct IAM credentials to mount the EFS file share.

C.  

Configure NFSv4 support on the Windows operating system that is running on the EC2 instances.

D.  

Allow the correct port for NFS through the security group and network ACL.

A.  

Create an Amazon S3 bucket. Create an export task from appropriate log groups in CloudWatch. Export the logs to the S3 bucket. Configure an Amazon Macie scan to discover personal data in the S3 bucket. Invoke an AWS Lambda function to move identified personal data to a second S3 bucket. Update the S3 bucket policies to grant only the security team access to both buckets.

B.  

Create a customer managed AWS KMS key. Configure the KMS key policy to allow only the security team to perform decrypt operations. Associate the KMS key with the application log group.

C.  

Create an Amazon CloudWatch data protection policy for the application log group. Configure data identifiers for the types of personal information that the application logs. Ensure that the security team has permission to call the unmask API operation on the application log group.

D.  

Create an OpenSearch domain. Create an AWS Glue workflow that runs a Detect PII transform job and streams the output to the OpenSearch domain. Configure the CloudWatch log group to stream the logs to AWS Glue. Modify the OpenSearch domain access policy to allow only the security team to access the domain.

A.  

The missing instances have insufficient historical Amazon CloudWatch metric data for analysis.

B.  

Compute Optimizer does not support the instance types of the missing instances.

C.  

Compute Optimizer already considers the missing instances to be optimized.

D.  

The missing instances are running a Windows operating system.

A.  

Deploy the instances in a cluster placement group in one Availability Zone.

B.  

Deploy the instances in a partition placement group in two Availability Zones.

C.  

Deploy the instances in a partition placement group in one Availability Zone.

D.  

Deploy the instances in a spread placement group in two Availability Zones.

A.  

Replace ElastiCache (Redis OSS) with ElastiCache (Memcached).

B.  

Create an Amazon EventBridge rule to initiate a backup every hour.

C.  

Create a read replica in a second Availability Zone and enable Multi-AZ for the Redis replication group.

D.  

Enable automatic backups and restore the backups when necessary.

A.  

Disable S3 Block Public Access on the S3 bucket.

B.  

Create an S3 access point in the same AWS Region where the S3 bucket is located. Configure the access point policy to allow CloudFront to read from the S3 bucket. Point the CNAME record to the S3 access point name.

C.  

Modify the value of the DNS CNAME record to be arn:aws:s3:::example-com-website-files instead of the S3 URL.

D.  

Modify the value of the DNS CNAME record to be d111111abcdef8.cloudfront.net instead of the S3 URL.

A.  

Attach the certificate to each EC2 instance.

B.  

Attach the certificate to the AL

B.  

C.  

Create a private certificate in AWS Certificate Manager (ACM).

D.  

Create a public certificate in AWS Certificate Manager (ACM).

E.  

Export the certificate, and attach it to the website.

A.  

Use Organizations tag policies to enforce mandatory tagging on all resources. Enable cost allocation tags in the AWS Billing and Cost Management console.

B.  

Configure AWS CloudTrail events to invoke an AWS Lambda function to detect untagged resources and to automatically assign tags based on predefined rules.

C.  

Use AWS Config to evaluate tagging compliance. Use AWS Budgets to apply tags for cost allocation.

D.  

Use AWS Service Catalog to provision only pre-tagged resources. Use AWS Trusted Advisor to enforce tagging across the organization.