SOA-C02 (Page 43)

A company maintains a large set of sensitive data in an Amazon S3 bucket.The company’s security team asks a SysOps administrator to help verify that all current objects in the S3 bucket are encrypted.What is the MOST operationally efficient solution that meets these requirements?Read More →

A SysOps administrator needs to configure a solution that will deliver digital content to a set of authorized users through Amazon CloudFront.Unauthorized users must be restricted from access.Which solution will meet these requirements?Read More →

A company is managing many accounts by using a single organization in AWS Organizations.The organization has all features enabled.The company wants to turn on AWS Config in all the accounts of the organization and in all AWS Regions.What should a SysOps administrator do to meet these requirements in the MOST operationally efficient way?Read More →

A company is using an Amazon Aurora MySQL DB cluster that has point-in-time recovery, backtracking, and automatic backup enabled.A SysOps administrator needs to be able to roll back the DB cluster to a specific recovery point within the previous 72 hours.Restores must be completed in the same production DB cluster.Which solution will meet these requirements?Read More →

A SysOps administrator creates two VPCs, VPC1 and VPC2, in a company’s AWS account The SysOps administrator deploys a Linux Amazon EC2 instance in VPC1 and deploys an Amazon RDS for MySQL DB instance in VPC2.The DB instance is deployed in a private subnet.An application that runs on the EC2 instance needs to connect to the database.What should the SysOps administrator do to give the EC2 instance the ability to connect to the database?Read More →

A database is running on an Amazon RDS Multi-AZ DB instance.A recent security audit found the database to be out of compliance because it was not encrypted.Which approach will resolve the encryption requirement?Read More →

A company has an AWS Lambda function in Account A.The Lambda function needs to read the objects in an Amazon S3 bucket in Account B.A SysOps administrator must create corresponding IAM roles in both accounts.Which solution will meet these requirements?Read More →

An application team is working with a SysOps administrator to define Amazon CloudWatch alarms for an application.The application team does not know the application’s expected usage or expected growth.Which solution should the SysOps administrator recommend?Read More →

A company uploaded its website files to an Amazon S3 bucket that has S3 Versioning enabled.The company uses an Amazon CloudFront distribution with the S3 bucket as the origin.The company recently modified the files, but the object names remained the same.Users report that old content is still appearing on the website.How should a SysOps administrator remediate this issue?Read More →

A global company operates out of five AWS Regions.A SysOps administrator wants to identify all the company’s tagged and untagged Amazon EC2 instances.The company requires the output to display the instance ID and tags.What is the MOST operationally efficient way for the SysOps administrator to meet these requirements?Read More →