SOA-C02 (Page 18)

A company asks a SysOps administrator to ensure that AWS CloudTrail files are not tampered with after they are created.Currently, the company uses AWSIdentity and Access Management (IAM) to restrict access to specific trails.The company’s security team needs the ability to trace the integrity of each file.What is the MOST operationally efficient solution that meets these requirements?Read More →

A SysOps administrator must manage the security of an AWS account.Recently, an IAM user’s access key was mistakenly uploaded to a public code repository.The SysOps administrator must identify anything that was changed by using this access key.How should the SysOps administrator meet these requirements?Read More →

An organization created an Amazon Elastic File System (Amazon EFS) volume with a file system ID of fs-85ba41fc, and it is actively used by 10 Amazon EC2 hosts.The organization has become concerned that the file system is not encrypted.How can this be resolved?Read More →

A company uses an Amazon CloudFront distribution to deliver its website.Traffic logs for the website must be centrally stored, and all data must be encrypted at rest.Which solution will meet these requirements?Read More →

A company has an application that uses Amazon DynamoDB tables.The tables are spread across AWS accounts and AWS Regions.The company uses AWS CloudFormation to deploy AWS resources.A new team at the company is deleting unused AWS resources.The team accidentally deletes several production DynamoDB tables by running an AWS Lambda function that makes a DynamoDB DeleteTable API call.The table deletions cause an application outage.A SysOps administrator must implement a solution that minimizes the chance of accidental deletions of tables.The solution also must minimize data loss that results from accidental deletions.Which combination of steps will meet these requirements? (Choose two.)Read More →

A company has a list of pre-approved Amazon Machine Images (AMIs) for developers to use to launch Amazon EC2 instances.However, developers are still launching EC2 instances from unapproved AMIs.A SysOps administrator must implement a solution that automatically terminates any instances that are launched from unapproved AMIs.Which solution will meet this requirement?Read More →

A SysOps administrator needs to ensure that an Amazon RDS for PostgreSQL DB instance has available backups.The DB instance has automated backups turned on with a backup retention period of 7 days.However, no automated backups for the DB instance have been created in the past month.What could be the cause of the lack of automated backups?Read More →

A company has created an AWS CloudFormation template that consists of the AWS::EC2::Instance resource and a custom CloudFormation resource.The custom CloudFormation resource is an AWS Lambda function that attempts to run automation on the Amazon EC2 instance.During testing, the Lambda function fails because the Lambda function tries to run before the EC2 instance is launched.Which solution will resolve this issue?Read More →

A company has internal hybrid applications that have resources in the AWS Cloud and on premises.Users report that the applications sometimes are not available.The company has configured an Amazon CloudWatch alarm to monitor the tunnel status of its AWS Site-to-Site VPN connection.A SysOps administrator must implement a solution that creates a high-priority ticket in an internal ticketing tool when the VPN tunnel is down.Which solution will meet this requirement?Read More →

A company is using Amazon S3 to set up a temporary static website that is public.A SysOps administrator creates an S3 bucket by using the default settings.The SysOps administrator updates the S3 bucket properties to configure static website hosting.The SysOps administrator then uploads objects that contain content for index html and error html.When the SysOps administrator navigates to the website URL the SysOps administrator receives an HTTP Status Code 403: Forbidden (Access Denied) error.What should the SysOps administrator do to resolve this error?Read More →