Pass the Amazon Web Services AWS Certified Associate SOA-C01 Questions and answers with ExamsMirror

Apply an 1AM policy to all 1AM entities in the account with a statement to explicitly deny NotAction: s3:

Configure AWS Config to terminate compute resources that have been created in the accounts.

Configure AWS CloudTrail to block any action where the event source is not s3.amazonaws.com.

Update the service control policy on the account to deny the unapproved services.

Write a AWS lambda function that will query the logs every minute and contain the logic of which team to notify on which patterns and issues.

Set up different metric filters for each team based on patterns and alerts. Each alarm will notify the appropriate notification list.

Redesign the aggregation of logs so that each team’s relevant parts are sent to a separate log group, then subscribe each team to its respective log group.

Create an AWS Auto Scaling group of Amazon EC2 instances that will scale based on the amount of ingested log entries. This group will pull streams, look for patterns, and send notifications to relevant teams.

change sets What features of AWS CloudFormation will

Nested stacks

Stack policies

StacksSets

Contact AWS Support to pre-warm the database to ensure that it can handle any unexpected spikes in traffic

Create a new Multi-AZ RDS DB instance. Migrate the data to the new DB instance and delete the old one

Create a read replica from the existing database outside of business hours

Modify the DB instance to outside of business hours be a Multi-AZ deployment

Data partitioning

Multi-threaded processing

Multi-AZ with automatic failover

Multi-region with automatic failover

Online resharding

A network ACL associated with the bastion's subnet is blocking the network traffic

The instance does not have a private IP address.

The route table associated with the bastion's subnet does not have a route to the internet gateway

The security group for the instance does not have an inbound rule on port 22

The security group for the instance does not have an outbound rule on port 3389.

A Glacier data retrieval policy.

A Glacier Vault access policy.

A Glacier vault lock policy.

A Glacier vault notification

Encrypt the S3 bucket content with Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3).

Create an origin access identity and grant it permissions to read objects in the S3 bucket.

Assign an 1AM user to the CloudFront distribution and whitelist the 1AM user in the S3 bucket policy.

Assign an 1AM role to the CloudFront distribution and whitelist the 1AM role in the S3 bucket policy.

Create an Amazon EC2 proxy in Account A that forwards requests to Account B.

Create a load balancer in Account A that points to the load balancer in Account B.

Create a CNAME record in Account A pointing to an alias record to the load balancer in Account B.

Create an alias record in Account A pointing to the load balancer in Account B.

Move all of the EC2 instances behind a NAT gateway and provide the gateway IP address to the service.

Move all of the EC2 instances behind an internet gateway and provide the gateway IP address to the service.

Move all of the EC2 instances into a single Availability Zone and provide the Availability Zone IP address to the service.

Move all of the EC2 instances to a peered VPC and provide the VPC IP address to the service.