Free Amazon-Web-Services SOA-C02 Exam Dumps Questions

A. Create an IAM user with an IAM policy that allows the sqs:SendMessage permission, the sqs:ReceiveMessage permission, and the sqs:DeleteMessage permission to the appropriate queue

B. Embed the IAM user's credentials in theapplication's configuration.

C. Create an IAM user with an IAM policy that allows the sqs:SendMessage permission, the sqs:ReceiveMessage permission, and the sqs:DeleteMessage permission to the appropriate queue

D. Export the IAM user's access key and secretaccess key as environment variables on the EC2 instance.

E. Create and associate an IAM role that allows EC2 instances to call AWS service

F. Attach an IAM policy to the role that allows sqs:* permissions to the appropriate queues.

G. Create and associate an IAM role that allows EC2 instances to call AWS service

H. Attach an IAM policy to the role that allows the sqs:SendMessage permission, the sqs:ReceiveMessage permission, and the sqs:DeleteMessagepermission to the appropriate queues.

A. A security group is denying traffic on port 443.

B. The EC2 instance is shut down.

C. The network ACL is blocking HTTPS traffic.

D. The VPC has no internet gateway attached.

A. Create an AWS Lambda function that updates security groups that are associated with the elastic network interface to remove inbound rules with noncorporate CIDR range

B. Turn on VPC Flow Logs, and send the logs to AmazonCloudWatch Log

C. Create an Amazon CloudWatch alarm that matches traffic from noncorporate CIDR ranges, and publish a message to an Amazon Simple Notification Service (Amazon SNS) topic with the Lambda function as a target.

D. Create a scheduled Amazon EventBridge (Amazon CloudWatch Events) rule that targets an AWS Systems Manager Automation document to check for public IP addresses on the EC2 instance

E. If public IP addresses are found on theEC2 instances, initiate another Systems Manager Automation document to terminate the instances.

F. Configure AWS Config and a custom rule to monitor whether a security group allows inbound requests from noncorporate CIDR range

G. Create an AWS Systems Manager Automation document to remove any noncorporate CIDR rangesfrom the application security groups.

H. Configure AWS Config and the managed rule for monitoring public IP associations with the EC2 instances by ta

I. Tag the EC2 instances with an identifie

J. Create an AWS Systems Manager Automation document to remove the public IPassociation from the EC2 instances.

A. Create a CNAME recor

B. Enter static.cloudfront.net as the record nam

C. Enter the CloudFront distribution's public IP address as the value.

D. Create a CNAME recor

E. Enter static.example.com as the record nam

F. Enter the CloudFront distribution's private IP address as the value.

G. Create an A recor

H. Enter static.cloudfront.net as the record nam

I. Enter the CloudFront distribution's ID as an alias target.

J. Create an A recor

K. Enter static.example.com as the record nam

L. Enter the CloudFront distribution's domain name as an alias target.

A. Specify “*” as the principal and PrincipalOrgId as a condition.

B. Specify all account numbers as the principal.

C. Specify PrincipalOrgId as the principal.

D. Specify the organization’s master account as the principal.

A. Create an Amazon CloudWatch alarm for the EC2 instance, and specify the StatusCheckFailed_Instance metri

B. Add an EC2 action to the alarm to recover the instanc

C. Add an alarm notification to publish a message to an AmazonSimple Notification Service (Amazon SNS) topi

D. Subscribe the SysOps team email address to the SNS topic.

E. Create an Amazon CloudWatch alarm for the EC2 instance, and specify the StatusCheckFailed_System metri

F. Add an EC2 action to the alarm to recover the instanc

G. Add an alarm notification to publish a message to an AmazonSimple Notification Service (Amazon SNS) topi

H. Subscribe the SysOps team email address to the SNS topic.

I. Create an Auto Scaling group across three different subnets in the same Availability Zone with a minimum, maximum, and desired size of 1. Configure the Auto Scaling group to use a launch template that specifies the private IP addressand the Elastic IP addres

J. Add an activity notification for the Auto Scaling group to send an email message to the SysOps team through Amazon Simple Email Service (Amazon SES).

K. Create an Auto Scaling group across three Availability Zones with a minimum, maximum, and desired size of 1. Configure the Auto Scaling group to use a launch template that specifies the private IP address and the Elastic IP address.Add an activity notification for the Auto Scaling group to publish a message to an Amazon Simple Notification Service (Amazon SNS) topi

L. Subscribe the SysOps team email address to the SNS topic.