Helping Hand Questions for SOA-C01

Page: 7 / 9

Question 28

A SysOps Administrator is receiving alerts related to high CPU utilization of a Memcached-based Amazon ElastiCache cluster.

Which remediation steps should be taken to resolve this issue? (Select TWO.)

Options:

Add a larger Amazon EBS volume to the ElastiCache cluster nodes

Add a load balancer to route traffic to the ElastiCache cluster

Add additional worker nodes to the ElastiCache cluster

Create an Auto Scaling group to the ElastiCache cluster

Vertically scale the ElastiCache cluster by changing the node type

Question 29

A company needs to ensure that all IAM users rotate their password on a regular basis.

Which action should be taken to implement this?

Options:

Configure multi-factor authentication for all IAM users.

Deactivate existing users and re-create new users every time a credential rotation is required.

Re-create identity federation with new identity providers every time a credential rotation is required

Set up a password policy to enable password of expiration for IAM users.

Question 30

A company is storing monthly reports on Amazon S3. The company’s security requirement states that traffic from the client VPC to Amazon S3 cannot traverse the internet.

What should the SysOps Administrator do to meet this requirement?

Options:

Use AWS Direct Connect and a public virtual interface to connect to Amazon S3.

Use a managed NAT gateway to connect to Amazon S3.

Deploy a VPC endpoint to connect to Amazon S3.

Deploy an internet gateway to connect to Amazon S3.

Question 31

Company issued SSL certificates to its users, and needs to ensure the private keys that are used to sign the certificates are encrypted. The company needs to be able to store the private and perform cryptographic signing operations in a secure environment.

Which service should be used to meet these requirements?