Which of the following is the best method to quickly and temporarily deny access from the specified IP address block?

2026-04-05
By:
In: SOA-C01
With: 2 Comments

You are currently hosting multiple applications in a VPC and have logged numerous port scans coming in from a specific IP address block.Your security team has requested that all access from the offending IP address block be denied for the next 24 hours.Which of the following is the best method to quickly and temporarily deny access from the specified IP address block?Read More →

Which combination of steps should the ML specialist take to secure the traffic?

2026-04-05
By:
In: MLS-C01
With: 2 Comments

A machine learning (ML) specialist wants to secure calls to the Amazon SageMaker Service API.The specialist has configured Amazon VPC with a VPC interface endpoint for the Amazon SageMaker Service API and is attempting to secure traffic from specific sets of instances and IAM users.The VPC is configured with a single public subnet.Which combination of steps should the ML specialist take to secure the traffic? (Choose two.)Read More →

Which application change should a solutions architect recommend to resolve these issues?

2026-04-05
By:
In: SAA-C02
With: 2 Comments

An online shopping application accesses an Amazon RDS Multi-AZ DB instance.Database performance is slowing down the application.After upgrading to the next-generation instance type, there was no significant performance improvement.Analysis shows approximately 700 IOPS are sustained, common queries run for long durations and memory utilization is high.Which application change should a solutions architect recommend to resolve these issues?Read More →

What must the SysOps administrator do to fix this issue?

2026-04-05
By:
In: SOA-C02
With: 2 Comments

A company needs to take an inventory of applications that are running on multiple Amazon EC2 instances.The company has configured users and roles with the appropriate permissions for AWS Systems Manager.An updated version of Systems Manager Agent has been installed and is running on every instance.While configuring an inventory collection, a SysOps administrator discovers that not all the instances in a single subnet are managed by Systems Manager.What must the SysOps administrator do to fix this issue?Read More →

How should the Solutions Architect meet these requirements?

2026-04-05
By:
In: SAP-C01
With: 2 Comments

A company runs an ordering system on AWS using Amazon SQS and AWS Lambda, with each order received as a JSON message.Recently the company had a marketing event that led to a tenfold increase in orders.With this increase, the following undesired behaviors started in the ordering system:✑ Lambda failures while processing orders lead to queue backlogs.✑ The same orders have been processed multiple times.A Solutions Architect has been asked to solve the existing issues with the ordering system and add the following resiliency features:✑ Retain problematic orders for analysis.✑ Send notification if errors go beyond a threshold value.How should the Solutions Architect meet these requirements?Read More →

What solution should the Engineer use to implement the appropriate access restrictions for the application?

2026-04-05
By:
In: SCS-C01
With: 2 Comments

A Security Engineer for a large company is managing a data processing application used by 1,500 subsidiary companies.The parent and subsidiary companies all use AWS.The application uses TCP port 443 and runs on Amazon EC2 behind a Network Load Balancer (NLB).For compliance reasons, the application should only be accessible to the subsidiaries and should not be available on the public internet.To meet the compliance requirements for restricted access, the Engineer has received the public and private CIDR block ranges for each subsidiary.What solution should the Engineer use to implement the appropriate access restrictions for the application?Read More →