SOA-C02 試験問題を無料オンラインアクセス

A company has an application that runs only on Amazon EC2 Spot Instances. The instances run in an Amazon EC2 Auto Scaling group with scheduled scaling actions. However, the capacity does not always increase at the scheduled times, and instances terminate many times a day. A SysOps administrator must ensure that the instances launch on time and have fewer interruptions.
Which action will meet these requirements?

• A.Specify the lowest-price allocation strategy for Spot Instances. Increase the size of the instances in the Auto Scaling group.
• B.Specify the capacity-optimized allocation strategy for Spot Instances. Add more instance types to the Auto Scaling group.
• C.Specify the capacity-optimized allocation strategy for Spot Instances. Increase the size of the instances in the Auto Scaling group.
• D.Specify the lowest-price allocation strategy for Spot Instances. Add more instance types to the Auto Scaling group.

A company manages its production applications across several AWS accounts. The company hosts the production applications on Amazon EC2 instances that run Amazon Linux 2. The EC2 instances are spread across multiple VPCs. Each VPC uses its own Amazon Route 53 private hosted zone for private DNS.
A VPC from Account A needs to resolve private DNS records from a private hosted zone that is associated with a different VPC in Account B.
What should a SysOps administrator do to meet these requirements?

• A.In Account A, use the AWS CLI to create a VPC association authorization. When the association is created, use the AWS CLI in Account B to associate the VPC from Account A with the private hosted zone in Account B.
• B.In Account B, use the AWS CLI to create a VPC association authorization. When the association is created, use the AWS CLI in Account A to associate the VPC from Account B with the private hosted zone in Account A.
• C.In Account A, create an AWS Systems Manager document that updates the /etc/resolv.conf file across all EC2 instances to point to the AWS provided default DNS resolver for the VPC in Account B.
• D.In Account A, create an AWS CloudFormation template that associates the private hosted zone from Account B with the private hosted zone in Account A.

A company has an on-premises DNS solution and wants to resolve DNS records in an Amazon Route 53 private hosted zone for example.com. The company has set up an AWS Direct Connect connection for network connectivity between the on-premises network and the VPC. A SysOps administrator must ensure that an on-premises server can query records in the example.com domain.
What should the SysOps administrator do to meet these requirements?

• A.Create a Route 53 Resolver inbound endpoint. Attach a security group to the endpoint to allow inbound traffic on TCP/UDP port 53 from the on-premises DNS servers.
• B.Create a Route 53 Resolver outbound endpoint. Attach a security group to the endpoint to allow outbound traffic on TCP/UDP port 53 to the on-premises DNS servers.
• C.Create a Route 53 Resolver outbound endpoint. Attach a security group to the endpoint to allow inbound traffic on TCP/UDP port 53 from the on-premises DNS servers.
• D.Create a Route 53 Resolver inbound endpoint. Attach a security group to the endpoint to allow outbound traffic on TCP/UDP port 53 to the on-premises DNS servers.

A SysOps administrator is provisioning an Amazon Elastic File System (Amazon EFS) file system to provide shared storage across multiple Amazon EC2 instances. The instances all exist in the same VPC across multiple Availability Zones. There are two instances in each Availability Zone.
The SysOps administrator must make the file system accessible to each instance with the lowest possible latency.
Which solution will meet these requirements?

• A.Create a mount target for each instance.
  Use each mount target to mount the EFS file system on each respective instance.
• B.Create a mount target for the EFS file system in the VPC.
  Use the mount target to mount the file system on each of the instances.
• C.Create a mount target for the EFS file system in one Availability Zone of the VPC.
  Use the mount target to mount the file system on the instances in that Availability Zone.
  Share the directory with the other instances.
• D.Create a mount target in each Availability Zone of the VPC.
  Use the mount target to mount the EFS file system on the instances in the respective Availability Zone.

A company updates its security policy to prohibit the public exposure of any data in Amazon S3 buckets in the company's account.
What should a SysOps administrator do to meet this requirement?

• A.Use Amazon Inspector to search for S3 buckets and to automatically reset S3 ACLs if any public S3 buckets are found.
• B.Use S3 Object Lambda to examine S3 ACLs and to change any public S3 ACLs to private.
• C.Create an Amazon EventBridge (Amazon CloudWatch Events) rule to enforce that all S3 objects are private.
• D.Turn on S3 Block Public Access from the account level.