SOA-C01 Exam Dumps : AWS Certified SysOps Administrator - Associate

Update the EFS file system settings to enable server-side encryption using AES-256.

Create a new encrypted EFS file system and copy the data from the unencrypted EFS file system to the new encrypted EFS file system.

Use AWS CloudHSM to encrypt the files directly before storing them in the EFS file system.

Modify the EFS file system mount options to enable Transport Layer Security (TLS) on each of the EC2 instances.

Use a VPN to set up a tunnel between the on-premises data center and the AWS resources

Use AWS Certificate Manager to create TLS/SSL certificates

Use AWS CloudHSM to encrypt the data

Use AWS KMS to create TLS/SSL certificates

Use AWS KMS to manage the encryption keys used for data encryption

Encrypt the S3 bucket content with Server-Side Encryption with Amazon S3-Managed Keys (SSE-S3).

Create an origin access identity and grant it permissions to read objects in the S3 bucket.

Assign an 1AM user to the CloudFront distribution and whitelist the 1AM user in the S3 bucket policy.

Assign an 1AM role to the CloudFront distribution and whitelist the 1AM role in the S3 bucket policy.