SOA-C01

A company is using an AWS KMS customer master key (CMK) with imported key material.The company references the CMK by its alias in the Java application to encrypt data.The CMK must be rotated every 6 months.What is the process to rotate the key?Read More →

An organization has developed a new memory-intensive application that is deployed to a large Amazon EC2 Linux fleet.There is concern about potential memory exhaustion, so the Development team wants to monitor memory usage by using Amazon CloudWatch.What is the MOST efficient way to accomplish this goal?Read More →

A SysOps Administrator must remove public IP addresses from all Amazon EC2 instances to prevent exposure to the internet.However, many corporate applications running on those EC2 instances need to access Amazon S3 buckets.The Administrator is tasked with allowing the EC2 instances to continue to access the S3 buckets.Which solutions can be used? (Choose two.)Read More →

You have an Auto Scaling group associated with an Elastic Load Balancer (ELB).You have noticed that instances launched via the Auto Scaling group are being marked unhealthy due to an ELB health check, but these unhealthy instances are not being terminated.What do you need to do to ensure trial instances marked unhealthy by the ELB will be terminated and replaced?Read More →

A database is running on an Amazon RDS Multi-AZ DB instance.A recent security audit found the database to be out of compliance because it was not encrypted.Which approach will resolve the encryption requirement?Read More →

As part of an operational audit, an Administrator is tasked with showing that all security responsibilities under the customer’s control are properly executed.Which of the following items is the customer responsible for providing to the auditor? (Choose two.)Read More →

A system admin is planning to setup event notifications on RDS.Which of the below mentioned services will help the admin setup notifications?Read More →

Your EC2-Based Multi-tier application includes a monitoring instance that periodically makes application -level read only requests of various application components and if any of those fail more than three times 30 seconds calls CloudWatch lo fire an alarm, and the alarm notifies your operations team by email andSMS of a possible application health problem.However, you also need to watch the watcher -the monitoring instance itself – and be notified if it becomes unhealthy.Which of the following is a simple way to achieve that goal?Read More →

A user is trying to setup a scheduled scaling activity using Auto Scaling.The user wants to setup the recurring schedule.Which of the below mentioned parameters is not required in this case?Read More →

You are running a web-application on AWS consisting of the following components an Elastic Load Balancer (ELB) an Auto-Scaling Group of EC2 instances running Linux/PHP/Apache, and Relational DataBase Service (RDS) MySQL.Which security measures fall into AWS’s responsibility?Read More →