AWS Certified SysOps Administrator – Associate (SOA-C01) Exam

Which AWS tool will provide the details necessary to understand the billing charges?

1. AWS Budgets
2. AWS Cost and Usage report
3. AWS Trusted Advisor
4. AWS Organizations

An ecommerce company wants to lower costs on its nightly jobs that aggregate the current day’s sales and store the results in Amazon S3. The jobs run on multiple On-Demand Instances, and the jobs take just under 2 hours to complete. The jobs can run at any time during the night. If the job fails for any reason, it needs to be started from the beginning.

Which solution is the MOST cost-effective based on these requirements?

1. Purchase Reserved Instances.
2. Submit a request for a Spot block.
3. Submit a request for all Spot Instances.
4. Use a mixture of On-Demand and Spot Instances.

A sysops administrator is implementing security group policies for a web application running on AWS. An Elastic Load Balancer connects to a fleet of Amazon EC2 instances that connect to an Amazon RDS database over port 1521. The security groups are named elbSG, ec2SG, and rdsSG, respectively.

How should these security groups be implemented?

1. elbSG: allow port 80 and 443 from 0.0.0.0/0;
   ec2SG: allow port 443 from elbSG;
   rdsSG: allow port 1521 from ec2SG.
2. elbSG: allow port 80 and 443 from 0.0.0.0/0;
   ec2SG: allow port 80 and 443 from elbSG and rdsSG;
   rdsSG: allow port 1521 from ec2SG.
3. elbSG: allow port 80 and 443 from ec2SG;
   ec2SG: allow port 80 and 443 from elbSG and rdsSG;
   rdsSG: allow port 1521 from ec2SG.
4. elbSG: allow port 80 and 443 from ec2SG;
   ec2SG: allow port 443 from elbSG;
   rdsSG: allow port 1521 from elbSG.

A sysops administrator observes a large number of rogue HTTP requests on an Application Load Balancer. The requests originate from various IP addresses. These requests cause increased server load and costs.

What should the administrator do to block this traffic?

1. Install Amazon Inspector on Amazon EC2 instances to block the traffic.
2. Use Amazon GuardDuty to protect the web servers from bots and scrapers.
3. Use AWS Lambda to analyze the web server logs, detect bot traffic, and block the IP addresses in thesecurity groups.
4. Use an AWS WAF rate-based rule to block the traffic when it exceeds a threshold.

A security and compliance team requires that all Amazon EC2 workloads use approved Amazon Machine Images (AMIs). A sysops administrator must implement a process to find EC2 instances launched from unapproved AMIs.

Which solution will meet these requirements?

1. Create a custom report using AWS Systems Manager inventory to identify unapproved AMIs.
2. Run Amazon Inspector on each EC2 instance and flag the instance if it is using unapproved AMIs.
3. Use an AWS Config rule to identify unapproved AMIs.
4. Use AWS Trusted Advisor to identify the EC2 workloads using unapproved AMIs.

(Select TWO.)

1. Configuring network ACLs
2. Maintaining network infrastructure
3. Monitoring memory utilization
4. Patching the guest operating system
5. Patching the hypervisor