SOA-C01 Exam Dumps : AWS Certified SysOps Administrator - Associate

Update the EFS file system settings to enable server-side encryption using AES-256.

Create a new encrypted EFS file system and copy the data from the unencrypted EFS file system to the new encrypted EFS file system.

Use AWS CloudHSM to encrypt the files directly before storing them in the EFS file system.

Modify the EFS file system mount options to enable Transport Layer Security (TLS) on each of the EC2 instances.

Configure the Auto Scaling group to use lifecycle hooks. Deploy now instances with the new application version. Complete the lifecycle hook action once healthy.

Create a new Amazon Machine Image (AMI) containing the updated code. Create a launch configuration with the AMI. Update Auto Scaling group to use the new lauch configuration.

Deploy a second CloudFormation stack. Wait for the application to be available Cut over to the new Application Load Balancer

Modify the CloudFormation template to use an AutoScalingReplacingUpdate policy. Update the stack. Perform a second update with the new release

Enable MFA on 1AM roles, and require 1AM users to use role credentials to sign API calls.

Ask the 1AM users to log into the AWS Management Console with MFA before making API calls using the CLI.

Restrict the 1AM users to use of the console, as MFA is not supported for CLI use.

Require users to use temporary credentials from the get-session token command to sign API calls.