support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Amazon
  4. SOA-C02

Free SOA-C02 Exam Braindumps
AWS Certified SysOps Administrator - Associate Questions 226–230 (page: 47)

Updated On: 10-Feb-2026
Page 47 of 97
PDF with 424 Questions

A SysOps administrator wants to monitor the free disk space that is available on a set of Amazon EC2 instances that have Amazon Elastic Block Store (Amazon EBS) volumes attached. The SysOps administrator wants to receive a notification when the used disk space of the EBS volumes exceeds a threshold value, but only when the DiskReadOps metric also exceeds a threshold value. The SysOps administrator has set up an Amazon Simple Notification Service (Amazon SNS) topic.
How can the SysOps administrator receive notification only when both metrics exceed their threshold values?

  1. Install the Amazon CloudWatch agent on the EC2 instances. Create a metric alarm for the disk space and a metric alarm for the DiskReadOps metric. Create a composite alarm that includes the two metric alarms to publish a notification to the SNS topic.
  2. Install the Amazon CloudWatch agent on the EC2 instances. Create a metric alarm for the disk space and a metric alarm for the DiskReadOps metric. Configure each alarm to publish a notification to the SNS topic.
  3. Create a metric alarm for the EBSByteBalance% metric and a metric alarm for the DiskReadOps metric. Create a composite alarm that includes the two metric alarms to publish a notification to the SNS topic.
  4. Configure detailed monitoring for the EC2 instances. Create a metric alarm for the disk space and a metric alarm for the DiskReadOps metric. Create a composite alarm that includes the two metric alarms to publish a notification to the SNS topic.

Answer(s): A



A company updates its security policy to prohibit the public exposure of any data in Amazon S3 buckets in the company's account.
What should a SysOps administrator do to meet this requirement?

  1. Turn on S3 Block Public Access from the account level.
  2. Create an Amazon Event Bridge (Amazon CloudWatch Events) rule to enforce that all S3 objects are private.
  3. Use Amazon Inspector to search for S3 buckets and to automatically reset S3 ACLs if any public S3 buckets are found.
  4. Use S3 Object Lambda to examine S3 ACLs and to change any public S3 ACLs to private.

Answer(s): A



A company's SysOps administrator needs to change the AWS Support plan for one of the company's AWS accounts. The account has multi-factor authentication (MFA) activated, and the MFA device is lost.
What should the SysOps administrator do to sign in?

  1. Sign in as a root user by using email and phone verification. Set up a new MFA device. Change the root user password.
  2. Sign in as an IAM user with administrator permissions. Resynchronize the MFA token by using the IAM console.
  3. Sign in as an IAM user with administrator permissions. Reset the MFA device for the root user by adding a new device.
  4. Use the forgot-password process to verify the email address. Set up a new password and MFA device.

Answer(s): A



A company is creating a new multi-account architecture. A SysOps administrator must implement a login solution to centrally manage user access and permissions across all AWS accounts. The solution must be integrated with AWS Organizations and must be connected to a third-party Security Assertion Markup Language (SAML) 2.0 identity provider (IdP).
What should the SysOps administrator do to meet these requirements?

  1. Configure an Amazon Cognito user pool. Integrate the user pool with the third-party IdP.
  2. Enable and configure AWS Single Sign-On with the third-party IdP.
  3. Federate the third-party IdP with AWS Identity and Access Management (IAM) for each AWS account in the organization.
  4. Integrate the third-party IdP directly with AWS Organizations.

Answer(s): B



A company is managing many accounts by using a single organization in AWS Organizations. The organization has all features enabled. The company wants to turn on AWS Config in all the accounts of the organization and in all AWS Regions.
What should a SysOps administrator do to meet these requirements in the MOST operationally efficient way?

  1. Use AWS CloudFormation Stack Sets to deploy stack instances that turn on AWS Config in all accounts and in all Regions.
  2. Use AWS CloudFormation Stack Sets to deploy stack policies that turn on AWS Config in all accounts and in all Regions.
  3. Use service control policies (SCPs) to configure AWS Config in all accounts and in all Regions.
  4. Create a script that uses the AWS CLI to turn on AWS Config in all accounts in the organization. Run the script from the organization's management account.

Answer(s): A



  PDF
Viewing page 47 of 97
Viewing questions 231 - 235 out of 424 questions


Post your Comments and Discuss Amazon SOA-C02 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!