AWS Certified SysOps Administrator Associate SOA-C02 Exam Prep

LU1: Monitoring, Logging, and Remediation

Topic 1.Implement metrics, alarms, and filters by using AWS monitoring and logging servicesSub-topic: Identify, collect, analyze, and export logs 

• Collect metrics and logs using the CloudWatch agent
• Create CloudWatch alarms
• Create metric filters
• Create CloudWatch dashboards
• Configure notifications (e.g., Amazon SNS, Service Quotas, CloudWatch alarms, AWS Health events)

Topic 2 Remediate issues based on monitoring and availability metrics

• Troubleshoot or take corrective actions based on notifications and alarms
• Configure Amazon EventBridge rules to trigger actions
• Use AWS Systems Manager Automation documents to take action based on AWS Config rules

LU2: Reliability and Business Continuity

Topic 3 Implement scalability and elasticitySub-topic: Create and maintain AWS Auto Scaling plans

• Implement caching
• Implement Amazon RDS replicas and Amazon Aurora Replicas
• Implement loosely coupled architectures
• Differentiate between horizontal scaling and vertical scaling

Topic 4 Implement high availability and resilient environmentsSub-topic: Configure Elastic Load Balancer and Amazon Route 53 health checks

• Differentiate between the use of a single Availability Zone and Multi-AZ deployments (e.g., Amazon EC2 Auto Scaling groups, Elastic Load Balancing, Amazon FSx, Amazon RDS)
• Implement fault-tolerant workloads (e.g., Amazon Elastic File System [Amazon EFS], Elastic IP addresses)
• Implement Route 53 routing policies (e.g., failover, weighted, latency-based)

Topic 5: Implement backup and restore strategiesSub-topic: Automate snapshots and backups based on use cases 

• Sub-topic: Restore databases (e.g., point-in-time restore, promote read replica)
• Sub-topic: Implement versioning and lifecycle rules
• Sub-topic: Configure Amazon S3 Cross-Region Replication
• Sub-topic: Execute disaster recovery procedures

LU3: Deployment, Provisioning, and Automation

Topic 6: Provision and maintain cloud resourcesSub-topic: Create and manage AMIs

• Create, manage, and troubleshoot AWS CloudFormation
• Provision resources across multiple AWS Regions and accounts (e.g., AWS Resource Access Manager, CloudFormation StackSets, IAM cross-account roles)
• Select deployment scenarios and services (e.g., blue/green, rolling, canary)
• Identify and remediate deployment issues (e.g., service quotas, subnet sizing, CloudFormation and AWS OpsWorks errors, permissions)

Topic 7 Automate manual or repeatable processes

• Use AWS services (e.g., OpsWorks, Systems Manager, CloudFormation) to automate deployment processes
• Implement automated patch management
• Schedule automated tasks by using AWS services (e.g., EventBridge, AWS Config)

Domain 4: Security and Compliance

Topic 8 Implement and manage security and compliance policiesSub-topic: Implement IAM features 

• Troubleshoot and audit access issues using AWS services (e.g., CloudTrail, IAM Access Analyzer, IAM policy simulator)
• Validate service control policies and permissions boundaries
• Review AWS Trusted Advisor security checks
• Validate AWS Region and service selections based on compliance requirements
• Implement secure multi-account strategies (e.g., AWS Control Tower, AWS Organizations)

Topic 9 Implement data and infrastructure protection strategiesSub-topic: Enforce a data classification scheme

• Create, manage, and protect encryption keys
• Implement encryption at rest (e.g., AWS Key Management Service [AWS KMS])
• Implement encryption in transit (e.g., AWS Certificate Manager, VPN)
• Securely store secrets using AWS services (e.g., AWS Secrets Manager, Systems Manager Parameter Store)
• Review reports or findings (e.g., AWS Security Hub, Amazon GuardDuty, AWS Config, Amazon Inspector)

LU5 Networking and Content Delivery

Topic 10 Implement networking features and connectivitySub-topic: Configure a VPC

• Configure private connectivity (e.g., Systems Manager Session Manager, VPC endpoints, VPC peering, VPN)
• Configure AWS network protection services (e.g., AWS WAF, AWS Shield)

Topic 11 Configure domains, DNS services, and content deliverySub-topic: Configure Route 53 hosted zones and records

• Implement Route 53 routing policies (e.g., geolocation, geoproximity)
• Configure DNS (e.g., Route 53 Resolver)
• Configure Amazon CloudFront and S3 origin access identity (OAI)
• Configure S3 static website hosting

Topic12 Troubleshoot network connectivity issuesSub-topic: Interpret VPC configurations 

• Collect and interpret logs (e.g., VPC Flow Logs, Elastic Load Balancer access logs, AWS WAF web ACL logs, CloudFront logs)
• Identify and remediate CloudFront caching issues
• Troubleshoot hybrid and private connectivity issues

