Authentic Amazon Web Services Certification Exam ANS-C01 Questions Answers

Create an Amazon EventBridge (Amazon CloudWatch Events) rule with a custom pattern to monitor the account for changes. Configure the rule to invoke an AWS Lambda function to identify noncompliant resources. Update an Amazon DynamoDB table with the changes that are identified.

Create custom metrics from Amazon CloudWatch logs. Use the metrics to invoke an AWS Lambda function to identify noncompliant resources. Update an Amazon DynamoDB table with the changes that are identified.

Record the current state of network resources by using AWS Config. Create rules that reflect the desired configuration settings. Set remediation for noncompliant resources.

Record the current state of network resources by using AWS Systems Manager Inventory. Use Systems Manager State Manager to enforce the desired configuration settings and to carry out remediation for noncompliant resources.

Create a new Direct Connect LAG with new circuits and ports that support MACsec.

Associate the MACsec Connectivity Association Key (CAK) and the Connection Key Name (CKN) with the new LAG.

Associate the Internet Key Exchange (IKE) with the existing LAG.

Configure the MACsec encryption mode on the existing LAG.

Configure the MACsec encryption mode on the new LAG.

Configure the MACsec encryption mode on each Direct Connect connection that makes up the existing LAG.

Modify the security group for the application. Add an inbound rule to allow traffic from the on-premises data center network range to the application.

Modify the network ACLs for the VPC subnet. Add an inbound rule to allow traffic from the on-premises data center network range to the VPC subnet range.

Modify the network ACLs for the VPC subnet. Add an outbound rule to allow traffic from the VPC subnet range to the on-premises data center network range.

Modify the security group for the application. Add an outbound rule to allow traffic from the application to the on-premises data center network range.