A company is using an AWS KMS customer master key (CMK) with imported key material.The company references the CMK by its alias in the Java application to encrypt data.The CMK must be rotated every 6 months.What is the process to rotate the key?Read More →
A network security vendor needs to ingest telemetry data from thousands of endpoints that run all over the world.The data is transmitted every 30 seconds in the form of records that contain 50 fields.Each record is up to 1 KB in size.The security vendor uses Amazon Kinesis Data Streams to ingest the data.The vendor requires hourly summaries of the records that Kinesis Data Streams ingests.The vendor will use Amazon Athena to query the records and to generate the summaries.The Athena queries will target 7 to 12 of the available data fields.Which solution will meet these requirements with the LEAST amount of customization to transform and store the ingested data?Read More →
A media company stores video content in an Amazon Elastic Block Store (Amazon EBS) volume.A certain video file has become popular and a large number of users across the world are accessing this content.This has resulted in a cost increase.Which action will DECREASE cost without compromising user accessibility?Read More →
A company conducted a security audit of its AWS infrastructure. The audit identified that data was not encrypted in transit between application servers and aMySQL database that is hosted in Amazon RDS.After the audit, the company updated the application to use an encrypted connection. To prevent this problem from occurring again, the company’s database team needs to configure the database to require in-transit encryption for all connections.Which solution will meet this requirement?Read More →
The Development team has grown substantially in recent months and so has the number of projects that use separate code repositories.The current process involves configuring AWS CodePipeline manually.There have been service limit alerts regarding the number of Amazon S3 buckets that exist.Which pipeline option will reduce S3 bucket sprawl alerts?Read More →
A SysOps administrator is designing a solution for an Amazon RDS for PostgreSQL DB instance.Database credentials must be stored and rotated monthly.The applications that connect to the DB instance send write-intensive traffic with variable client connections that sometimes increase significantly in a short period of time.Which solution should a SysOps administrator choose to meet these requirements?Read More →
A company wants to analyze log data using date ranges with a custom application running on AWS.The application generates about 10 GB of data every day, which is expected to grow.A Solutions Architect is tasked with storing the data in Amazon S3 and using Amazon Athena to analyze the data.Which combination of steps will ensure optimal performance as the data grows? (Choose two.)Read More →
A developer has created an AWS Lambda function in a company’s development account.The Lambda function requires the use of an AWS Key Management Service (AWS KMS) customer managed key that exists in a security account that the company’s security team controls.The developer obtains the ARN of the KMS key from a previous Lambda function in the development account.The previous Lambda function had been working properly with the KMS key.When the developer uses the ARN and tests the new Lambda function, an error message states that access is denied to the KMS key in the security account.The developer tests the previous Lambda function that uses the same KMS key and discovers that the previous Lambda function still can encrypt data as expected.A security engineer must resolve the problem so that the new Lambda function in the development account can use the KMS key from the security account.Which combination of steps should the security engineer take to meet these requirements? (Choose two.)Read More →
A developer is creating an application that will give users the ability to store photos from their cellphones in the cloud.The application needs to support tens of thousands of users.The application uses an Amazon API Gateway REST API that is integrated with AWS Lambda functions to process the photos.The application stores details about the photos in Amazon DynamoDB.Users need to create an account to access the application.In the application, users must be able to upload photos and retrieve previously uploaded photos.The photos will range in size from 300 KB to 5 MB.Which solution will meet these requirements with the LEAST operational overhead?Read More →
A company needs to design a solution for the efficient use of compute resources for an enterprise workload.The company needs to make informed decisions as its technology needs evolve.Which pillar of the AWS Well-Architected Framework do these requirements represent?Read More →
© 2026. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.