LU6 Cost and Performance Optimization

Topic 13 Implement cost optimization strategiesSub-topic: Implement cost allocation tags

• Identify and remediate underutilized or unused resources using AWS services and tools (e.g., Trusted Advisor, AWS Compute Optimizer, Cost Explorer)
• Configure AWS Budgets and billing alarms
• Assess resource usage patterns to qualify workloads for EC2 Spot Instances
• Identify opportunities to use managed services (e.g., Amazon RDS, AWS Fargate, EFS)

Topic 14 Implement performance optimization strategies

• Recommend compute resources based on performance metrics
• Monitor Amazon EBS metrics and modify configuration to increase performance efficiency
• Implement S3 performance features (e.g., S3 Transfer Acceleration, multipart uploads)
• Monitor RDS metrics and modify the configuration to increase performance efficiency (e.g., Performance Insights, RDS Proxy)
• Enable enhanced EC2 capabilities (e.g., enhanced network adapter, instance store, placement groups)

Practice Exam

Promotion Code

Your will get 10% discount voucher for 2nd course onwards if you write us a Google review.

Minimum Entry Requirement

Knowledge and Skills

• Able to operate using computer functions
• Minimum 3 GCE ‘O’ Levels Passes including English or WPL Level 5 (Average of Reading, Listening, Speaking & Writing Scores)

Attitude

• Positive Learning Attitude
• Enthusiastic Learner

Experience

• Minimum of 1 year of working experience.

Target Age Group: 18-65 years old

Minimum Software/Hardware Requirement

Software:

TBD

Hardware: Window or Mac Laptops

• Systems Administrator
• Cloud Engineer
• DevOps Engineer
• IT Manager
• Network Administrator
• Solutions Architect
• Technical Support Engineer
• Infrastructure Engineer
• Security Analyst
• Database Administrator
• Software Developer
• IT Consultant
• Cloud Solutions Architect
• Operations Manager
• IT Project Manager

Quah Chee Yong: Quah Chee Yong is a ACTA certified trainer. Quah Chee Yong Chee Yong is an experienced professional who has held various Technical, Operations and Commercial positions across several industriesA firm believer that AI can create a better world, he has equipped himself with the Knowledge and Skills in the fields of Data Science, Machine Learning, Deep Learning and Cloud Deployment

He has a deep passion for training & facilitating and is currently a Singapore WSQ certified Adult Educator. He particularly enjoys the interactive engagements with his fellow trainers and learners

Agus Salim: Agus Salim is a professional with more than 10 years of experience in Project Management, IT Solutions Management, and Systems Integration both in waterfall and agile methodology. He started out his career as a Web Developer before moving on to Business Analyst/Project Manager. He has strong leadership and the capability of leading a team with a proven ability to deliver projects with tight timelines. Besides his experiences in managing projects, he has good knowledge in Cybersecurity and hands-on experience in Next Generation Firewall such as Check Point. During his free time, he likes to explore Cloud Technology, especially on Microsoft Azure. Agus has obtained AZ-104, AZ-500 and other Microsoft certifications. I am also a ALCP certified trainer.

Anil Bidari: Anil is a ACLP certified trainer. He is an Enterprise Cloud and DevOps Consultant , responsible for  helping clients to move Virtual data centre to Private Cloud based on OpenStack and Public Cloud ( AWS, Azure and Google cloud) . Consulting and training experience on Devops tool chain like github , Jenkins, Sonarqube, Docker & kubernetes, Cloud foundry, Openshift, Ansible and SaltStack. Lot of my Role is involved design and implementation of a solution and training

Peter Cheong :  Peter is a ACLP certied trainer. Specialise In IT related knowlege and conduct IT Training which Include Microsoft Window Server Technology (Wintel) and Linux - Centos/Red Hat. Comptia ,ITIL , Motorola Solution Trunking System and Cisco Networking. I was worked in Motorola Solutions Conduct Motorola Astro 25 Trunking System For Police Force Malaysia (RMPnet),Taiwan Navy, Indonesia METRO POLDA (Police Force). After that Peter Join As IT Group Manager For W-Group which include 17 subsidiaries Companies in Real Estate Developer,Plantation, Building Management Services ,Contruction and also Fiber Opti Service Provider in Sabah,Malaysia.

Ben Law Beng Tjin: Ben is an experienced IT Infrastructure professional with more than 20 years of working experience in IT sector. Due to Corporate Digital Transformation and COVID-19 during early 2020 he shifted his focus to Cloud Computing specialized in Cloud Infrastructure Solutioning. He is  an AWS Certified Solution Architect Associate, Google Certified Cloud Engineer, Microsoft Certified Azure Fundamentals and Alibaba Cloud Associate.