QUESTION: 149

A company uses AWS Organizations to manage its AWS accounts. A SysOps administrator must create a backup strategy for all Amazon EC2 instances across all the company’s AWS accounts.

Which solution will meet these requirements in the MOST operationally efficient way?

Deploy an AWS Lambda function to each account to run EC2 instance snapshots on a scheduled basis.
Create an AWS CloudFormation stack set in the management account to add an AutoBackup=True tag to every EC2 instance.
Use AWS Backup in the management account to deploy policies for all accounts and resources.
Use a service control policy (SCP) to run EC2 instance snapshots on a scheduled basis in each account.

Answer(s): C

Reveal Solution Next Question

QUESTION: 150

A SysOps administrator is reviewing VPC Flow Logs to troubleshoot connectivity issues in a VPC. While reviewing the logs, the SysOps administrator notices that rejected traffic is not listed.

What should the SysOps administrator do to ensure that all traffic is logged?

Create a new flow log that has a filter setting to capture all traffic.
Create a new flow log. Set the log record format to a custom format. Select the proper fields to include in the log.
Edit the existing flow log. Change the filter setting to capture all traffic.
Edit the existing flow log. Set the log record format to a custom format. Select the proper fields to include in the log.

Answer(s): A

Reveal Solution Next Question

QUESTION: 151

A company is expanding its use of AWS services across its portfolios. The company wants to provision AWS accounts for each team to ensure a separation of business processes for security, compliance, and billing. Account creation and bootstrapping should be completed in a scalable and efficient way so new accounts are created with a defined baseline and governance guardrails in place. A SysOps administrator needs to design a provisioning process that saves time and resources.

Which action should be taken to meet these requirements?

Automate using AWS Elastic Beanstalk to provision the AWS accounts, set up infrastructure, and integrate with AWS Organizations.
Create bootstrapping scripts in AWS OpsWorks and combine them with AWS CloudFormation templates to provision accounts and infrastructure.
Use AWS Config to provision accounts and deploy instances using AWS Service Catalog.
Use AWS Control Tower to create a template in Account Factory and use the template to provision new accounts.

Answer(s): D

Reveal Solution Next Question

QUESTION: 152

A SysOps administrator noticed that the cache hit ratio for an Amazon CloudFront distribution is less than 10%.

Which collection of configuration changes will increase the cache hit ratio for the distribution? (Choose two.)

Ensure that only required cookies, query strings, and headers are forwarded in the Cache Behavior Settings.
Change the Viewer Protocol Policy to use HTTPS only.
Configure the distribution to use presigned cookies and URLs to restrict access to the distribution.
Enable automatic compression of objects in the Cache Behavior Settings.
Increase the CloudFront time to live (TTL) settings in the Cache Behavior Settings.

Answer(s): A,E

Reveal Solution Next Question

Free SOA-C02 Exam Braindumps (page: 38)

QUESTION: 149

QUESTION: 150

QUESTION: 151

QUESTION: 152