Official Bank
0/1109
Page
1/4
SOA-C02 AWS Certified SysOps Administrator – Associate Exam (SOA-C02) - AWS Exam Questions
Last updated on June 20, 2026
97%
Exam Compliance
1109
Total Questions
1
Question
[Networking and Content Delivery] A SysOps administrator creates two VPCs, VPC1 and VPC2, in a company’s AWS account The SysOps administrator deploys a Linux Amazon EC2 instance in VPC1 and deploys an Amazon RDS for MySQL DB instance in VPC2. The DB instance is deployed in a private subnet. An application that runs on the EC2 instance needs to connect to the database.
What should the SysOps administrator do to give the EC2 instance the ability to connect to the database?
What should the SysOps administrator do to give the EC2 instance the ability to connect to the database?
Options
A
Configure VPC peering between the two VPCs.
B
Enter the DB instance connection string into the VPC1 route table.
C
Connect to the DB instance by using the DB instance’s public IP address.
D
Add the same IPv4 CIDR range for both VPCs.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
2
Question
[Monitoring, Reporting, and Automation] A SysOps administrator has set up a new Amazon EC2 instance as a web server in a public subnet. The instance uses HTTP port 80 and HTTPS port 443. The SysOps administrator has confirmed internet connectivity by downloading operating system updates and software from public repositories. However, the SysOps administrator cannot access the instance from a web browser on the internet.
Which combination of steps should the SysOps administrator take to troubleshoot this issue? (Select THREE.)
Which combination of steps should the SysOps administrator take to troubleshoot this issue? (Select THREE.)
Select 3
Options
A
Ensure that the outbound rules of the instance's security group allow traffic on ports 80 and 443.
B
Ensure that the inbound rules of the instance's security group allow traffic on ports 80 and 443.
C
Ensure that AWS WAF is turned on for the instance and is blocking web traffic.
D
Ensure that the filtering rules for any firewalls that are running on the instance allow inbound traffic on ports 80 and 443.
E
Ensure that ephemeral ports 1024-65535 are allowed in the inbound rules of the network ACL that is associated with the instance's subnet.
F
Ensure that ephemeral ports 1024-65535 are allowed in the outbound rules of the network ACL that is associated with the instance's subnet.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
3
Question
[Security and Compliance] A company is creating an application that runs on smart TVs and mobile phones. Static images for the application are loaded from an Amazon CloudFront distribution. The images have large file sizes that result in a poor experience for users of mobile devices. The company has created a set of smaller images for mobile devices. A SysOps administrator must configure CloudFront to cache different content based on the user's device type.
Which solution will meet this requirement?
Which solution will meet this requirement?
Options
A
Set the Elemental-MediaTailor-PersonalizedManifests origin request policy on the CloudFront distribution to enable caching of different images depending on the requesting device.
B
Create two new CloudFront distributions: one distribution with the smart TV resources, and one distribution with the mobile device resources. Create a CloudFront behavior. Add a policy to send the requests to the correct distribution.
C
Configure AWS Amplify to set the CloudFront distribution origin request policy to enable caching of different images for mobile devices.
D
Create a CloudFront origin request policy. Include the CloudFront-Is-SmartTV-Viewer header and the CloudFront-Is-Mobile-Viewer header in the origin request settings.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
4
Question
[Deployment, Provisioning, and Automation] A company uses AWS CloudFormation to deploy its application infrastructure Recently, a user accidentally changed a property of a database in a CloudFormation template and performed a stack
update that caused an interruption to the application A SysOps administrator must determine how to
modify the deployment process to allow the DevOps team to continue to deploy the infrastructure, but prevent against accidental modifications to specific resources.
Which solution will meet these requirements?
update that caused an interruption to the application A SysOps administrator must determine how to
modify the deployment process to allow the DevOps team to continue to deploy the infrastructure, but prevent against accidental modifications to specific resources.
Which solution will meet these requirements?
Options
A
Set up an Amazon CloudWatch Events event with a rule to trigger based on any CloudFormation API call An AWS Lambda function can then describe the stack to determine if any protected resources were modified and cancel the operation
B
Set up an AWS Config rule to alert based on changes to any CloudFormation stack An AWS Lambda function can then describe the stack to determine if any protected resources were modified and cancel the operation
C
Attach an IAM policy to the DevOps team role that prevents a CloudFormation stack from updating, with a condition based on the specific Amazon Resource Names (ARNs) of the protected resources
D
Launch the CloudFormation templates using a stack policy with an explicit allow for all resources and an explicit deny of the protected resources with an action of Update
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
5
Question
[Monitoring, Reporting, and Automation] A SysOps administrator has enabled AWS CloudTrail in an AWS account If CloudTrail is disabled it must be re-enabled immediately What should the SysOps administrator do to meet these requirements WITHOUT writing custom code''
Options
A
Create an AWS Config rule that is invoked when CloudTrail configuration changes Apply the AWS- ConfigureCloudTrailLogging automatic remediation action
B
Add the AWS account to AWS Organizations Enable CloudTrail in the management account
C
Create an Amazon EventBridge (Amazon CloudWatch Events) hourly rule with a schedule pattern to run an AWS Systems Manager Automation document to enable CloudTrail
D
Create an AWS Config rule that is invoked when CloudTrail configuration changes Configure the rule to invoke an AWS Lambda function to enable CloudTrail
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Finish Practice?
Are you sure you want to finish? This will end your practice session.