support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Amazon
  4. SOA-C02

Free SOA-C02 Exam Braindumps
AWS Certified SysOps Administrator - Associate Questions 176–180 (page: 37)

Updated On: 10-Feb-2026
Page 37 of 97
PDF with 424 Questions

A SysOps administrator is reviewing AWS Trusted Advisor warnings and encounters a warning for an S3 bucket policy that has open access permissions. While discussing the issue with the bucket owner, the administrator realizes the S3 bucket is an origin for an Amazon CloudFront web distribution.
Which action should the administrator take to ensure that users access objects in Amazon S3 by using only CloudFront URLs?

  1. Encrypt the S3 bucket content with Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3).
  2. Create an origin access identity and grant it permissions to read objects in the S3 bucket.
  3. Assign an IAM user to the CloudFront distribution and grant the user permissions in the S3 bucket policy.
  4. Assign an IAM role to the CloudFront distribution and grant the role permissions in the S3 bucket policy.

Answer(s): B



A SysOps administrator is reviewing AWS Trusted Advisor recommendations. The SysOps administrator notices that all the application servers for a finance application are listed in the Low Utilization Amazon EC2 Instances check. The application runs on three instances across three Availability Zones. The SysOps administrator must reduce the cost of running the application without affecting the application’s availability or design.
Which solution will meet these requirements?

  1. Reduce the number of application servers.
  2. Apply rightsizing recommendations from AWS Cost Explorer to reduce the instance size.
  3. Provision an Application Load Balancer in front of the instances.
  4. Scale up the instance size of the application servers.

Answer(s): B



A company hosts its website in the us-east-1 Region. The company is preparing to deploy its website into the eu-central-1 Region. Website visitors who are located in Europe should access the website that is hosted in eu-central-1. All other visitors access the website that is hosted in us-east-1. The company uses Amazon Route 53 to manage the website’s DNS records.
Which routing policy should a SysOps administrator apply to the Route 53 record set to meet these requirements?

  1. Geolocation routing policy
  2. Geoproximity routing policy
  3. Latency routing policy
  4. Multivalue answer routing policy

Answer(s): A



An organization with a large IT department has decided to migrate to AWS. With different job functions in the IT department, it is not desirable to give all users access to all AWS resources. Currently the organization handles access via LDAP group membership.
What is the BEST method to allow access using current LDAP credentials?

  1. Create an AWS Directory Service Simple AD. Replicate the on-premises LDAP directory to Simple AD.
  2. Create a Lambda function to read LDAP groups and automate the creation of IAM users.
  3. Use AWS CloudFormation to create IAM roles. Deploy Direct Connect to allow access to the on-premises LDAP server.
  4. Federate the LDAP directory with IAM using SAML. Create different IAM roles to correspond to different LDAP groups to limit permissions.

Answer(s): D



A SysOps administrator has created an Amazon EC2 instance using an AWS CloudFormation template in the us-east-1 Region. The administrator finds that this template has failed to create an EC2 instance in the us-west-2 Region.
What is one cause for this failure?

  1. Resource tags defined in the CloudFormation template are specific to the us-east-1 Region.
  2. The Amazon Machine Image (AMI) ID referenced in the CloudFormation template could not be found in the us-west-2 Region.
  3. The cfn-init script did not run during resource provisioning in the us-west-2 Region.
  4. The IAM user was not created in the specified Region.

Answer(s): B



  PDF
Viewing page 37 of 97
Viewing questions 181 - 185 out of 424 questions


Post your Comments and Discuss Amazon SOA-C02 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!