SOA-C01 Sample Questions & Answers

Reduce the scaling thresholds so that instances are added before traffic increases.

Purchase Reserved Instances to cover 100% of the maximum capacity of the Auto Scaling group.

Update the Auto Scaling group to launch instances that have a storage optimized instance type.

Use EC2 Image Builder to prepare an Amazon Machine Image (AMI) that has pre-installed software.

Create a CNAME record. Enter static.cloudfront.net as the record name. Enter the CloudFront distribution's public IP address as the value.

Create a CNAME record. Enter static.example.com as the record name. Enter the CloudFront distribution's private IP address as the value.

Create an A record. Enter static.cloudfront.net as the record name. Enter the CloudFront distribution's ID as an alias target.

Create an A record. Enter static.example.com as the record name. Enter the CloudFront distribution's domain name as an alias target.

EBS General Purpose SSD volumes

RDS PostgreSQL database

Amazon EFS file systems

S3 objects within a bucket

Store the database password as an environment variable for each Lambda function. Create a new Lambda function that is named Password Rotate. Use Amazon EventBridge (Amazon CloudWatch Events) to schedule the Password Rotate function every 30 days to change the database password and update the environment variable for each Lambda function.

Use AWS Key Management Service (AWS KMS) to encrypt the database password and to store the encrypted password as an environment variable for each Lambda function. Grant each Lambda function access to the KMS key so that the database password can be decrypted when required. Create a new Lambda function that is named Password Rotate to change the password every 30 days.

Use AWS Secrets Manager to store credentials for the database. Create a Secrets Manager secret and select the database so that Secrets Manager will use a Lambda function to update the database password automatically. Specify an automatic rotation schedule of 30 days. Update each Lambda function to access the database password from Secrets Manager.

Use AWS Systems Manager Parameter Store to create a secure string to store credentials for the database. Create a new Lambda function called Password Rotate. Use Amazon EventBridge (Amazon CloudWatch Events) to schedule the PasswordRotate function every 30 days to change the database password and to update the secret within Parameter Store. Update each Lambda function to access the database password from Parameter Store.

Configure the backup software to use Amazon S3 as the target for the data backups.

Configure the backup software to use Amazon S3 Glacier as the target for the data backups.

Use AWS Storage Gateway, and configure it to use gateway-cached volumes.

Use AWS Storage Gateway, and configure it to use gateway-stored volumes.

Create a VPC endpoint for the S3 bucket, and create an 1AM policy that conditionally limits all S3 actions on the bucket to the VPC endpoint as the source.

Create a VPC endpoint for the S3 bucket, and create an S3 bucket policy that conditionally limits all S3 actions on the bucket to the VPC endpoint as the source.

Create a service-linked role for Amazon EC2 that allows the EC2 instances to interact directly with Amazon S3, and attach an 1AM policy to the role that allows the EC2 instances full access to the S3 bucket.

Create a NAT gateway in the VPC, and modify the VPC route table to route all traffic destined for Amazon S3 through the NAT gateway.