AWS Certified SysOps Administrator - Associate (SOA-C02) Exam Cram

✍ Scribed by Marko Sluga, Richard Crisci, William Rothwell

• Publisher: Pearson IT Certification
• Year: 2022
• Tongue: English
• Leaves: 340
• Edition: 1
• Category: Library

✦ Synopsis

“AWS Certified SysOps Administrator – Associate (SOA-C02) Exam Cram is an all-inclusive study guide designed to help you pass the updated version of the AWS Certified SysOps Administrator – Associate exam. Prepare for test day success with complete coverage of exam objectives and topics, plus hundreds of realistic practice questions. Extensive prep tools include quizzes, Exam Alerts, and our essential last-minute review CramSheet. The powerful Pearson Test Prep practice software provides real-time assessment and feedback with two complete exams.

Covers the critical information needed to score higher on your AWS Certified SysOps Administrator – Associate (SOA-C02) exam!

Demonstrate baseline AWS Well-Architected Framework knowledge to support and maintain AWS workloads Use AWS monitoring and logging services and remediate issues based on monitoring and availability metrics Implement scalability and elasticity for reliability and business continuity Use AWS services to provision, deploy, maintain, and automate cloud resources Implement and manage security controls to meet compliance policies and requirements Implement, configure, and troubleshoot network features and connectivity issues Identify and implement cost and performance optimization strategies

Prepare for your exam with Pearson Test Prep

Realistic practice questions and answers Comprehensive reporting and feedback Customized testing in study, practice exam, or flash card modes Complete coverage of AWS Certified SysOps Administrator – Associate (SOA-C02) exam objectives”.

