nerdexam
AmazonAmazon

SOA-C02 · Question #118

SOA-C02 Question #118: Real Exam Question with Answer & Explanation

Sign in or unlock SOA-C02 to reveal the answer and full explanation for question #118. The question stem and answer options stay visible for context.

Submitted by eva_at· Mar 30, 2026Security and Compliance

Question

A company has multiple AWS Site-to-Site VPN connections between a VPC and its branch offices. The company manages an Amazon Elasticsearch Service (Amazon ES) domain that is configured with public access. The Amazon ES domain has an open domain access policy. A SysOps administrator needs to ensure that Amazon ES can be accessed only from the branch offices while preserving existing data. Which solution will meet these requirements?

Options

  • AConfigure an identity-based access policy on Amazon ES.
  • BConfigure an IP-based domain access policy on Amazon ES.
  • CDeploy a new Amazon ES domain in private subnets in a VPC, and import a snapshot from
  • DReconfigure the Amazon ES domain in private subnets in a VPC.

Unlock SOA-C02 to see the answer

You've previewed enough free SOA-C02 questions. Unlock SOA-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Amazon OpenSearch Service (Amazon ES)#Access Control#Security Policies#IP Whitelisting
Full SOA-C02 PracticeBrowse All SOA-C02 Questions