QUESTION: 153

A SysOps administrator is attempting to download patches from the internet into an instance in a private subnet. An internet gateway exists for the VPC, and a NAT gateway has been deployed on the public subnet; however, the instance has no internet connectivity. The resources deployed into the private subnet must be inaccessible directly from the public internet.

Public Subnet (10.0.1.0/24) Route Table
Destination Target
10.0.0.0/16 local
0.0.0.0/0 IGW

Private Subnet (10.0.2.0/24) Route Table
Destination Target
10.0.0.0/16 local

What should be added to the private subnet’s route table in order to address this issue, given the information provided?

0.0.0.0/0 IGW
0.0.0.0/0 NAT
10.0.1.0/24 IGW
10.0.1.0/24 NAT

Answer(s): B

Reveal Solution Next Question

QUESTION: 154

A company is undergoing an external audit of its systems, which run wholly on AWS. A SysOps administrator must supply documentation of Payment Card Industry Data Security Standard (PCI DSS) compliance for the infrastructure managed by AWS.

Which set of actions should the SysOps administrator take to meet this requirement?

Download the applicable reports from the AWS Artifact portal and supply these to the auditors.
Download complete copies of the AWS CloudTrail log files and supply these to the auditors.
Download complete copies of the AWS CloudWatch logs and supply these to the auditors.
Provide the auditors with administrative access to the production AWS account so that the auditors can determine compliance.

Answer(s): A

Reveal Solution Next Question

QUESTION: 155

A company has an initiative to reduce costs associated with Amazon EC2 and AWS Lambda.

Which action should a SysOps administrator take to meet these requirements?

Analyze the AWS Cost and Usage Report by using Amazon Athena to identify cost savings.
Create an AWS Budgets alert to alarm when account spend reaches 80% of the budget.
Purchase Reserved Instances through the Amazon EC2 console.
Use AWS Compute Optimizer and take action on the provided recommendations.

Answer(s): D

Reveal Solution Next Question

QUESTION: 156

A company wants to use only IPv6 for all its Amazon EC2 instances. The EC2 instances must not be accessible from the internet, but the EC2 instances must be able to access the internet. The company creates a dual-stack VPC and IPv6-only subnets.

How should a SysOps administrator configure the VPC to meet these requirements?

Create and attach a NAT gateway. Create a custom route table that includes an entry to point all IPv6 traffic to the NAT gateway. Attach the custom route table to the IPv6-only subnets.
Create and attach an internet gateway. Create a custom route table that includes an entry to point all IPv6 traffic to the internet gateway. Attach the custom route table to the IPv6-only subnets.
Create and attach an egress-only internet gateway. Create a custom route table that includes an entry to point all IPv6 traffic to the egress-only internet gateway. Attach the custom route table to the IPv6-only subnets.
Create and attach an internet gateway and a NAT gateway. Create a custom route table that includes an entry to point all IPv6 traffic to the internet gateway and all IPv4 traffic to the NAT gateway. Attach the custom route table to the IPv6-only subnets.

Answer(s): C

Reveal Solution Next Question

Free SOA-C02 Exam Braindumps (page: 39)

QUESTION: 153

QUESTION: 154

QUESTION: 155

QUESTION: 156