Which combination of steps should the security engineer take to accomplish this?

2026-04-02
By:
In: SCS-C01
With: 2 Comments

A company uses SAML federation with AWS Identity and Access Management (IAM) to provide internal users with SSO for their AWS accounts.The company’s identity provider certificate was rotated as part of its normal lifecycle.Shortly after, users started receiving the following error when attempting to log in:”Error: Response Signature Invalid (Service: AWSSecurityTokenService; Status Code: 400; Error Code: InvalidIdentityToken)”A security engineer needs to address the immediate issue and ensure that it will not occur again.Which combination of steps should the security engineer take to accomplish this? (Choose two.)Read More →

Which solution will meet these requirements?

2026-04-02
By:
In: SAA-C03
With: 2 Comments

A company performs tests on an application that uses an Amazon DynamoDB table.The tests run for 4 hours once a week.The company knows how many read and write operations the application performs to the table each second during the tests.The company does not currently use DynamoDB for any other use case.A solutions architect needs to optimize the costs for the table.Which solution will meet these requirements?Read More →

Which collection of design choices should a solutions architect make to achieve the maximum performance from the HPC cluster?

2026-04-02
By:
In: SAP-C02
With: 2 Comments

A company has built a high performance computing (HPC) cluster in AWS for a tightly coupled workload that generates a large number of shared files stored in Amazon EFS.The cluster was performing well when the number of Amazon EC2 instances in the cluster was 100.However, when the company increased the cluster size to 1.000 EC2 instances, overall performance was well below expectations.Which collection of design choices should a solutions architect make to achieve the maximum performance from the HPC cluster? (Choose three.)Read More →

Which solution will meet these requirements?

2026-04-02
By:
In: DVA-C01
With: 2 Comments

A company’s developer is building a static website to be deployed in Amazon S3 for a production environment.The website integrates with an Amazon Aurora PostgreSQL database by using an AWS Lambda function.The website that is deployed to production will use a Lambda alias that points to a specific version of the Lambda function.The company must rotate the database credentials every 2 weeks.Lambda functions that the company deployed previously must be able to use the most recent credentials.Which solution will meet these requirements?Read More →

Which architecture should be used to scale the solution at the lowest cost?

2026-04-02
By:
In: MLS-C01
With: 2 Comments

A technology startup is using complex deep neural networks and GPU compute to recommend the company’s products to its existing customers based upon each customer’s habits and interactions.The solution currently pulls each dataset from an Amazon S3 bucket before loading the data into a TensorFlow model pulled from the company’s Git repository that runs locally.This job then runs for several hours while continually outputting its progress to the same S3 bucket.The job can be paused, restarted, and continued at any time in the event of a failure, and is run from a central queue.Senior managers are concerned about the complexity of the solution’s resource management and the costs involved in repeating the process regularly.They ask for the workload to be automated so it runs once a week, starting Monday and completing by the close of business Friday.Which architecture should be used to scale the solution at the lowest cost?Read More →

Which combination of actions should the database specialist take to meet these requirements?

2026-04-02
By:
In: DBS-C01
With: 2 Comments

A company has a database fleet that includes an Amazon RDS for MySQL DB instance.During an audit, the company discovered that the data that is stored on the DB instance is unencrypted.A database specialist must enable encryption for the DB instance.The database specialist also must encrypt all connections to the DB instance.Which combination of actions should the database specialist take to meet these requirements? (Choose three.)Read More →

Which solution will meet these requirements?

2026-04-02
By:
In: DVA-C02
With: 2 Comments

A developer is creating a web application for a school that stores data in Amazon DynamoDB.The ExamScores table has the following attributes: student_id, subject_name, and top_score.Each item in the ExamScores table is identified with student_id as the partition key and subject_name as the sort key.The web application needs to display the student _id for the top scores for each school subject.The developer needs to increase the speed of the queries to retrieve the student_id for the top scorer for each school subject.Which solution will meet these requirements?Read More →