AWS Certified SysOps Administrator - Associate
(SOA-C02) Study Set 2 Practice Guide 2026
1. A SysOps Administrator is notified that an automated B. A storage failure on the
failover of an Amazon RDS database has occurred. primary database.
What are possible causes for this? (Choose two.)
E. The database instance
type was changed.
2. A recent AWS CloudFormation stack update has failed A. Fix the error that caused
and returned the error UPDATE_ROLLBACK_FAILED. the rollback to fail, then se-
A SysOps Administrator is tasked with returning the lect the Continue Update
CloudFormation stack to its previous working state. Rollback action in the con-
What must be done to accomplish this? sole.
3. A company needs to run a distributed application that D. Spot Instances
processes large amount of data across multiple Ama-
zon EC2 instances. The application is designed to toler-
ate processing interruptions. What is the MOST cost-ef-
fective Amazon EC2 pricing model for these require-
ments?
4. A SysOps Administrator working on an Amazon EC2 B. Amazon CloudWatch will
instance has misconfigured the clock by one hour. The accept the custom metric
EC2 instance is sending data to Amazon CloudWatch data and record it.
through the CloudWatch agent. The timestamps on
the logs are 45 minutes in the future. What will be the
result of this configuration?
5. A company recently performed a security audit of all its D. a SysOps Administrator
internal applications developed in house. Certain busi-
ness-critical applications that handle sensitive data
were flagged because they use Amazon ES clusters
that are open for read/write to a wider user group that
intended. Who is responsible for correcting the issue?
, AWS Certified SysOps Administrator - Associate
(SOA-C02) Study Set 2 Practice Guide 2026
6. A company needs to restrict access to an Amazon S3 B. Create a VPC endpoint
bucket to Amazon EC2 instances in a VPC only. All for the S3 bucket, and cre-
traffic must be over the AWS private network. What ate a S3 bucket policy that
actions should the SysOps Administrator take to meet conditionally limits all S3
these requirements? actions on the bucket to
the VPC endpoint as the
source.
7. A Chief Financial Officer has asked for a breakdown of B. Activate cost allocation
costs per project in a single AWS account using Cost tags.
Explorer. Which combination of options should be set
to accomplish this? (Choose two.) D. Create and apply re-
sources tags.
8. A SysOps Administrator has implemented a VPC net- C. A single NAT gateway,
work design with the following requirements: because it is not redun-
dant across both AZs.
Two Availability Zones (AZs)
Two private subnets
Two public subnets
One internet gateway
One NAT gateway
What would potentially cause applications in the VPC
to fail during an AZ outage?
9. A SysOps Administration team is supporting an appli- D. Enable versioning on
cation that stores a configuration file in an Amazon the S3 bucket.
S3 bucket. Previous revisions of the configuration file
must be maintained for change control and rollback.
(SOA-C02) Study Set 2 Practice Guide 2026
1. A SysOps Administrator is notified that an automated B. A storage failure on the
failover of an Amazon RDS database has occurred. primary database.
What are possible causes for this? (Choose two.)
E. The database instance
type was changed.
2. A recent AWS CloudFormation stack update has failed A. Fix the error that caused
and returned the error UPDATE_ROLLBACK_FAILED. the rollback to fail, then se-
A SysOps Administrator is tasked with returning the lect the Continue Update
CloudFormation stack to its previous working state. Rollback action in the con-
What must be done to accomplish this? sole.
3. A company needs to run a distributed application that D. Spot Instances
processes large amount of data across multiple Ama-
zon EC2 instances. The application is designed to toler-
ate processing interruptions. What is the MOST cost-ef-
fective Amazon EC2 pricing model for these require-
ments?
4. A SysOps Administrator working on an Amazon EC2 B. Amazon CloudWatch will
instance has misconfigured the clock by one hour. The accept the custom metric
EC2 instance is sending data to Amazon CloudWatch data and record it.
through the CloudWatch agent. The timestamps on
the logs are 45 minutes in the future. What will be the
result of this configuration?
5. A company recently performed a security audit of all its D. a SysOps Administrator
internal applications developed in house. Certain busi-
ness-critical applications that handle sensitive data
were flagged because they use Amazon ES clusters
that are open for read/write to a wider user group that
intended. Who is responsible for correcting the issue?
, AWS Certified SysOps Administrator - Associate
(SOA-C02) Study Set 2 Practice Guide 2026
6. A company needs to restrict access to an Amazon S3 B. Create a VPC endpoint
bucket to Amazon EC2 instances in a VPC only. All for the S3 bucket, and cre-
traffic must be over the AWS private network. What ate a S3 bucket policy that
actions should the SysOps Administrator take to meet conditionally limits all S3
these requirements? actions on the bucket to
the VPC endpoint as the
source.
7. A Chief Financial Officer has asked for a breakdown of B. Activate cost allocation
costs per project in a single AWS account using Cost tags.
Explorer. Which combination of options should be set
to accomplish this? (Choose two.) D. Create and apply re-
sources tags.
8. A SysOps Administrator has implemented a VPC net- C. A single NAT gateway,
work design with the following requirements: because it is not redun-
dant across both AZs.
Two Availability Zones (AZs)
Two private subnets
Two public subnets
One internet gateway
One NAT gateway
What would potentially cause applications in the VPC
to fail during an AZ outage?
9. A SysOps Administration team is supporting an appli- D. Enable versioning on
cation that stores a configuration file in an Amazon the S3 bucket.
S3 bucket. Previous revisions of the configuration file
must be maintained for change control and rollback.
