Unlock Cloud Mastery: Amazon AWS Certified SysOps Administrator - Associate SOA-C02 Prep
After creating a presigned URL for an S3 object, users can no longer access the file after a few days.
Options (Select TWO):
Correct : A, B
The presigned URL expiration is the most common reason for access issues after some time. Additionally, if the SysOps administrator's access key (used to generate the presigned URL) is invalid, the URL will no longer be usable. Block Public Access or ACL settings are irrelevant to presigned URLs.
Start a Discussions
The company needs to increase IOPS for two EC2 instances with gp2 volumes to support an upcoming promotion with higher I/O requirements.
Options:
Correct : D
Migrating to gp3 volumes allows for customizable IOPS at a lower cost than gp2, meeting the requirement for higher IOPS during the promotion. Throughput Optimized HDD (st1) volumes do not support high IOPS, and ElastiCache does not address I/O for EBS volumes.
Start a Discussions
To automatically reboot an EC2 instance when disk usage reaches 100%, a solution with minimal operational overhead is needed.
Options:
Correct : A
Using a CloudWatch alarm with an EventBridge rule provides an automated, direct way to reboot the EC2 instance without extra components like SES or Lambda. This is a straightforward approach with low operational overhead.
Start a Discussions
The SysOps administrator needs to prevent launching EC2 instances without a specific tag in the application OU.
Options:
Correct : B
An SCP applied to the application OU that denies ec2:RunInstances when the CostCenter-Project tag is missing ensures that all accounts in the OU adhere to the tagging policy. This approach is centralized and applies only to the intended OU.
Start a Discussions
The SysOps administrator needs to create a key policy that grants data engineers least privilege access to decrypt and read data from an S3 bucket encrypted with KMS.
Options:
Correct : C
The least privilege required for reading encrypted data involves kms:Decrypt to decrypt, kms:DescribeKey to understand key properties, and kms:ListAliases if needed to identify the key alias.
Start a Discussions
Total 461 questions