support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Amazon
  4. SOA-C02

Free SOA-C02 Exam Braindumps
AWS Certified SysOps Administrator - Associate Questions 116–120 (page: 25)

Updated On: 10-Feb-2026
Page 25 of 97
PDF with 424 Questions

A SysOps administrator is maintaining a web application using an Amazon CloudFront web distribution, an Application Load Balancer (ALB), Amazon RDS, and Amazon EC2 in a VPC. All services have logging enabled. The administrator needs to investigate HTTP Layer 7 status codes from the web application.
Which log sources contain the status codes? (Choose two.)

  1. VPC Flow Logs
  2. AWS CloudTrail logs
  3. ALB access logs
  4. CloudFront access togs
  5. RDS logs

Answer(s): C,D



A company wants to be alerted through email when IAM CreateUser API calls are made within its AWS account.
Which combination of actions should a SysOps administrator take to meet this requirement? (Choose two.)

  1. Create an Amazon EventBridge (Amazon CloudWatch Events) rule with AWS CloudTrail as the event source and IAM CreateUser as the specific API call for the event pattern.
  2. Create an Amazon EventBridge (Amazon CloudWatch Events) rule with Amazon CloudSearch as the event source and IAM CreateUser as the specific API call for the event pattern.
  3. Create an Amazon EventBridge (Amazon CloudWatch Events) rule with AWS IAM Access Analyzer as the event source and IAM CreateUser as the specific API call for the event pattern.
  4. Use an Amazon Simple Notification Service (Amazon SNS) topic as an event target with an email subscription.
  5. Use an Amazon Simple Email Service (Amazon SES) notification as an event target with an email subscription.

Answer(s): A,D



A database is running on an Amazon RDS Multi-AZ DB instance. A recent security audit found the database to be out of compliance because it was not encrypted.
Which approach will resolve the encryption requirement?

  1. Log in to the RDS console and select the encryption box to encrypt the database.
  2. Create a new encrypted Amazon EBS volume and attach it to the instance.
  3. Encrypt the standby replica in the secondary Availability Zone and promote it to the primary instance.
  4. Take a snapshot of the RDS instance, copy and encrypt the snapshot, and then restore to the new RDS instance.

Answer(s): D



A company using AWS Organizations requires that no Amazon S3 buckets in its production accounts should ever be deleted.
What is the SIMPLEST approach the SysOps administrator can take to ensure S3 buckets in those accounts can never be deleted?

  1. Set up MFA Delete on all the S3 buckets to prevent the buckets from being deleted.
  2. Use service control policies to deny the s3:DeleteBucket action on all buckets in production accounts.
  3. Create an IAM group that has an IAM policy to deny the s3:DeleteBucket action on all buckets in production accounts.
  4. Use AWS Shield to deny the s3:DeleteBucket action on the AWS account instead of all S3 buckets.

Answer(s): B



A company has an application that is running on Amazon EC2 instances in a VPC. The application needs access to download software updates from the internet. The VPC has public subnets and private subnets. The company’s security policy requires all EC2 instances to be deployed in private subnets.
What should a SysOps administrator do to meet these requirements?

  1. Add an internet gateway to the VPC. In the route table for the private subnets, add a route to the internet gateway.
  2. Add aNAT gateway to a private subnet. In the route table for the private subnets, add a route to the NAT gateway.
  3. Add a NAT gateway to public subnet. In the route table for the private subnets, add a route to the NAT gateway.
  4. Add two internet gateways to the VPC. In the route tables for the private subnets and public subnets, add a route to each internet gateway.

Answer(s): C



  PDF
Viewing page 25 of 97
Viewing questions 121 - 125 out of 424 questions


Post your Comments and Discuss Amazon SOA-C02 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!