Free SOA-C02 Exam Braindumps (page: 30)

Page 30 of 106

A company wants to be alerted through email when IAM CreateUser API calls are made within its AWS account.

Which combination of actions should a SysOps administrator take to meet this requirement? (Choose two.)

  1. Create an Amazon EventBridge (Amazon CloudWatch Events) rule with AWS CloudTrail as the event source and IAM CreateUser as the specific API call for the event pattern.
  2. Create an Amazon EventBridge (Amazon CloudWatch Events) rule with Amazon CloudSearch as the event source and IAM CreateUser as the specific API call for the event pattern.
  3. Create an Amazon EventBridge (Amazon CloudWatch Events) rule with AWS IAM Access Analyzer as the event source and IAM CreateUser as the specific API call for the event pattern.
  4. Use an Amazon Simple Notification Service (Amazon SNS) topic as an event target with an email subscription.
  5. Use an Amazon Simple Email Service (Amazon SES) notification as an event target with an email subscription.

Answer(s): A,D



A database is running on an Amazon RDS Multi-AZ DB instance. A recent security audit found the database to be out of compliance because it was not encrypted.

Which approach will resolve the encryption requirement?

  1. Log in to the RDS console and select the encryption box to encrypt the database.
  2. Create a new encrypted Amazon EBS volume and attach it to the instance.
  3. Encrypt the standby replica in the secondary Availability Zone and promote it to the primary instance.
  4. Take a snapshot of the RDS instance, copy and encrypt the snapshot, and then restore to the new RDS instance.

Answer(s): D



A company using AWS Organizations requires that no Amazon S3 buckets in its production accounts should ever be deleted.

What is the SIMPLEST approach the SysOps administrator can take to ensure S3 buckets in those accounts can never be deleted?

  1. Set up MFA Delete on all the S3 buckets to prevent the buckets from being deleted.
  2. Use service control policies to deny the s3:DeleteBucket action on all buckets in production accounts.
  3. Create an IAM group that has an IAM policy to deny the s3:DeleteBucket action on all buckets in production accounts.
  4. Use AWS Shield to deny the s3:DeleteBucket action on the AWS account instead of all S3 buckets.

Answer(s): B



A company has an application that is running on Amazon EC2 instances in a VPC. The application needs access to download software updates from the internet. The VPC has public subnets and private subnets. The company’s security policy requires all EC2 instances to be deployed in private subnets.

What should a SysOps administrator do to meet these requirements?

  1. Add an internet gateway to the VPC. In the route table for the private subnets, add a route to the internet gateway.
  2. Add aNAT gateway to a private subnet. In the route table for the private subnets, add a route to the NAT gateway.
  3. Add a NAT gateway to public subnet. In the route table for the private subnets, add a route to the NAT gateway.
  4. Add two internet gateways to the VPC. In the route tables for the private subnets and public subnets, add a route to each internet gateway.

Answer(s): C



Page 30 of 106



Post your Comments and Discuss Amazon SOA-C02 exam with other Community members:

FN commented on November 21, 2024
Great work team!
ITALY
upvote

Tech Savvy commented on November 04, 2024
Great work team!, would be good if you list 10 questions at each page,
Anonymous
upvote

DeMalio commented on September 30, 2024
Very helpful and very accurate. Could not have passed this exam without this exam dump. Very grateful.
UNITED STATES
upvote

Omkar commented on June 26, 2024
Useful Dump
Anonymous
upvote

john commented on February 24, 2024
It's my first review so excuse me if I overlooked any etiquettes or etc. I had been studying off and on since Nov. I received a 790 a few hours ago and what I did was the following: Took the practice tests and got a passing score a couple times in a row Overall, I'd say that everything provided for reasonable price by along with the dumps helped me out the most. All of that plus just not psyching yourself out about the difficulty of the exam, picking a date and forcing yourself to be ready by that date should pretty much set you up for success.
UNITED STATES
upvote

tomAws commented on July 18, 2023
nice questions
BRAZIL
upvote

Emma commented on November 27, 2023
Nice questions
VIET NAM
upvote

Freya commented on October 24, 2023
I got my results today and I am delighted by them as I scored 83% on the SOA-C02 exam. I owe it all to this platform, I am I purchased this course as it is worth it.
Anonymous
upvote

tomAws commented on July 18, 2023
Questions so precious, I can already smell the certification :D
BRAZIL
upvote

tomAws commented on July 18, 2023
Nice questions
BRAZIL
upvote

SANDRO commented on March 01, 2023
It has been a wonderful experince dealing with the support team. They helped me update my files. And the new version seems to cover all the new topics. Very greatful.
UNITED STATES
upvote

StuckWithThis commented on June 14, 2022
Passed today. Do not take life serious. :-) Use these cheat sheets and pass.
UNITED STATES
upvote

Zack commented on May 04, 2021
Worth every penny! Just passed my exam. I was very concerned but these practice questions are magic!
UNITED STATES
upvote