The security team is concerned because the number of AWS Identity and Access Management (IAM) policies being used in the environment is increasing. The team tasked a SysOps administrator to report on the current number of IAM policies in use and the total available IAM policies.
Which AWS service should the administrator use to check how current IAM policy usage compares to current service limits?

AAWS Trusted Advisor

BAmazon Inspector

CAWS Config

DAWS Organizations

1 answers

91 votes

1001

Answer Link

A company is managing multiple AWS accounts in AWS Organizations The company is reviewing internal security of Its AWS environment The company's security administrator has their own AWS account and wants to review the VPC configuration of developer AWS accounts
Which solution will meet these requirements in the MOST secure manner?

ACreate an IAM policy in each developer account that has read-only access related to VPC resources Assign the policy to an IAM user Share the user credentials with the security administrator

BCreate an IAM policy in each developer account that has administrator access to all Amazon EC2 actions, including VPC actions Assign the policy to an IAM user Share the user credentials with the security administrator

CCreate an IAM policy in each developer account that has administrator access related to VPC resources Assign the policy to a cross-account IAM role Ask the security administrator to assume the role from their account

DCreate an IAM policy m each developer account that has read-only access related to VPC resources Assign the policy to a cross-account IAM role Ask the security administrator to assume the role from their account

1 answers

97 votes

973

Answer Link

A company plans to deploy a database on an Amazon Aurora MySQL DB cluster. The database will store data for a demonstration environment. The data must be reset on a daily basis.
What is the MOST operationally efficient solution that meets these requirements?

ACreate a manual snapshot of the DB cluster after the data has been populated. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function on a daily basis. Configure the function to restore the snapshot and then delete the previous DB cluster.

BEnable the Backtrack feature during the creation of the DB cluster. Specify a target backtrack window of 48 hours. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function on a daily basis. Configure the function to perform a backtrack operation.

CExport a manual snapshot of the DB cluster to an Amazon S3 bucket after the data has been populated. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function on a daily basis. Configure the function to restore the snapshot from Amazon S3.

DSet the DB cluster backup retention period to 2 days. Create an Amazon EventBridge (Amazon CloudWatch Events) rule to invoke an AWS Lambda function on a daily basis. Configure the function to restore the DB cluster to a point in time and then delete the previous DB cluster.

1 answers

92 votes

1132

Answer Link

A company is tunning a website on Amazon EC2 instances thai are in an Auto Scaling group When the website traffic increases, additional instances lake several minutes to become available because ot a long-running user data script that installs software A SysOps administrator must decrease the time that is required (or new instances to become available
Which action should the SysOps administrator take to meet this requirement?

AReduce the scaling thresholds so that instances are added before traffic increases

BPurchase Reserved Instances to cover 100% of the maximum capacity of the Auto Scaling group

CUpdate the Auto Scaling group to launch instances that have a storage optimized instance type

DUse EC2 Image Builder to prepare an Amazon Machine Image (AMI) that has pre-installed software

1 answers

76 votes

1151

Answer Link

A company is running an application on premises and wants to use AWS for data backup. All of the data must be available locally. The backup application can write only to block-based storage that is compatible with the Portable Operating System Interface (POSIX).
Which backup solution will meet these requirements?

AConfigure the backup software to use Amazon S3 as the target for the data backups.

BConfigure the backup software to use Amazon S3 Glacier as the target for the data backups.

CUse AWS Storage Gateway, and configure it to use gateway-cached volumes.

DUse AWS Storage Gateway, and configure it to use gateway-stored volumes.

1 answers

93 votes

1402

Answer Link

Amazon SOA-C02 Quiz:4 Topic:2 Questions:16-20

Free Practice Mock Questions Set 16-20 (Quiz # 4) for Amazon SOA-C02 Exam, according to official Amazon AWS Certified SysOps Administrator - Associate exam syllabus topic # 2

Quiz 1

Quiz 2

Quiz 3

Quiz 4

Quiz 5

A company plans to deploy a database on an Amazon Aurora MySQL DB cluster. The database will store data for a demonstration environment. The data must be reset on a daily basis.What is the MOST operationally efficient solution that meets these requirements?

Amazon SOA-C02 Quiz:4 Topic:2 Questions:16-20

A company plans to deploy a database on an Amazon Aurora MySQL DB cluster. The database will store data for a demonstration environment. The data must be reset on a daily basis.
What is the MOST operationally efficient solution that meets these requirements?