SOA-C02 Practice Test 37 — 15 Questions

Question 1

A SysOps administrator has created the IAM policy shown in the exhibit. The policy is attached to a role used by an automation script that manages Amazon EBS snapshots. The script is failing when it tries to delete snapshots. What is the likely cause?

Accepted Answer

The script is trying to delete snapshots in a different region or account.. The correct answer is D because the 'ec2:DeleteSnapshot' action is allowed only for snapshots in the specified account and region, but the script may be trying to delete snapshots in another region. Option A is wrong because 'ec2:Describe*' can describe snapshots. Option B is wrong because 'ec2:CreateTags' is allowed on any resource. Option C is wrong because the policy allows 'ec2:DeleteSnapshot' but with a resource restriction.

Answer

The script does not have permission to delete any snapshots.

Answer

The script does not have permission to describe snapshots.

Answer

The script does not have permission to create tags on snapshots.

Question 2

A company uses AWS CloudFormation to deploy a stack that includes an Amazon RDS DB instance. The administrator wants to ensure that the DB instance is not deleted when the stack is deleted. Which property should the administrator set in the CloudFormation template?

Accepted Answer

DeletionPolicy: Retain. The DeletionPolicy attribute with value 'Retain' ensures the resource is retained after stack deletion. Option C is correct. Option A is wrong because 'Snapshot' creates a final snapshot but still deletes the instance. Option B is wrong because 'Delete' is the default behavior. Option D is wrong because 'Replace' is not a valid DeletionPolicy.

Answer

DeletionPolicy: Delete

Answer

DeletionPolicy: Snapshot

Answer

DeletionPolicy: Replace

Question 3

A company uses AWS OpsWorks for configuration management. The administrator needs to deploy a new application version to a stack of EC2 instances. The instances are part of a layer that has a custom recipe. Which THREE steps are required to update the application? (Choose THREE.)

Accepted Answer

Run the 'Execute Recipes' stack command to run the new recipe.. Options B, D, and E are correct. Updating the custom cookbook with the new recipe, running the 'Update Custom Cookbooks' stack command to fetch the latest cookbook, and then running the recipe via 'Execute Recipes' stack command are the required steps. Option A (update app) is for OpsWorks for Chef Automate, not for custom recipes. Option C (deploy command) is for built-in deployment, not custom recipes.

Answer

Run the 'Deploy' stack command to deploy the new application.

Answer

Update the app in the OpsWorks console to point to the new application version.

Question 4

A CloudFormation stack creation failed. The administrator runs the command shown in the exhibit. What is the most likely reason for the failure?

Accepted Answer

The AMI ID specified in the template does not exist in the region. Option A is correct because the error explicitly states the AMI ID is invalid. Option B is wrong because the error mentions the AMI ID, not instance type. Option C is wrong because there is no indication of missing permissions. Option D is wrong because the error is about the AMI, not the region.

Answer

The IAM role for CloudFormation does not have permission to launch EC2 instances

Answer

The stack is being created in a region that does not support the specified AMI

Answer

The instance type t2.micro is not supported in the target Availability Zone

Question 5

A SysOps administrator needs to deploy a CloudFormation stack across multiple AWS accounts in an organization using AWS Organizations. The administrator wants to use a single template and a single deployment operation. Which AWS service should be used to centrally manage the deployment?

Accepted Answer

AWS CloudFormation StackSets. Option A is correct because AWS CloudFormation StackSets allow deploying stacks across multiple accounts and regions from a single template. Option B is incorrect because OpsWorks is for configuration management. Option C is incorrect because CodePipeline is for CI/CD pipelines. Option D is incorrect because Systems Manager is for operational management.

Answer

AWS Systems Manager

Answer

AWS OpsWorks Stacks

Answer

AWS CodePipeline

Question 6

A company uses AWS OpsWorks for configuration management. The SysOps administrator needs to deploy a new application version to existing EC2 instances managed by OpsWorks. Which OpsWorks lifecycle event should the administrator trigger to install the new application?

