Security has identified an IP address that should be explicitly denied for both ingress and egress requests for all services in an Amazon VPC immediately.Which feature can be used to meet this requirement?Read More →
A data engineer needs to provide a team of data scientists with the appropriate dataset to run machine learning training jobs.The data will be stored in Amazon S3.The data engineer is obtaining the data from an Amazon Redshift database and is using join queries to extract a single tabular dataset.A portion of the schema is as follows:TransactionTimestamp (Timestamp)CardName (Varchar)CardNo (Varchar)The data engineer must provide the data so that any row with a CardNo value of NULL is removed.Also, the TransactionTimestamp column must be separated into a TransactionDate column and a TransactionTime column.Finally, the CardName column must be renamed to NameOnCard.The data will be extracted on a monthly basis and will be loaded into an S3 bucket.The solution must minimize the effort that is needed to set up infrastructure for the ingestion and transformation.The solution also must be automated and must minimize the load on the Amazon Redshift cluster.Which solution meets these requirements?Read More →
A company is running a three-tier web application to process credit card payments.The front-end user interface consists of static webpages.The application tier can have long-running processes.The database tier uses MySQL.The application is currently running on a single, general purpose large Amazon EC2 instance.A solutions architect needs to decouple the services to make the web application highly available.Which solution would provide the HIGHEST availability?Read More →
A company is due for renewing its database license.The company wants to migrate its 80 TB transactional database system from on-premises to the AWS Cloud.The migration should incur the least possible downtime on the downstream database applications.The company’s network infrastructure has limited network bandwidth that is shared with other applications.Which solution should a database specialist use for a timely migration?Read More →
A company recently migrated its legacy application from on-premises to AWS.The application is hosted on Amazon EC2 instances behind an Application LoadBalancer, which is behind Amazon API Gateway.The company wants to ensure users experience minimal disruptions during any deployment of a new version of the application.The company also wants to ensure it can quickly roll back updates if there is an issue.Which solution will meet these requirements with MINIMAL changes to the application?Read More →
A company has created a NAT gateway in a public subnet in a VPC.The VPC also contains a private subnet that includes Amazon EC2 instances.The EC2 instances use the NAT gateway to access the internet to download patches and updates.The company has configured a VPC flow log for the elastic network interface of the NAT gateway.The company is publishing the output to Amazon CloudWatch Logs.A SysOps administrator must identify the top five internet destinations that the EC2 instances in the private subnet communicate with for downloads.What should the SysOps administrator do to meet this requirement in the MOST operationally efficient way?Read More →
A company is creating an account strategy so that they can begin using AWS.The Security team will provide each team with the permissions they need to follow the principle or least privileged access.Teams would like to keep their resources isolated from other groups, and the Finance team would like each team’s resource usage separated for billing purposes.Which account creation process meets these requirements and allows for changes?Read More →
A security engineer needs to implement an intrusion detection system (IDS) for a shipping company.The findings from the system must generate alerts that can be sent to an email distribution group that the company’s operations team uses.The security engineer must maximize the coverage that the IDS provides.Which combination of steps should the security engineer take to meet these requirements? (Choose two.)Read More →
A company is offering APIs as a service over the internet to provide unauthenticated read access to statistical information that is updated daily.The company uses Amazon API Gateway and AWS Lambda to develop the APIs.The service has become popular, and the company wants to enhance the responsiveness of the APIs.Which action can help the company achieve this goal?Read More →
A company must compare the cost of running a MySQL database on an Amazon EC2 instance and Amazon RDS DB instance.Which AWS service or tool should the company use?Read More →
© 2026. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.