A company is preparing to deploy a data lake on AWS.A solutions architect must define the encryption strategy tor data at rest m Amazon S3/ The company’s security policy states:✑ Keys must be rotated every 90 days.✑ Strict separation of duties between key users and key administrators must be implemented.✑ Auditing key usage must be possible.What should the solutions architect recommend?Read More →
A machine learning (ML) specialist at a manufacturing company uses Amazon SageMaker DeepAR to forecast input materials and energy requirements for the company.Most of the data in the training dataset is missing values for the target variable.The company stores the training dataset as JSON files.The ML specialist develop a solution by using Amazon SageMaker DeepAR to account for the missing values in the training dataset.Which approach will meet these requirements with the LEAST development effort?Read More →
A company recently migrated from a third-party security application to Amazon Inspector.A sysops administrator discovered that a list of security findings is missing for some Amazon EC2 instances.Which action will resolve this problem?Read More →
What does the AWS Concierge Support team provide?Read More →
A developer is writing an application to analyze the traffic to a fleet of Amazon EC2 instances.The EC2 instances run behind a public Application Load Balancer(ALB).An HTTP server runs on each of the EC2 instances, logging all requests to a log file.The developer wants to capture the client public IP addresses.The developer analyzes the log files and notices only the IP address of the ALB.What must the developer do to capture the client public IP addresses in the log file?Read More →
A company is designing the security architecture for a global latency-sensitive web application it plans to deploy to AWS.A security engineer needs to configure a highly available and secure two-tier architecture.The security design must include controls to prevent common attacks such as DDoS, cross-site scripting, andSQL injection.Which solution meets these requirements?Read More →
A bank is designing an online customer service portal where customers can chat with customer service agents.The portal is required to maintain a 15-minuteRPO or RTO in case of a regional disaster.Banking regulations require that all customer service chat transcripts must be preserved on durable storage for at least7 years, chat conversations must be encrypted in-flight, and transcripts must be encrypted at rest.The Data Loss Prevention team requires that data at rest must be encrypted using a key that the team controls, rotates, and revokes.Which design meets these requirements?Read More →
A company recently moved its server infrastructure to Amazon EC2 instances.The company wants to use Amazon CloudWatch Logs to track the instance logs.What should a SysOps administrator do to meet this requirement in compliance with AWS best practices?Read More →
A DevOps engineer is using AWS CodeDeploy across a fleet of Amazon EC2 Instances in an EC2 Auto Scaling group.The associated CodeDeploy deployment group, which is integrated with EC2 Auto Scaling, is configured to perform in-place deployments with CodeDeplcyDefault.OneAtATime.During an ongoing new deployment, the engineer discovers that although the overall deployment finished successfully, two out of five instances have the previous application revision deployed.The other three instances have the newest application revision.What is likely causing this issue?Read More →
A company needs to deploy an Amazon Aurora PostgreSQL DB instance into multiple accounts.The company will initiate each DB instance from an existing Aurora PostgreSQL DB instance that runs in a shared account.The company wants the process to be repeatable in case the company adds additional accounts in the future.The company also wants to be able to verify if manual changes have been made to the DB instance configurations after the company deploys the DB instances.A database specialist has determined that the company needs to create an AWS CloudFormation template with the necessary configuration to create a DB instance in an account by using a snapshot of the existing DB instance to initialize the DB instance.The company will also use the CloudFormation template’s parameters to provide key values for the DB instance creation (account ID, etc.).Which final step will meet these requirements in the MOST operationally efficient way?Read More →
© 2025. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.