AWS Certified SysOps Administrator SOA-C01 – Question877

A company wants to reduce costs on jobs that can be completed at any time. The jobs are currently run using multiple On-Demand Instances, and the jobs take just under 2 hours to complete. If a job fails for any reason, it can be restarted from the beginning.
Which method is the MOST cost-effective based on these requirements?

A.
Purchase Reserved Instances to be used for job execution.
B. Submit a request for a one-time Spot Instance for job execution.
C. Submit a request for a Spot block to be used for job execution.
D. Use a mixture of On-Demand and Spot Instances for job execution.

Correct Answer: C

AWS Certified SysOps Administrator SOA-C01 – Question876

A company manages more than 1,000 Amazon EC2 instances running Amazon Linux 2 in multiple VPCs. A SysOps administrator must change the statically configured DNS server IP address on all the EC2 instances.
Which solution will require the LEAST amount of effort?

A.
Develop an AWS Lambda function to update the corporate DNS IP address on all the EC2 instances.
B. Run a shell script to update the corporate DNS IP address on each EC2 instance.
C. Update the Amazon Machine Images (AMIs) of the EC2 instances to configure the updated corporate DNS IP address.
D. Use the AWS Systems Manager Run Command to update the corporate DNS IP address on all the EC2 instances.

Correct Answer: D

AWS Certified SysOps Administrator SOA-C01 – Question875

The chief financial officer (CFO) of an organization has seen a spike in Amazon S3 storage costs over the last few months. A SysOps administrator suspects that these costs are related to storage for older versions of S3 objects from one of its S3 buckets.
What can the administrator do to confirm this suspicion?

A.
Enable Amazon S3 inventory and then query the inventory to identify the total storage of previous object versions.
B. Use object-level cost allocation tags to identify the total storage of previous object versions.
C. Enable the Amazon S3 analytics feature for the bucket to identify the total storage of previous object versions.
D. Use Amazon CloudWatch storage metrics for the S3 bucket to identify the total storage of previous object versions.

Correct Answer: D

AWS Certified SysOps Administrator SOA-C01 – Question874

A company is using an Amazon ElastiCache for Redis cluster in a production environment. To align with the company's technical requirements, a SysOps administrator needs to select a deployment to provide increased availability and fault tolerance.
Which action should the SysOps administrator take to accomplish this goal?

A.
Deploy the ElastiCache cluster with Memcached as the engine.
B. Deploy the Redis cluster within an Auto Scaling group to launch replicas across multiple Availability Zones.
C. Verify that cluster mode is disabled. Increase the number of shards.
D. Verify that Multi-AZ with automatic failover is enabled. Place replicas in multiple Availability Zones.

Correct Answer: D

Explanation:

AWS Certified SysOps Administrator SOA-C01 – Question873

A company has a web application that is experiencing performance problems many times each night. A root cause analysis reveals spikes in CPU utilization that last 5 minutes on an Amazon EC2 Linux instance. A SysOps administrator is tasked with finding the process ID (PID) of the service or process that is consuming more CPU.
How can the administrator accomplish this with the LEAST amount of effort?

A.
Configure an AWS Lambda function in Python 3.7 to run every minute to capture the PID and send a notification.
B. Configure the procstat plugin to collect and send CPU metrics for the running processes.
C. Log in to the EC2 Linux instance using a .pem key each night and then run the top command.
D. Use the default Amazon CloudWatch CPU utilization metric to capture the PID in the CloudWatch dashboard.

AWS Certified SysOps Administrator SOA-C01 – Question872

A company is expanding its use of AWS services across its portfolios. The company wants to provision AWS accounts for each team to ensure a separation of business processes for security, compliance, and billing. Account creation and bootstrapping should be completed in a scalable and efficient way so new accounts are created with a defined baseline and governance guardrails in place. A SysOps administrator needs to design a provisioning process that saves time and resources.
Which action should be taken to meet these requirements?

A.
Automate using AWS Elastic Beanstalk to provision the AWS accounts, set up infrastructure, and integrate with AWS Organizations.
B. Create bootstrapping scripts in AWS OpsWorks and combine them with AWS CloudFormation templates to provision accounts and infrastructure.
C. Use AWS Config to provision accounts and deploy instances using AWS Service Catalog.
D. Use AWS Control Tower to create a template in Account Factory and use the template to provision new accounts.

Correct Answer: A

AWS Certified SysOps Administrator SOA-C01 – Question871

A company in a highly regulated industry has just migrated an Amazon EC2 based application to AWS. For compliance reasons, all network traffic data between the servers must be captured and retained.
Which solution will accomplish this with the LEAST amount of effort?

A.
Set up AWS CloudTrail on the VPC. Configure Amazon CloudWatch Logs as the destination.
B. Set up AWS CloudTrail on the VPC. Configure Amazon S3 as the destination.
C. Set up flow logs at the elastic network interface level. Configure Amazon S3 as the destination.
D. Set up flow logs at the VPC level. Configure Amazon S3 as the destination.

AWS Certified SysOps Administrator SOA-C01 – Question870

A company has several accounts between different teams and wants to increase its auditing and compliance capabilities. The accounts are managed through AWS Organizations. Management wants to provide the security team with secure access to the account logs while also restricting the possibility for the logs to be modified.
How can a SysOps administrator achieve this is with the LEAST amount of operational overhead?

A.
Store AWS CloudTrail logs in Amazon S3 in each account. Create a new account to store compliance data and replicate the objects into the newly created account.
B. Store AWS CloudTrail logs in Amazon S3 in each account. Create an IAM user with read-only access to the CloudTrail logs.
C. From the master account, create an organization trail using AWS CloudTrail and apply it to all Regions. Use IAM roles to restrict access.
D. Use an AWS CloudFormation stack set to create an AWS CloudTrail trail in every account and restrict permissions to modify the logs.

Correct Answer: C

AWS Certified SysOps Administrator SOA-C01 – Question869

A sysops administrator is trying to deploy a new Amazon EC2 instance using the AWS Management Console, but the instance is failing to launch.
What could be causing this problem? (Choose two.)

A.
The AWS account has reached EC2 limits for the Region.
B. The AWS account has reached EC2 limits for the Availability Zone.
C. An EC2 key pair has not been specified.
D. The EC2 instance is missing an instance profile with ec2:RunInstances permissions.
E. The subnet being used has no more usable private IP addresses.

AWS Certified SysOps Administrator SOA-C01 – Question868

A medical imaging company needs to process large amounts of imaging data in real time using a specific instance type. The company wants to guarantee sufficient resource capacity for 1 year.
Which action will meet these requirements in the MOST cost-effective manner?

A.
Create 1-year On-Demand Capacity Reservations in the specific Availability Zones.
B. Launch Amazon EC2 instances with termination protection enabled.
C. Purchase 1-year Reserved Instances in the specific Availability Zones.
D. Use a Spot Fleet across multiple Availability Zones.

Correct Answer: A

Explanation:

Explanation: On-demand capacity reservation in AZ is the only logical way to guarante resource capacity for a specific period of time. You cannot use spot fleet since it can terminate anytime. Reserved instances are also not a viable option because the images need resource capacity continuously.