SOA-C01 (Page 32)

A Development team is designing an application that processes sensitive information within a hybrid deployment.The team needs to ensure the application data is protected both in transit and at rest.Which combination of actions should be taken to accomplish this? (Choose two.)Read More →

Amazon S3 provides a number of security features for protection of data at rest, which you can use or not, depending on your threat profile.What feature of S3 allows you to create and manage your own encryption keys for sending data?Read More →

Your business is building a new application that will store its entire customer database on a RDS MySQL database, and will have various applications and users that will query that data for different purposes.Large analytics jobs on the database are likely to cause other applications to not be able to get the query results they need to, before time out.Also, as your data grows, these analytics jobs will start to take more time, increasing the negative effect on the other applications.How do you solve the contention issues between these different workloads on the same data?Read More →

A user has launched five instances and have registered them with an ELB.How can the user add the sixth EC2 instance to the ELB?Read More →

A user is trying to setup a recurring Auto Scaling process.The user has setup one process to scale up every day at 8 am and scale down at 7 PM.The user is trying to setup another recurring process which scales up on the 1st of every month at 8 AM and scales down the same day at 7 PM.What will Auto Scaling do in this scenario?Read More →

An organization stores sensitive customer in S3 buckets protected by bucket policies.Recently, there have been reports that unauthorized entities within the company have been trying to access the data on those S3 buckets.The Chief Information Security Officer (CISO) would like to know which buckets are being targeted and determine who is responsible for trying to access that information.Which steps should a SysOps Administrator take to meet the CISO’s requirement? (Choose two.)Read More →

A SysOps Administrator is attempting to use AWS Systems Manager Session Manager to initiate a SSH session with an Amazon EC2 instance running on a custom Linux Amazon Machine Image (AMI).The Administrator cannot find the target instance in the Session Manager console.Which combination of actions will solve this issue? (Choose two.)Read More →

A user needs to put sensitive data in an Amazon S3 bucket that can be accessed through an S3 VPC endpoint only.The user must ensure that resources in theVPC can only access the single S3 bucket.Which combination of actions will meet the requirements? (Choose two.)Read More →

A security officer has requested that internet access be removed from subnets in a VPC.The subnets currently route internet-bound traffic to a NAT gateway.ASysOps administrator needs to remove this access while allowing access to Amazon S3.Which solution will meet these requirements?Read More →

Spot instances are ideally designed for which purpose below?Read More →