How can the security engineer meet these requirements?

2026-04-06
By:
In: SCS-C01
With: 2 Comments

A company is running an Amazon RDS Multi-AZ DB instance inside a VPC.The DB instance is using two subnets that provide a default route to the internet through a NAT gateway.The company also has application servers that run on Amazon EC2 instances that use the RDS database.The company has deployed these EC2 instances into two other private subnets within the same VPC.These EC2 instances use a default route to access the internet through the same NAT gateway.Each subnet in the VPC uses its own unique route table.After a recent security audit, the company added a new security requirement.The DB instance must never be able to connect to the internet.A security engineer must make this change immediately without disrupting the application servers’ network traffic.How can the security engineer meet these requirements?Read More →

Which process will have minimal impact on your application while complying with this requirement?

2026-04-06
By:
In: SOA-C01
With: 2 Comments

An application you maintain consists of multiple EC2 instances in a default tenancy VPC.This application has undergone an internal audit and has been determined to require dedicated hardware for one instance.Your compliance team has given you a week to move this instance to single-tenant hardware.Which process will have minimal impact on your application while complying with this requirement?Read More →

Which type of ML algorithm will meet these requirements?

2026-04-06
By:
In: MLS-C01
With: 2 Comments

A data scientist wants to build a financial trading bot to automate investment decisions.The financial bot should recommend the quantity and price of an asset to buy or sell to maximize long-term profit.The data scientist will continuously stream financial transactions to the bot for training purposes.The data scientist must select the appropriate machine learning (ML) algorithm to develop the financial trading bot.Which type of ML algorithm will meet these requirements?Read More →

Which Amazon EC2 pricing option is the MOST cost-effective?

2026-04-06
By:
In: SAA-C02
With: 2 Comments

A company is planning to migrate a commercial off-the-shelf application from its on-premises data center to AWS.The software has a software licensing model using sockets and cores with predictable capacity and uptime requirements.The company wants to use its existing licenses, which were purchased earlier this year.Which Amazon EC2 pricing option is the MOST cost-effective?Read More →

Which solution meets these requirements?

2026-04-06
By:
In: DBS-C01
With: 2 Comments

A software development company is using Amazon Aurora MySQL DB clusters for several use cases, including development and reporting.These use cases place unpredictable and varying demands on the Aurora DB clusters, and can cause momentary spikes in latency.System users run ad-hoc queries sporadically throughout the week.Cost is a primary concern for the company, and a solution that does not require significant rework is needed.Which solution meets these requirements?Read More →

What should the solutions architect recommend to meet these requirements?

2026-04-06
By:
In: SAP-C01
With: 2 Comments

A solutions architect is auditing the security setup of an AWS Lambda function for a company.The Lambda function retrieves the latest changes from an Amazon Aurora database.The Lambda function and the database run in the same VPC.Lambda environment variables are providing the database credentials to the Lambda function.The Lambda function aggregates data and makes the data available in an Amazon S3 bucket that is configured for server-side encryption with AWS KMS managed encryption keys (SSE-KMS).The data must not travel across the internet.If any database credentials become compromised, the company needs a solution that minimizes the impact of the compromise.What should the solutions architect recommend to meet these requirements?Read More →

Which solution meets these criteria?

2026-04-06
By:
In: SCS-C01
With: 2 Comments

A security engineer must use AWS Key Management Service (AWS KMS) to design a key management solution for a set of Amazon Elastic Block Store (AmazonEBS) volumes that contain sensitive data.The solution needs to ensure that the key material automatically expires in 90 days.Which solution meets these criteria?Read More →

Which modeling approach will deliver the MOST accurate prediction of product quality?

2026-04-06
By:
In: MLS-C01
With: 2 Comments

A manufacturing company has a production line with sensors that collect hundreds of quality metrics.The company has stored sensor data and manual inspection results in a data lake for several months.To automate quality control, the machine learning team must build an automated mechanism that determines whether the produced goods are good quality, replacement market quality, or scrap quality based on the manual inspection results.Which modeling approach will deliver the MOST accurate prediction of product quality?Read More →