Amazon Web Services SOA-C01 Practice Exam Dumps 2025

The Security team has decided that there will be no public internet access to HTTP (TCP port 80) because if it is moving to HTTPS for all incoming web traffic. The team has asked a SysOps Administrator to provide a report on any security groups that are not compliant.

What should the SysOps Administrator do to provide near real-time compliance reporting?

Options:

Enable AWS Trusted Advisor and show the Security team that the Security Groups unrestricted access check will alarm.

Schedule an AWS Lambda function to run hourly to scan and evaluate all security groups, and send a report to the Security team.

Use AWS Config to enable the restricted-common-ports rule, and add port 80 to the parameters.

Use Amazon Inspector to evaluate the security groups during scans, and send the completed reports to the Security team.

Buy Now

Question 2

A company has mandated the use of multi-factor authentication (MFA) for all 1AM users, and requires users to make all API calls using the CLI. However, users are not prompted to enter MFA tokens, and are able to run CLI commands without MFA. In an attempt to enforce MFA. the company attached an 1AM policy to all users that denies API calls that have not been authenticated with MFA.

What additional step must be taken to ensure that API calls are authenticated using MFA?

Options:

Enable MFA on 1AM roles, and require 1AM users to use role credentials to sign API calls.

Ask the 1AM users to log into the AWS Management Console with MFA before making API calls using the CLI.

Restrict the 1AM users to use of the console, as MFA is not supported for CLI use.

Require users to use temporary credentials from the get-session token command to sign API calls.

Question 3

The Security team at AnyCompany discovers that some employees have been using individual AWS accounts that are not under the control of AnyCompany. The team has requested that those individual accounts be linked to the central organization using AWS Organizations.

Which action should a SysOps Administrator take to accomplish this?

Options:

Add each existing account to the central organization using AWS IAM.

Create a new organization in each account and join them to the central organization.

Send each existing account an invitation from the central organization.

D18912E1457D5D1DDCBD40AB3BF70D5D

Power Up Your Study Prep: Black Friday 75% Discount! Use coupon code below to save! - Ends in 0d 00h 00m 00s - Coupon code: big75certs

Amazon Web Services Related Exams

Verified By IT Certified Experts

CertsTopics.com Certified Safe Files

Up-To-Date Exam Study Material

99.5% High Success Pass Rate

100% Accurate Answers

Instant Downloads

Exam Questions And Answers PDF

Try Demo Before You Buy

AWS Certified SysOps Administrator - Associate Questions and Answers

Options:

Answer:

Options:

Answer:

Options:

Answer:

CompTIA

Fortinet

Microsoft

Salesforce