SOA-C01 (Page 22)

A SysOps administrator must run a script on production servers to fix an issue.The company has a policy to block all remote interactive access to production servers.Based on this situation, how should the administrator run the script?Read More →

Your organization’s security policy requires that all privileged users either use frequently rotated passwords or one-time access credentials in addition to username/password.Which two of the following options would allow an organization to enforce this policy for AWS users? (Choose two.)Read More →

A user has launched an EC2 instance.However, due to some reason the instance was terminated.If the user wants to find out the reason for termination, where can he find the details?Read More →

A user has configured ELB with SSL using a security policy for secure negotiation between the client and load balancer.Which of the below mentioned security policies is supported by ELB?Read More →

A user has granted read/write permission of his S3 bucket using ACL.Which of the below mentioned options is a valid ID to grant permission to other AWS accounts (grantee.using ACL?Read More →

A user has launched an EC2 instance store backed instance in the US-East-1a zone.The user created AMI #1 and copied it to the Europe region.After that, the user made a few updates to the application running in the US-East-1a zone.The user makes an AMI#2 after the changes.If the user launches a new instance inEurope from the AMI #1 copy, which of the below mentioned statements is true?Read More →

A user runs the command `dd if=/dev/zero of=/dev/xvdfbs=1M` on a fresh blank EBS volume attached to a Linux instance.Which of the below mentioned activities is the user performing with the command given above?Read More →

An AWS account owner has setup multiple IAM users.One IAM user only has CloudWatch access.He has setup the alarm action which stops the EC2 instances when the CPU utilization is below the threshold limit.What will happen in this case?Read More →

A user has configured ELB with SSL using a security policy for secure negotiation between the client and load balancer.The ELB security policy supports various ciphers.Which of the below mentioned options helps identify the matching cipher at the client side to the ELB cipher list when client is requesting ELB DNS overSSL?Read More →

A user has created a VPC with public and private subnets.The VPC has CIDR 20.0.0.0/16.The private subnet uses CIDR 20.0.1.0/24 and the public subnet usesCIDR 20.0.0.0/24.The user is planning to host a web server in the public subnet (port 80.and a DB server in the private subnet (port 3306).The user is configuring a security group of the NAT instance.Which of the below mentioned entries is not required for the NAT security group?Read More →