SOA-C01 実際試験問題と解答 - 模擬練習 - 受験自信を増やす

Question No : 1
A company has a sales department and a marketing department. The company uses one AWS account. There is a need to determine what charges are incurred on the AWS platform by each department. There is also a need to receive notifications when a specified cost level is approached or exceeded.
Which actions must a SysOps administrator take to achieve both requirements with the LEAST amount of administrative overhead? (Select TWO.)

A.Use AWS Trusted Advisor to obtain a report containing the checked items in the Cost Optimization pillar.
B.Download the detailed billing report, upload it to a database, and match the line items with a list of known resources by department.
C.Create a script by using the AWS CLI to automatically apply tags to existing resources for each department. Schedule the script to run weekly.
D.Use AWS Organizations to create a department Organizational Unit and allow only authorized personnel in each department to create resources.
E.Create a Budget from the Billing and Cost Management console. Specify the budget type as Cost, assign tags for each department. define notifications, and specify any other options as required.

正解:

Question No : 2
A SysOps Administrator has been able to consolidate multiple, secure websites onto a single server, and each site is running on a different port. The Administrator now wants to start a duplicate server in a second Availability Zone and put both behind a load balancer for high availability.
What would be the command line necessary to deploy one of the sites’ certificates to the load balancer?

A.Option A
B.Option B
C.Option C
D.Option D

正解:
Explanation:
Reference https://docs.aws.amazon.com/ko_kr/cli/latest/reference/elb/set-load-balancer-listener-sslcertificate.html

Question No : 3
A company’s website went down for several hours. The root cause was a full disk on one of the company’s Amazon EC2 instances.
Which steps should the SysOps Administrator take to prevent this from happening in this future?

A.Configure Amazon CloudWatch Events to filter and forward AWS Health events for disk space utilization to an Amazon SNS topic to notify the Administrator.
B.Create an AWS Lambda function to describe the volume status for each EC2 instance. Post a notification to an Amazon SNS topic when a volume status is impaired.
C.Enable detailed monitoring for the EC2 instances. Create an Amazon CloudWatch alarm to notify the Administrator when disk space is running low.
D.Use the Amazon CloudWatch agent on the EC2 instances to collect disk metrics. Create a CloudWatch alarm to notify the Administrator when disk space is running low.

正解:

Question No : 4
A company’s use of AWS Cloud services is quickly growing, so a SysOps Administrator has been asked to generate details of daily spending to share with management.
Which method should the Administrator choose to produce this data?

A.Share the monthly AWS bill with management.
B.Use AWS CloudTrail Logs to access daily costs in JSON format.
C.Set up daily Cost and Usage Report and download the output from Amazon S3.
D.Monitor AWS costs with Amazon Cloud Watch and create billing alerts and notifications.

正解:

Question No : 5
A company has an existing web application that runs on two Amazon EC2 instances behind an Application Load Balancer (ALB) across two Availability Zones. The application uses an Amazon RDS Multi-AZ DB Instance. Amazon Route 53 record sets route requests for dynamic content to the load balancer and requests for static content to an Amazon S3 bucket. Site visitors are reporting extremely long loading times.
Which actions should be taken to improve the performance of the website? (Choose two.)

A.Add Amazon CloudFront caching for static content.
B.Change the load balancer listener from HTTPS to TC
C.Enable Amazon Route 53 latency-based routing.
D.Implement Amazon EC2 Auto Scaling for the web servers.
E.Move the static content from Amazon S3 to the web servers.

正解:

Question No : 6
A SysOps Administrator must ensure all Amazon EBS volumes currently in use, and those created in the future, are encrypted with a specific AWS KMS customer master key (CMK).
What is the MOST efficient way for the Administrator to meet this requirement?

A.Create an AWS Lambda function to run on a daily schedule, and have the function run the aws ec2 describe-volumes --filters encrypted command.
B.Within Aws Config, configure the encrypted-volumes managed rule and specify the key ID of the CM
C.Log in to the AWS Management Console on a daily schedule, then filter the list of volumes by encryption status, then export this list.
D.Create an AWS Lambda function to run on a daily schedule, and have the function run the aws kms describe key command.

正解:
Explanation:
Reference: https://docs.aws.amazon.com/kms/latest/developerguide/services-ebs.html

Question No : 7
An application runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The instances run in an Auto Scaling group across multiple Availability Zones. The Information Security team wants to track application requests by the originating IP and the EC2 instance that processes the request.
Which of the following tools or services provides this information?