Accepted Answer

Deploy. The 'Deploy' lifecycle event is specifically designed for deploying applications. Option A is wrong because 'Setup' runs only once when the instance boots. Option B is wrong because 'Configure' runs when instances join or leave the stack. Option D is wrong because 'Shutdown' runs when an instance is terminated.

Answer

Configure

Answer

Shutdown

Answer

Setup

Question 7

An organization is using OpsWorks to manage a stack of application servers. They need to automatically scale out based on CPU utilization. Which configuration should the SysOps administrator use to achieve this?

Accepted Answer

Add a load-based layer and configure the scaling thresholds for CPU utilization.. Option A is correct because OpsWorks uses time-based and load-based instances; load-based uses CloudWatch alarms to automatically add/remove instances. Option B is incorrect because a scheduled scaling is time-based, not based on CPU. Option C is incorrect because auto-healing replaces failed instances, not scales. Option D is incorrect because a lifecycle event hook is for custom scripts during events, not scaling.

Answer

Enable auto-healing on the layer to replace unhealthy instances automatically.

Answer

Create a custom Chef recipe that runs on a lifecycle event to launch new instances.

Answer

Configure a time-based instance with a recurring schedule to add instances during peak hours.

Question 8

A SysOps administrator is planning to deploy a web application using AWS Elastic Beanstalk. The application requires high availability across multiple Availability Zones. The administrator needs to configure the environment to automatically replace a failed instance. Which TWO configuration options should the administrator enable? (Choose TWO.)

Accepted Answer

Enable the environment's health check and set the health check path to a valid endpoint.. Option A (Auto Scaling group with a minimum of 2 instances) is correct for high availability. Option B (Load balancer) is correct for distributing traffic. Option D (Health check) is correct for detecting failures. Option C is incorrect because OpsWorks is a different service. Option E is incorrect because CloudWatch alarms alert but do not automatically replace instances without Auto Scaling.

Answer

Attach an Application Load Balancer to distribute traffic to healthy instances.

Answer

Use AWS OpsWorks Stacks to manage the instance lifecycle.

Answer

Create a CloudWatch alarm that triggers an SNS notification when an instance fails.

Question 9

A company is using AWS CodeDeploy to deploy an application to an Auto Scaling group. The deployment fails with the error 'The overall deployment failed because too many individual instances failed deployment'. The SysOps administrator checks the deployment logs and finds that the BeforeInstall lifecycle event script is failing on some instances. The instances are Amazon Linux 2. What should the administrator do to troubleshoot this issue?

Accepted Answer

Review the BeforeInstall script's output and exit code in the deployment logs or on the instance.. The BeforeInstall script is failing; checking the script's exit code and logs on the instance is the correct approach. Option A is wrong because the appspec.yml file is likely fine if it runs the script. Option B is wrong because the issue is script execution, not agent connectivity. Option D is wrong because the issue is not about configuration file format.

Answer

Verify that the CodeDeploy agent on the instances is running and can communicate with the CodeDeploy service.

Answer

Ensure that the CodeDeploy deployment configuration is set to 'OneAtATime' to reduce instance failures.

Answer

Check the appspec.yml file for syntax errors in the hooks section.

Question 10

A company uses AWS CloudFormation with nested stacks. The parent stack creates a child stack that launches an Auto Scaling group. The child stack fails to create, and the parent stack rolls back. The administrator wants to debug the child stack. What is the most efficient way to view the child stack's events?

Accepted Answer

Navigate to the child stack in the AWS CloudFormation console and view its events.. Option C is correct because the child stack events are accessible through the AWS Management Console or CLI by specifying the child stack's name. Option A is wrong because the parent stack's events do not show detailed child resource events. Option B is wrong because the child stack still exists after rollback (in FAILED state). Option D is wrong because CloudWatch Logs are not automatically configured for CloudFormation stacks.

Answer

Rerun the parent stack with a different name to see the child stack creation.

Answer

Check the CloudWatch Logs for the parent stack.

Answer

View the parent stack's events in the AWS Management Console.

