SOA-C01 Exam Dumps : AWS Certified SysOps Administrator - Associate

Enable AWS Trusted Advisor and show the Security team that the Security Groups unrestricted access check will alarm.

Schedule an AWS Lambda function to run hourly to scan and evaluate all security groups, and send a report to the Security team.

Use AWS Config to enable the restricted-common-ports rule, and add port 80 to the parameters.

Use Amazon Inspector to evaluate the security groups during scans, and send the completed reports to the Security team.

CloudFront does not have the ALB configured as the origin access identity.

The DNS is still pointing to the ALB instead of the CloudFront distribution.

The ALB security group is not permitting inbound traffic from CloudFront.

The default, minimum, and maximum Time to Live (TTL) are set to 0 seconds on the CloudFront distribution.

The target groups associated with the ALB are configured for sticky sessions.

Use a VPN to set up a tunnel between the on-premises data center and the AWS resources

Use AWS Certificate Manager to create TLS/SSL certificates

Use AWS CloudHSM to encrypt the data

Use AWS KMS to create TLS/SSL certificates

Use AWS KMS to manage the encryption keys used for data encryption