Official Bank
0/1109
Page
1/4
SOA-C02 AWS Certified SysOps Administrator – Associate Exam (SOA-C02) - AWS Exam Questions
Last updated on June 20, 2026
97%
Exam Compliance
1109
Total Questions
1
Question
[Monitoring, Reporting, and Automation] A company requires that all activity in its AWS account be logged using AWS CloudTrail. Additionally, a SysOps administrator must know when CloudTrail log files are modified or deleted.
How should the SysOps administrator meet these requirements?
How should the SysOps administrator meet these requirements?
Options
A
Enable log file integrity validation. Use the AWS CloudTrail .Processing Library to validate the log files.
B
Enable log file integrity validation Use the AWS CLI to validate the log files.
C
Use Amazon CloudWatch Logs to monitor the log files for modifications.
D
Use CloudTrail Insights to monitor the log files for modifications.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
2
Question
[Monitoring, Reporting, and Automation] A SysOps administrator needs to develop a solution that provides email notification and inserts a record into a database every time a file is put into an Amazon S3 bucket.
What is the MOST operationally efficient solution that meets these requirements?
What is the MOST operationally efficient solution that meets these requirements?
Options
A
Set up an Amazon CloudWatch alarm that enters ALARM state whenever an object is created in the S3 bucket Configure the alarm to invoke an AWS Lambda (unction that sends the email notification and inserts the record into the database
B
Set up an S3 event notification that targets an Amazon Simple Notification Service (Amazon SNS) topic Create two subscriptions for the SNS topic Use one subscription to send the email notification Use the other subscription to invoke an AWS Lambda function that inserts the record into the database
C
Set up two S3 event notifications Target a separate AWS Lambda function with each notification Configure one function to send the email notification Configure the other function to insert the record into the database
D
Create an AWS Lambda function to send the email notification and insert the record into the database whenever a new object is detected in the S3 bucket invoke the function every minute with an Amazon EventBridge (Amazon CloudWatch Events) scheduled rule.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
3
Question
[Networking and Content Delivery] A SysOps administrator creates two VPCs, VPC1 and VPC2, in a company’s AWS account The SysOps administrator deploys a Linux Amazon EC2 instance in VPC1 and deploys an Amazon RDS for MySQL DB instance in VPC2. The DB instance is deployed in a private subnet. An application that runs on the EC2 instance needs to connect to the database.
What should the SysOps administrator do to give the EC2 instance the ability to connect to the database?
What should the SysOps administrator do to give the EC2 instance the ability to connect to the database?
Options
A
Configure VPC peering between the two VPCs.
B
Enter the DB instance connection string into the VPC1 route table.
C
Connect to the DB instance by using the DB instance’s public IP address.
D
Add the same IPv4 CIDR range for both VPCs.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
4
Question
[Monitoring, Reporting, and Automation] A SysOps administrator has enabled AWS CloudTrail in an AWS account If CloudTrail is disabled it must be re-enabled immediately What should the SysOps administrator do to meet these requirements WITHOUT writing custom code''
Options
A
Create an AWS Config rule that is invoked when CloudTrail configuration changes Apply the AWS- ConfigureCloudTrailLogging automatic remediation action
B
Add the AWS account to AWS Organizations Enable CloudTrail in the management account
C
Create an Amazon EventBridge (Amazon CloudWatch Events) hourly rule with a schedule pattern to run an AWS Systems Manager Automation document to enable CloudTrail
D
Create an AWS Config rule that is invoked when CloudTrail configuration changes Configure the rule to invoke an AWS Lambda function to enable CloudTrail
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
5
Question
[Monitoring, Reporting, and Automation] A SysOps administrator is responsible for managing a fleet of Amazon EC2 instances. These EC2 instances upload build artifacts to a third-party service. The third-party service recently implemented a strict IP allow list that requires all build uploads to come from a single IP address.
What change should the systems administrator make to the existing build fleet to comply with this new requirement?
What change should the systems administrator make to the existing build fleet to comply with this new requirement?
Options
A
Move all of the EC2 instances behind an internet gateway and provide the gateway IP address to the service.
B
Move all of the EC2 instances behind a NAT gateway and provide the gateway IP address to the
service.
service.
C
Move all of the EC2 instances to a peered VPC and provide the VPC IP address to the service.
D
Move all of the EC2 instances into a single Availability Zone and provide the Availability Zone IP address to the service.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Finish Practice?
Are you sure you want to finish? This will end your practice session.