Pass the Amazon Web Services AWS Certified Associate SOA-C01 Questions and answers with ExamsMirror

Enable automatic key rotation tor the CMK and specify a period of 6 months

Create a new CMK with new imported material and update the key alias to point to the new CMK

Delete the current key material and import new material into the existing CMK

Import a copy of the existing key material into a new CMK as a backup and set the rotation schedule for 6 months

Write a script to download the encrypted snapshot decrypt it using the AWS KMS encryption key used to encrypt the snapshot then create a new volume in each account

date the key policy to grant permission to the AWS KMS encryption key used to encrypt the snapshot with all relevant accounts then share the snapshot with those accounts

Create an Amazon EC2 instance based on the snapshot, then save the instance's Amazon EBS volume as a snapshot and share it with the other accounts Require each account owner to create a new volume from that snapshot and encrypt it

Create a new unencrypted RDS instance from the encrypted snapshot connect to the instance using SSH/RDP, export the database contents into a file then share this file with the other accounts

Attach an IAM policy to the users or groups that require access to the EC2 instances

Attach an IAM role to control access to the EC2 instances

Create a placement group for the EC2 instances and add a specific tag

Create a service account and attach it to the EC2 instances that need to be controlled

Create an IAM policy that grants access to any EC2 instances with a tag specified in the condition element

Update the EFS file system settings to enable server-side encryption using AES-256.

Create a new encrypted EFS file system and copy the data from the unencrypted EFS file system to the new encrypted EFS file system.

Use AWS CloudHSM to encrypt the files directly before storing them in the EFS file system.

Modify the EFS file system mount options to enable Transport Layer Security (TLS) on each of the EC2 instances.

Add a bucket policy that grants everyone read access to the bucket

Add a bucket policy that grants everyone read access to the bucket objects

Remove the default bucket policy that denies read access to the bucket.

Configure cross origin resource sharing (CORS) on the bucket

Amazon CloudWatch

Amazon S3 server access logs

AWS CloudTrail

AWS Cost Explorer

The load balancer will continue to perform the health check on the EC2 instance.

The EC2 instance will be terminated based on the health check failure.

The EC2 instance will be rebooted.

The load balancer will stop sending traffic to the EC2 instance.

A new EC2 instance will be deployed to replace the unhealthy instance.

AWS CloudTrail logs

Elastic Load Balancer access logs

Amazon S3 access logs

VPC Flow Logs

Implement a blue/green strategy using AWS Elastic Beanstalk.

Perform a canary deployment using Application Load Balancers and target groups.

Create a change set for the running stack.

Submit the update using the UpdateStack API call.

In the payer account: Enable billing alerts in the Billing and Cost Management console; publish an Amazon SNS message when the billing alert triggers.

In each account: Enable billing alerts in the Billing and Cost Management console; set up a billing alarm in Amazon CloudWatch; publish an SNS message when the alarm triggers.

In the payer account: Enable billing alerts in the Billing and Cost Management console; set up a billing alarm in the Billing and Cost Management console to publish an SNS message when the alarm triggers.

In the payer account: Enable billing alerts in the Billing and Cost Management console; set up a billing alarm in Amazon CloudWatch; publish an SNS message when the alarm triggers.