SOA-C02 · Question #570
A company is using AWS to deploy a critical application on a fleet of Amazon EC2 instances. The company is rewriting the application because the application failed a security review. The application w
Sign in or unlock SOA-C02 to reveal the answer and full explanation for question #570. The question stem and answer options stay visible for context.
Question
A company is using AWS to deploy a critical application on a fleet of Amazon EC2 instances. The company is rewriting the application because the application failed a security review. The application will take 12 months to rewrite. While this rewrite happens, the company needs to rotate IAM access keys that the application uses. A SysOps administrator must implement an automated solution that finds and rotates IAM access keys that are at least 30 days old. The solution must then continue to rotate the IAM access keys every 30 days. Which solution will meet this requirement with the MOST operational efficiency?
Options
- AUse an AWS Config rule to identify IAM access keys that are at least 30 days old. Configure AWS
- BUse AWS Trusted Advisor to identify IAM access keys that are at least 30 days old. Configure
- CCreate a script that checks the age of IAM access keys and rotates them if they are at least 30
- DCreate an AWS Lambda function that checks the age of IAM access keys and rotates them if they
Unlock SOA-C02 to see the answer
You've previewed enough free SOA-C02 questions. Unlock SOA-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.