✦ Table of Contents

Cover
Title Page
Copyright Page
Dedication
Contents at a Glance
Table of Contents
Introduction
CHAPTER 1 Introduction to AWS
What Is Cloud Computing?
The AWS Cloud
AWS Global Architecture
Datacenters
Availability Zones
Regions
Edge Locations
Accessing AWS
Six Benefits of the AWS Cloud
AWS Services Overview
Foundation Services
Network Services
Compute Services
Storage Services
Security and Identity Services
End-User Applications Services
Platform Services
Database Services
Analytics Services
Application Services
Other Examples
Management and Deployment Services
What Next?
CHAPTER 2 Monitoring Services in AWS
Metering, Monitoring, and Alerting
Metering
Monitoring
Alerting
Security and Compliance
CloudWatch
Namespaces and Dimensions
Metrics
Statistics
Percentiles
CloudWatch Alarms
CloudWatch Logs
CloudWatch Logs Insights
CloudTrail
What Next?
CHAPTER 3 Troubleshooting and Remediation
Responding to Alarms
Infrastructure Issues
Application Issues
Security Issues
Error Handling in AWS
Amazon EventBridge
Integration with AWS Systems Manager Automation
AWS Config
What Next?
CHAPTER 4 Implementing Scalability and Elasticity
Scaling in the Cloud
Horizontal vs. Vertical Scaling
AWS Autoscaling
Dynamic Scaling
Manual and Scheduled Scaling
Predictive Scaling
Caching
Types of Caching
Client-Side Caching
Edge Caching
Server-Side Caching
Database Caching
ElastiCache
Memcached
Redis
Amazon CloudFront
CloudFront Security
Read Replicas
What Next?
CHAPTER 5 High Availability and Resilience
Availability Zones in AWS
VPC
Private Subnets
Public Subnets
High Availability with Elastic Load Balancers and Route 53
Highly Available Datastores
Amazon S3
S3 Storage Tiers
S3 Security
Highly Available Databases
Amazon RDS
Amazon Aurora
Amazon DynamoDB
DynamoDB Global Tables
What Next?
CHAPTER 6 Backup and Restore Strategies
Backup in the Cloud
Backups and Snapshots
RPO and RTO
Disaster Recovery
Overview of Backup Strategies
Backup and Restore
Pilot Light
Warm Standby
Multisite Active-Active
S3 as a Backup Service
S3 Sync
AWS DataSync
Versioning and Life-Cycling Rules
Glacier
S3 Cross-Region Replication
What Next?
CHAPTER 7 Provisioning Resources
Deployment Tools in AWS
AWS CLI
Managing EC2 AMIs
AWS CloudFormation
AWS Elastic Beanstalk
CloudFormation StackSets
AWS Systems Manager
AWS Resource Access Manager
What Next?
CHAPTER 8 Application Management
Lifecycle Management
Deployment Environments
Development
Quality Assurance (QA)
Production
Staging
Blue/Green
Disaster Recovery (DR)
Application Builds
Stable
Long-Term Support (LTS)
Canary
Upgrade Methods
Rolling Upgrades
Active-Passive
Lifecycle Management
Roadmaps
Versioning
Upgrading and Migrating Systems
Deprecations or End of Life
AWS OpsWorks
Patching
Security Patches
Hot Fixes
Scheduled Updates
Virtual Patches
Signature Updates
Rollups
Patching Cloud Components
VMs
Virtual Appliances
Networking Components
Applications
Storage Components
Firmware
Software
Policies
N-1
Rollbacks
What Next?
CHAPTER 9 Security and Compliance
Account Management
IAM Essentials
IAM Users
IAM User Groups
IAM Roles
IAM Policies
Identity Providers
Password Policy
Access Keys
Multifactor Authentication (MFA)
Best Practices in IAM
Trusted Advisor
What Next?
CHAPTER 10 Data Protection at Rest and in Transit
Protecting Data
Encryption
AWS Key Management Service
Data Classification
Certificate Management
AWS Certificate Manager
AWS Secrets Manager
Amazon GuardDuty
Amazon Inspector
AWS Security Hub
What Next?
CHAPTER 11 Networking and Connectivity
The VPC
Virtual Private Cloud
Elastic Network Interfaces
Elastic IP Address
Internet Gateway (IGW)
VPC Connectivity
Subnets
Route Tables
NAT Gateway
VPC Security
VPC Security by Default
Security Groups
Network Access Control Lists (NACLs)
Public and Private Subnets
VPC Flow Logs
AWS Network Firewall
About the AWS Network Firewall
AWS Marketplace
VPC Endpoints
Interface Endpoints
Gateway Endpoints
VPC Peering
About VPC Peering
Transit Gateway
VPN
AWS-Managed VPN
Software Site-to-Site VPN
Direct Connect
AWS Direct Connect
AWS Direct Connect + VPN
Hosted and Dedicated Connections
AWS WAF
AWS WAF
AWS Shield
AWS Shield Standard
AWS Shield Advanced
What Next?
CHAPTER 12 Domains, DNS, and Content Delivery
Route 53
Public and Private Zones
Registering a Domain with Route 53
Route 53 Routing Policies
Simple Routing Policy
Weighted Routing Policy
Latency-Based Routing Policy
Failover Routing Policy
Geolocation Routing Policy
S3 Static Website Hosting
Configuring S3 Static Website Hosting
Amazon CloudFront
Introduction to CloudFront
Creating a CloudFront Distribution
Time-to-Live (TTL)
Price Classes
CloudFront and HTTPs
Final CloudFront Configuration Tasks
S3 Origin Access Identity
Configuring an Origin Access Identity
What Next?
CHAPTER 13 Troubleshoot Network Connectivity
VPC Flow Logs
Configuring VPC Flow Logs
ELB Access Logs
AWS WAF ACL Logs
AWS WAF, Kinesis, and S3
CloudFront Logs
Using CloudFront Logs
Analyzing Standard Log Files
CloudFront Caching Issues
Improving Cache Hit Rate
HTTP Status Codes from an Origin
Troubleshooting Hybrid and Private Links
Troubleshooting Direct Connect
Troubleshooting AWS Managed VPNs
What Next?
CHAPTER 14 Cost Optimization Strategies
Operational Optimization
Cost Allocation Tags
Trusted Advisor
AWS Compute Optimizer
Cost Explorer
AWS Budgets and Billing Alarms
Managed Services
What Next?
CHAPTER 15 Performance Optimization
Optimizing for Performance
Monitoring for Performance Efficiency
Generation
Aggregation
Real-Time Processing and Alarming
Storage
Analytics
Optimizing Compute Performance
Enhanced Networking
Instance Store
Placement Groups
Optimizing Datastore Performance
Optimizing Database Performance
What Next?
Glossary
A
C
D
E
F
G
H
I
K
L
M
N
O
P
Q
R
S
T
V
W
Index
A
B
C
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Y
Z