SOA-C01 무료 덤프문제 온라인 액세스

Company issued SSL certificates to its users, and needs to ensure the private keys that are used to sign the certificates are encrypted. The company needs to be able to store the private and perform cryptographic signing operations in a secure environment.
Which service should be used to meet these requirements?

• A.AWS KMS
• B.AWS Certificate Manager
• C.Amazon Connect
• D.AWS CloudHSM

A SysOps Administrator is deploying a legacy web application on AWS. The application has four Amazon EC2 instances behind Classic Load Balancer and stores data in an Amazon RDS instance. The legacy application has known vulnerabilities to SQL injection attacks, but the application code is no longer available to update.
What cost-effective configuration change should the Administrator make to migrate the risk of SQL injection attacks?

• A.Configure AWS WAF with a Classic Load Balancer for protection against SQL injection attacks.
• B.Replace the Classic Load Balancer with an Application Load Balancer and configure AWS WAF on the Application Load Balancer.
• C.Configure Amazon GuardDuty to monitor the application for SQL injection threats.
• D.Configure an Amazon CloudFront distribution with the Classic Load Balancer as the origin and subscribe to AWS Shield Standard.

A SysOps Administrator working on an Amazon EC2 instance has misconfigured the clock by one hour. The EC2 instance is sending data to Amazon CloudWatch through the CloudWatch agent. The timestamps on the logs are 45 minutes in the future.
What will be the result of this configuration?

• A.Amazon CloudWatch will accept the custom metric data and record it.
• B.The Amazon CloudWatch agent will check the Network Time Protocol (NTP) server before sending the data, and the agent will correct the time.
• C.The Amazon CloudWatch agent will agent check the Network Time Protocol (NTP) server, and the agent will not send the data because it is more than 30 minutes in the future.
• D.Amazon CloudWatch will not capture the data because it is in the future.

A SysOps Administrator is writing a utility that publishes resources from an AWS Lambda function in AWS account A to an Amazon S3 bucket in AWS Account B.
The Lambda function is able to successfully write new objects to the S3 bucket, but IAM users in Account B are unable to delete objects written to the bucket by Account A.
Which step will fix this issue?

• A.Add s3:Deleteobject permission to the IAM execution role of the AWS Lambda function in Account A.
• B.Change the bucket policy of the S3 bucket in Account B to allow s3:Deleteobject permission for Account A.
• C.Disable server-side encryption for objects written to the S3 bucket by the Lambda function.
• D.Call the S3:PutObjectAcl API operation from the Lambda function in Account A to specify bucket owner, full control.

A new Amazon Redshift Spectrum Cluster has been launched for a team of Business Analysis. When the team attempts to use the cluster to query the data in Amazon S3, they receive the following error:

What is one cause of this?

• A.The cluster nodes are running in multiple Availability Zones, and all need to be placed in a single Availability Zone.
• B.The cluster has Enhanced VPC Routing enabled and it must be turned off
• C.The cluster login credentials are incorrect request new credentials from the Administrator
• D.The cluster is only a single node and needs to be expanded to multi-node.