A company is managing multiple AWS accounts in AWS Organizations.The company is reviewing internal security of its AWS environment.The company’s security administrator has their own AWS account and wants to review the VPC configuration of developer AWS accounts.Which solution will meet these requirements in the MOST secure manner?Read More →
A company operates a fleet of servers on premises and operates a fleet of Amazon EC2 instances in its organization in AWS Organizations.The company’s AWS accounts contain hundreds of VPCs.The company wants to connect its AWS accounts to its on-premises network.AWS Site-to-Site VPN connections are already established to a single AWS account.The company wants to control which VPCs can communicate with other VPCs.Which combination of steps will achieve this level of control with the LEAST operational effort? (Choose three.)Read More →
A company’s Chief Security Officer has requested that a Security Analyst review and improve the security posture of each company AWS account.The SecurityAnalyst decides to do this by improving AWS account root user security.Which actions should the Security Analyst take to meet these requirements? (Choose three.)Read More →
____________ is a fast, flexible, fully managed pub/sub messaging service.Read More →
A Machine Learning Specialist is working with a large cybersecurity company that manages security events in real time for companies around the world.The cybersecurity company wants to design a solution that will allow it to use machine learning to score malicious events as anomalies on the data as it is being ingested.The company also wants be able to save the results in its data lake for later processing and analysis.What is the MOST efficient way to accomplish these tasks?Read More →
A company has two AWS accounts in the same AWS Region.One account is a publisher account, and the other account is a subscriber account.Each account has its own Amazon S3 bucket.An application puts media objects into the publisher account’s S3 bucket.The objects are encrypted with server-side encryption with customer-provided encryption keys (SSE-C).The company needs a solution that will automatically copy the objects to the subscriber’s account’s S3 bucket.Which solution will meet these requirements with the LEAST operational overhead?Read More →
A company is running its customer feedback application on Amazon Aurora MySQL.The company runs a report every day to extract customer feedback, and a team reads the feedback to determine if the customer comments are positive or negative.It sometimes takes days before the company can contact unhappy customers and take corrective measures.The company wants to use machine learning to automate this workflow.Which solution meets this requirement with the LEAST amount of effort?Read More →
A company stores files on 50 Amazon S3 buckets in the same AWS Region.The company wants to connect to the S3 buckets securely over a private connection from its Amazon EC2 instances.The company needs a solution that produces no additional cost.Which solution will meet these requirements?Read More →
A company has multiple business units.Each business unit has its own AWS account and runs a single website within that account.The company also has a single logging account.Logs from each business unit website are aggregated into a single Amazon S3 bucket in the logging account.The S3 bucket policy provides each business unit with access to write data into the bucket and requires data to be encrypted.The company needs to encrypt logs uploaded into the bucket using a single AWS Key Management Service (AWS KMS) CMK.The CMK that protects the data must be rotated once every 365 days.Which strategy is the MOST operationally efficient for the company to use to meet these requirements?Read More →
An organization has a multi-petabyte workload that it is moving to Amazon S3, but the CISO is concerned about cryptographic wear-out and the blast radius if a key is compromised.How can the CISO be assured that AWS KMS and Amazon S3 are addressing the concerns? (Choose two.)Read More →
© 2026. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.