Amazon SOA-C03

Choose your answer

• A

  Deploy the instances in a cluster placement group in one Availability Zone.

• B

  Deploy the instances in a partition placement group in two Availability Zones.

• C

  Deploy the instances in a partition placement group in one Availability Zone.

• D

  Deploy the instances in a spread placement group in two Availability Zones.

Pick an answer to check it, or press Show answer to see the correct one.

Choose your answer

• A

  Designate a central security account as the AWS Security Hub administrator account. Create a script that sends an invitation from the Security Hub administrator account and accepts the invitation from the member account. Run the script every time a new account is created. Configure Security Hub to run the CIS AWS Foundations Benchmark scans.

• B

  Run the CIS AWS Foundations Benchmark across all accounts by using Amazon Inspector.

• C

  Designate a central security account as the Amazon GuardDuty administrator account. Create a script that sends an invitation from the GuardDuty administrator account and accepts the invitation from the member account. Run the script every time a new account is created. Configure GuardDuty to run the CIS AWS Foundations Benchmark scans.

• D

  Designate an AWS Security Hub administrator account. Configure new accounts in the organization to automatically become member accounts. Enable CIS AWS Foundations Benchmark scans.

Pick an answer to check it, or press Show answer to see the correct one.

Choose your answer

• A

  Use the monitoring graphs in the EC2 console to view metrics for EBS volumes. Review the consumed space against the provisioned space on each volume. Identify any volumes that have low utilization.

• B

  Stop the EC2 instances from the EC2 console. Change the EC2 instance type to Amazon EBS-optimized. Start the EC2 instances.

• C

  Opt in to AWS Compute Optimizer. Allow sufficient time for metrics to be gathered. Review the Compute Optimizer findings for EBS volumes.

• D

  Install the fio tool onto the EC2 instances and create a .cfg file to approximate the required workloads. Use the benchmark results to gauge whether the provisioned EBS volumes are of the most appropriate type.

Pick an answer to check it, or press Show answer to see the correct one.

Choose your answer

• A

  Use AWS Trusted Advisor to perform a check for S3 buckets that do not have logging enabled. Configure the check to enable logging for S3 buckets that do not have logging enabled.

• B

  Configure an S3 bucket policy that requires all current and future S3 buckets to have logging enabled.

• C

  Use the s3-bucket-logging-enabled AWS Config managed rule. Add a remediation action that uses an AWS Lambda function to enable logging.

• D

  Use the s3-bucket-logging-enabled AWS Config managed rule. Add a remediation action that uses the AWS-ConfigureS3BucketLogging AWS Systems Manager Automation runbook to enable logging.

Pick an answer to check it, or press Show answer to see the correct one.

Choose your answer

• A

  Launch a new Amazon EC2 instance. Configure a cron job to use the AWS SDK to send an SNS notification to subscribers every Saturday.

• B

  Create a rule in Amazon EventBridge that triggers every Saturday. Configure the rule to publish a notification to an SNS topic.

• C

  Create an SNS subscription to a message fanout that sends notifications to subscribers every Saturday.

• D

  Use the AWS Step Functions scheduling feature to run a Step Functions step every Saturday. Configure the step to publish a message to an SNS topic.

Pick an answer to check it, or press Show answer to see the correct one.