Free SOA-C02 Exam Braindumps
AWS Certified SysOps Administrator - Associate Questions 171–175 (page: 36)

Updated On: 10-Feb-2026

A company has a memory-intensive application that runs on a fleet of Amazon EC2 instances behind an Elastic Load Balancer (ELB). The instances run in an Auto Scaling group. A SysOps administrator must ensure that the application can scale based on the number of users that connect to the application.
Which solution will meet these requirements?

  1. Create a scaling policy that will scale the application based on the ActiveConnectionCount Amazon CloudWatch metric that is generated from the ELB.
  2. Create a scaling policy that will scale the application based on the mem_used Amazon CloudWatch metric that is generated from the EL
  3. Create a scheduled scaling policy to increase the number of EC2 instances in the Auto Scaling group to support additional connections.
  4. Create and deploy a script on the ELB to expose the number of connected users as a custom Amazon CloudWatch metric. Create a scaling policy that uses the metric.

Answer(s): A



A SysOps administrator creates a new VPC that includes a public subnet and a private subnet. The SysOps administrator successfully launches 11 Amazon EC2 instances in the private subnet. The SysOps administrator attempts to launch one more EC2 instance in the same subnet. However, the SysOps administrator receives an error message that states that not enough free IP addresses are available.
What must the SysOps administrator do to deploy more EC2 instances?

  1. Edit the private subnet to change the CIDR block to /27.
  2. Edit the private subnet to extend across a second Availability Zone.
  3. Assign additional Elastic IP addresses to the private subnet.
  4. Create a new private subnet to hold the required EC2 instances.

Answer(s): D



A company needs to automatically monitor an AWS account for potential unauthorized AWS Management Console logins from multiple geographic locations.
Which solution will meet this requirement?

  1. Configure Amazon Cognito to detect any compromised IAM credentials.
  2. Set up Amazon Inspector. Scan and monitor resources for unauthorized logins.
  3. Set up AWS Config. Add the iam-policy-blacklisted-check managed rule to the account.
  4. Configure Amazon GuardDuty to monitor the UnauthorizedAccess:IAMUser/ConsoleLoginSuccess.B finding.

Answer(s): D



A company has an Amazon RDS DB instance. The company wants to implement a caching service while maintaining high availability.
Which combination of actions will meet these requirements? (Choose two.)

  1. Add Auto Discovery to the data store.
  2. Create an Amazon ElastiCache for Memcached data store.
  3. Create an Amazon ElastiCache for Redis data store.
  4. Enable Multi-AZ for the data store.
  5. Enable Multi-threading for the data store.

Answer(s): C,D



A company monitors its account activity using AWS CloudTrail, and is concerned that some log files are being tampered with after the logs have been delivered to the account’s Amazon S3 bucket.
Moving forward, how can the SysOps administrator confirm that the log files have not been modified after being delivered to the S3 bucket?

  1. Stream the CloudTrail logs to Amazon CloudWatch Logs to store logs at a secondary location.
  2. Enable log file integrity validation and use digest files to verify the hash value of the log file.
  3. Replicate the S3 log bucket across regions, and encrypt log files with S3 managed keys.
  4. Enable S3 server access logging to track requests made to the log bucket for security audits.

Answer(s): B



Viewing page 36 of 97
Viewing questions 176 - 180 out of 424 questions


Post your Comments and Discuss Amazon SOA-C02 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!