SOA-C02 무료 덤프문제 온라인 액세스

A company moved its server infrastructure to Amazon EC2 instances. The company needs to use Amazon CloudWatch metrics to track metrics for a Java application. The company has integrated OpenTelemetry SDKs with the application.
Which solution will provide CloudWatch metrics for the application?

• A.Install and configure the CloudWatch agent on the instances by using AWS Systems Manager.
  Wait for Systems Manager to automatically complete the installation.
• B.Install and configure the CloudWatch agent on the instances. Enable OpenTelemetry format. Use a NAT gateway to allow the instances to write metrics to CloudWatch.
• C.Install and configure the AWS Distro for OpenTelemetry Collector on the instances. Create an IAM role that allows the instances to write metrics to CloudWatch. Attach the role to the instances.
• D.Install and configure the CloudWatch agent on the instances. Enable OpenTelemetry format.
  Configure security groups to allow the instances to write metrics to CloudWatch. Attach the security groups to the instances.

On an Amazon EC2 instance, an application is running that makes use of Amazon Simple Queue Service (Amazon SQS) queues. A SysOps administrator must guarantee that an application is capable of reading, writing, and deleting messages from SQS queues.
Which solution satisfies these criteria the SAFEST way possible?

• A.Create and associate an IAM role that allows EC2 instances to call AWS services.
  Attach an IAM policy to the role that allows sqs:* permissions to the appropriate queues.
• B.Create an IAM user with an IAM policy that allows the sqs:SendMessage permission, the sqs:ReceiveMessage permission, and the sqs:DeleteMessage permission to the appropriate queues.
  Export the IAM user's access key and secret access key as environment variables on the EC2 instance.
• C.Create and associate an IAM role that allows EC2 instances to call AWS services.
  Attach an IAM policy to the role that allows the sqs:SendMessage permission, the sqs:ReceiveMessage permission, and the sqs:DeleteMessage permission to the appropriate queues.
• D.Create an IAM user with an IAM policy that allows the sqs:SendMessage permission, the sqs:ReceiveMessage permission, and the sqs:DeleteMessage permission to the appropriate queues.
  Embed the IAM user's credentials in the application's configuration.

A company uses an Amazon S3 bucket to store data files. The S3 bucket contains hundreds of objects.
The company needs to replace a tag on all the objects in the S3 bucket with another tag.
What is the MOST operationally efficient way to meet this requirement?

• A.Use the AWS CLI to copy the objects to another S3 bucket.
  Add the new tag to the copied objects.
  Delete the original objects.
• B.Use S3 Batch Operations.
  Specify the operation to replace all object tags.
• C.Use the AWS CLI to get the tags for each object.
  Save the tags in a list.
  Use S3 Batch Operations.
  Specify the operation to delete all object tags.
  Use the AWS CLI and the list to retag the objects.
• D.Use the AWS CLI to get the tags for each object.
  Save the tags in a list.
  Use the AWS CLI and the list to remove the object tags.
  Use the AWS CLI and the list to retag the objects.

A company wants to prohibit its developers from using a particular family of Amazon EC2 instances. The company uses AWS Organizations and wants to apply the restriction across multiple accounts.
What is the MOST operationally efficient way for the company to apply service control policies (SCPs) to meet these requirements?

• A.Apply the SCPs to each developer account
• B.Add the accounts to an organizational unit (OU). Apply the SCPs to the OU.
• C.Enroll the accounts with AWS Control Tower. Apply the SCPs to the AWS Control Tower management account.
• D.Add the accounts to resource groups in AWS Resource Groups. Apply the SCPs to the resource groups.

A SysOps administrator needs to update an AWS account name.
What should the SysOps administrator do to accomplish this goal?

• A.Add the AWS_ConfigureRole policy to the SysOps administrator's IAM user.
• B.Change the AWS account name through the AWS Trusted Advisor interface.
• C.Sign in as the AWS account root user to make the change.
• D.Add the AdministratorAccess policy to the SysOps administrator's IAM user.