What should a solutions architect do in the production environment to meet these requirements?

2025-10-04
By:
In: SAP-C02
With: 1 Comment

A company is implementing a serverless architecture by using AWS Lambda functions that need to access a Microsoft SQL Server DB instance on Amazon RDS.The company has separate environments for development and production, including a clone of the database system.The company’s developers are allowed to access the credentials for the development database.However, the credentials for the production database must be encrypted with a key that only members of the IT security team’s IAM user group can access.This key must be rotated on a regular basis.What should a solutions architect do in the production environment to meet these requirements?Read More →

Which solution will meet these requirements with the LEAST operational overhead?

2025-10-04
By:
In: DOP-C01
With: 1 Comment

A company is using AWS Database Migration Service (AWS DMS) to replicate data from a source database in a data center to a target Amazon Aurora PostgreSQL database.The company has created a DMS replication task with change data capture (CDC).The replication instance sometimes gets interrupted and affects critical functionality.The company must improve the replication instance’s resiliency and receive notifications about interruptions.Which solution will meet these requirements with the LEAST operational overhead?Read More →

What is the MOST restrictive configuration for the DB instance security group?

2025-10-04
By:
In: DBS-C01
With: 1 Comment

A company developed a new application that is deployed on Amazon EC2 instances behind an Application Load Balancer.The EC2 instances use the security group named sg-application-servers.The company needs a database to store the data from the application and decides to use an Amazon RDS for MySQL DB instance.The DB instance is deployed in a private DB subnet.What is the MOST restrictive configuration for the DB instance security group?Read More →

Which implementation will meet these requirements?

2025-10-04
By:
In: MLS-C01
With: 1 Comment

A company will use Amazon SageMaker to train and host a machine learning (ML) model for a marketing campaign.The majority of data is sensitive customer data.The data must be encrypted at rest.The company wants AWS to maintain the root of trust for the master keys and wants encryption key usage to be logged.Which implementation will meet these requirements?Read More →

What should the SysOps administrator do next to make the application highly available?

2025-10-04
By:
In: SOA-C01
With: 1 Comment

A company has an application that is running on an Amazon EC2 instance in one Availability Zone.A SysOps administrator needs to make the application highly available.The SysOps administrator has created a launch configuration from the running EC2 instance.The SysOps administrator also has properly configured a load balancer.What should the SysOps administrator do next to make the application highly available?Read More →