Free SOA-C02 Exam Braindumps
AWS Certified SysOps Administrator - Associate Questions 166–170 (page: 35)

Updated On: 10-Feb-2026

A company is releasing a new static website hosted on Amazon S3. The static website hosting feature was enabled on the bucket and content was uploaded; however, upon navigating to the site, the following error message is received:
403 Forbidden - Access Denied
What change should be made to fix this error?

  1. Add a bucket policy that grants everyone read access to the bucket.
  2. Add a bucket policy that grants everyone read access to the bucket objects.
  3. Remove the default bucket policy that denies read access to the bucket.
  4. Configure cross-origin resource sharing (CORS) on the bucket.

Answer(s): B



A company uses AWS Organizations. A SysOps administrator wants to use AWS Compute Optimizer and AWS tag policies in the management account to govern all member accounts in the billing family. The SysOps administrator navigates to the AWS Organizations console but cannot activate tag policies through the management account.
What could be the reason for this issue?

  1. All features have not been enabled in the organization.
  2. Consolidated billing has not been enabled.
  3. The member accounts do not have tags enabled for cost allocation.
  4. The member accounts have not manually enabled trusted access for Compute Optimizer.

Answer(s): A



A company is storing media content in an Amazon S3 bucket and uses Amazon CloudFront to distribute the content to its users. Due to licensing terms, the company is not authorized to distribute the content in some countries. A SysOps administrator must restrict access to certain countries.
What is the MOST operationally efficient solution that meets these requirements?

  1. Configure the S3 bucket policy to deny the GetObject operation based on the S3:LocationConstraint condition.
  2. Create a secondary origin access identity (OAI). Configure the S3 bucket policy to prevent access from unauthorized countries.
  3. Enable the geo restriction feature in the CloudFront distribution to prevent access from unauthorized countries.
  4. Update the application to generate signed CloudFront URLs only for IP addresses in authorized counties.

Answer(s): C



A SysOps administrator created an Amazon VPC with an IPv6 CIDR block, which requires access to the internet. However, access from the internet towards the VPC is prohibited. After adding and configuring the required components to the VPC, the administrator is unable to connect to any of the domains that reside on the internet.
What additional route destination rule should the administrator add to the route tables?

  1. Route ::/0 traffic to a NAT gateway
  2. Route ::/0 traffic to an internet gateway
  3. Route 0.0.0.0/0 traffic to an egress-only internet gateway
  4. Route ::/0 traffic to an egress-only internet gateway

Answer(s): D



A company hosts several write-intensive applications. These applications use a MySQL database that runs on a single Amazon EC2 instance. The company asks a SysOps administrator to implement a highly available database solution that is ideal for multi-tenant workloads.
Which solution should the SysOps administrator implement to meet these requirements?

  1. Create a second EC2 instance for MySQL. Configure the second instance to be a read replica.
  2. Migrate the database to an Amazon Aurora DB cluster. Add an Aurora Replica.
  3. Migrate the database to an Amazon Aurora multi-master DB cluster.
  4. Migrate the database to an Amazon RDS for MySQL DB instance.

Answer(s): C



Viewing page 35 of 97
Viewing questions 171 - 175 out of 424 questions


Post your Comments and Discuss Amazon SOA-C02 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!