Black Friday Special 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: Board70

PDF SOA-C01 Study Guide

Page: 9 / 9
Question 36

Security has identified an IP address that should be explicity denied for both ingress and egress requests for all services in an Amazon VPC immediately.

Which feature can be used to meet this requirement?

Options:

A.

Host-based firewalls

B.

NAT Gateway

C.

Network access control lists

D.

Security Groups

Question 37

A development team recently deployed new version of a web application to production. After the release, penetration testing revealed a cross-site scripting vulnerability that could expose user data.

Which AWS service will mitigate this issue?

Options:

A.

AWS Shield Standard

B.

AWS WAF

C.

Elastic Load balancing

D.

Amazon Cognito

Question 38

An application is being developed that will be served across a fleet of Amazon EC2 instances, which require a consistent view of persistent data. Items stored vary in size from 1 KB lo 300MB; the items are read frequently, created occasionally, and often require partial changes without conflict. The data store is not expected to grow beyond 2TB. and items will be expired according to age and content type.

Which AWS service solution meets these requirements?

Options:

A.

Amazon S3 buckets with lifecycle policies to delete old objects

B.

Amazon ROS PostgreSQL and a job that deletes rows based on age and file type columns.

C.

Amazon EFS and a scheduled process to delete files based on age and extension.

D.

An EC2 instance store synced on boot from a central Amazon EBS-backed instance.

Question 39

Users are struggling to connect to a single public-facing development web server using its public IP address on a unique port number ot 8181 The security group is correctly configured to allow access on that port and the network ACLs are using the default configuration. Which log type will confirm whether users are trying to connect to the correct port?

Options:

A.

AWS CloudTrail logs

B.

Elastic Load Balancer access logs

C.

Amazon S3 access logs

D.

VPC Flow Logs

Page: 9 / 9
Exam Code: SOA-C01
Exam Name: AWS Certified SysOps Administrator - Associate
Last Update: Nov 24, 2024
Questions: 263
SOA-C01 pdf

SOA-C01 PDF

$25.5  $84.99
SOA-C01 Engine

SOA-C01 Testing Engine

$28.5  $94.99
SOA-C01 PDF + Engine

SOA-C01 PDF + Testing Engine

$40.5  $134.99