Question 11

A company is using Elastic Beanstalk to deploy a web application. Recently, a deployment failed due to a missing environment variable. The administrator fixed the configuration and wants to redeploy the same application version without rebuilding the source bundle. What is the MOST efficient way to redeploy?

Accepted Answer

Use the AWS CLI command aws elasticbeanstalk update-environment to update the environment, then use the same version label to deploy again.. Option B is correct because the aws elasticbeanstalk update-environment command can update environment configuration and then the same application version can be deployed again. Option A is incorrect because it creates a new environment. Option C is incorrect because it creates a new application version. Option D is incorrect because it replaces the environment, which is unnecessary.

Answer

Terminate the environment and create a new environment with the same configuration.

Answer

Upload a new application version with the same source bundle and deploy it to the environment.

Answer

Use the Elastic Beanstalk console to create a new environment with the same application version.

Question 12

A company is using AWS CloudFormation to manage infrastructure. They have a stack that creates an EC2 instance and an Elastic IP. The instance is in a VPC with an internet gateway. The stack creation succeeds, but the instance does not have internet connectivity. What is the most likely cause?

Accepted Answer

The subnet's route table does not have a route to the internet gateway.. Option A is correct because the instance must have a public IP to communicate with the internet; an Elastic IP attached to the instance provides that. Option B is wrong because the route table might not have a route to the internet gateway. Option C is wrong because the security group allows outbound traffic by default. Option D is wrong because the instance might be in a private subnet, but the question says VPC with IGW.

Answer

The instance does not have a public IP address.

Answer

The instance is in a private subnet.

Answer

The security group does not allow outbound traffic.

Question 13

A company uses AWS Elastic Beanstalk to deploy a web application. The company wants to update the application to a new version with zero downtime. Which deployment policy should be used?

Accepted Answer

Rolling deployment. Option A is correct because rolling deployment updates instances in batches, maintaining capacity. Option B is wrong because all at once causes downtime. Option C is wrong because immutable creates a new environment and swaps, which is also zero downtime, but rolling is also acceptable. However, the question specifies 'zero downtime' and rolling is a common choice. Option D is wrong because canary is for Lambda.

Answer

Immutable deployment

Answer

All at once deployment

Answer

Canary deployment

Question 14

A company is deploying a microservices application on AWS using Amazon ECS with Fargate launch type. The SysOps administrator needs to automate the deployment process so that when a new Docker image is pushed to Amazon ECR, the ECS service is updated with the new image. Which THREE AWS services should be used together to achieve this? (Choose THREE.)

Accepted Answer

AWS CodePipeline. Option A (Amazon ECR) is correct for storing Docker images. Option B (Amazon ECS) is correct for running containers. Option D (AWS CodePipeline) is correct for orchestrating the CI/CD pipeline triggered by ECR push. Option C is incorrect because CloudFormation is for infrastructure provisioning, not continuous deployment. Option E is incorrect because Systems Manager is for management, not CI/CD.

Answer

AWS CloudFormation

Answer

AWS Systems Manager

Question 15

A SysOps administrator wants to deploy a serverless application using AWS Lambda functions, Amazon API Gateway, and Amazon DynamoDB. The deployment must be automated and repeatable. Which AWS service should the administrator use to define and manage this infrastructure as code?

Accepted Answer

AWS CloudFormation with the AWS Serverless Application Model (SAM). AWS CloudFormation or the AWS Serverless Application Model (SAM) are the best choices for infrastructure as code. SAM is an extension of CloudFormation specifically for serverless applications. Option B is wrong because Elastic Beanstalk is for web applications on EC2, not serverless. Option C is wrong because OpsWorks is for Chef/Puppet. Option D is wrong because CodeDeploy is for deploying code, not infrastructure.

Answer

AWS CodeDeploy

Answer

AWS OpsWorks

Answer

AWS Elastic Beanstalk

SOA-C02 Practice Test 37 — 15 Questions

Exhibit

SOA-C02 Practice Test 37 — 15 Questions

Exhibit