A.Amazon CloudWatch
B.AWS CloudTrail
C.Elastic Load Balancing access logs
D.VPC Flow Logs

正解:

Question No : 8
A SySOps Administrator has created a new Amazon S3 bucket named mybucket for the Operations team. Members of the team are part of an IAM group to which the following IAM policy has been assigned.

Which of the following actions will be allowed on the bucket? (Select TWO.)

A.Get the bucket's region.
B.Delete an object.
C.Delete the bucket
D.Download an object
E.List all the buckets in the account.

正解:

Question No : 9
A company needs to have real-time access to image data while seamlessly maintaining a copy of the images in an offsite location.
Which AWS solution would allow access to the image data locally while also providing for disaster recovery?

A.Create an AWS Storage Gateway volume gateway configured as a stored volume Mount it from clients using Internet Small Computer System Interface OSCSI)
B.Mount an Amazon EFS volume on a local server Share this volume with employees who need access to the images
C.Store the images in Amazon S3 and use AWS Data Pipeline to allow for caching of S3 data on local workstations
D.Use Amazon S3 for file storage, and enable S3 Transfer Acceleration to maintain a cache for frequently used files to increase local performance

正解:
Explanation: https://aws.amazon.com/storagegateway/?whats-new-cards.sort-by=item.additionalFields.postDateTime&whats-new-cards.sort-order=desc

Question No : 10
A SysOps Administrator is troubleshooting an AWS CloudFormation template whereby multiple Amazon EC2 instances are being created.
The template is working in us-east-1, but it is failing in us-west-2 with the error code:
AMI [ami-12345678] does not exist.
How should the Administrator ensure that the AWS CloudFormation template is working in every region?

A.Copy the source region’s Amazon Machine Image (AMI) to the destination region and assign it the same I
B.Edit the AWS CloudFormation template to specify the region code as part of the fully qualified AMI I
C.Edit the AWS CloudFormation template to offer a drop-down list of all AMIs to the user by using the AWS: :EC2: :AMI: :ImageID control.
D.Modify the AWS CloudFormation template by including the AMI IDs in the “Mappings” section. Refer to the proper mapping within the template for the proper AMI I

正解:

Question No : 11
A SysOps Administrator created an Amazon VPC with an IPv6 CIDR block, which requires access to the internet. However, access from the internet towards the VPC is prohibited. After adding and configuring the required components to the VPC, the Administrator is unable to connect to any of the domains that reside on the internet.
What additional route destination rule should the Administrator add to the route tables?

A.Route ::/0 traffic to a NAT gateway
B.Route ::/0 traffic to an internet gateway
C.Route 0.0.0.0/0 traffic to an egress-only internet gateway
D.Route ::/0 traffic to an egress-only internet gateway

正解:

Question No : 12
A SysOps Administrator is troubleshooting Amazon EC2 connectivity issues to the internet. The EC2 instance is in a private subnet.
Below is the route table that is applied to the subnet of the EC2 instance.
Destination C 10.2.0.0/16
Target C local
Status C Active
Propagated C No
Destination C 0.0.0.0/0
Target C nat-xxxxxxx
Status C Blackhole
Propagated C No
What has caused the connectivity issue?

A.The NAT gateway no longer exists
B.There is no route to the internet gateway.
C.The routes are no longer propagating.
D.There is no route rule with a destination for the internet.

正解:

Question No : 13
An application is running on an Amazon EC2 instance. A SysOps Administrator is tasked with allowing the application access to an Amazon S3 bucket.
What should be done to ensure optimal security?

A.Apply an S3 bucket policy to allow access from all EC2 instances
B.Create an IAM user and create a script to inject the credentials on boot
C.Create and assign an IAM role tor Amazon S3 access to the EC2 instance.
D.Embed an AWS credential file for an IAM user inside the Amazon Machine Image (AMI)

正解:

Question No : 14
A company stores thousands of non-critical log files in an Amazon S3 bucket A set of reporting scripts retrieve these log files daily.
Which of the following storage options will be the MOST cost efficient for the company's use case?

A.Amazon Glacier
B.Amazon S3 Standard IA (infrequent access) storage
C.Amazon S3 Standard Storage
D.AWS Snowball

正解:

Question No : 15
An ecommerce site is using Amazon ElastiCache with Memcached to store session state for a web application and to cache frequently used data. For the last month, users have
been complaining about performance. The metric data for the Amazon EC2 instances and the Amazon RDS instance appear normal, but the eviction count metrics are high.
What should be done to address this issue and improve performance?

A.Scale the cluster by adding additional nodes
B.Scale the cluster by adding read replicas
C.Scale the cluster by increasing CPU capacity
D.Scale the web layer by adding additional EC2 instances

正解:

Amazon SOA-C01 問題練習