Which combination of steps should the ML specialist take to secure the traffic?

2025-10-02
By:
In: MLS-C01
With: 1 Comment

A machine learning (ML) specialist wants to secure calls to the Amazon SageMaker Service API.The specialist has configured Amazon VPC with a VPC interface endpoint for the Amazon SageMaker Service API and is attempting to secure traffic from specific sets of instances and IAM users.The VPC is configured with a single public subnet.Which combination of steps should the ML specialist take to secure the traffic? (Choose two.)Read More →

Which of the following is the best method to quickly and temporarily deny access from the specified IP address block?

2025-10-02
By:
In: SOA-C01
With: 1 Comment

You are currently hosting multiple applications in a VPC and have logged numerous port scans coming in from a specific IP address block.Your security team has requested that all access from the offending IP address block be denied for the next 24 hours.Which of the following is the best method to quickly and temporarily deny access from the specified IP address block?Read More →

What is the MOST operationally efficient solution that meets these requirements?

2025-10-02
By:
In: DVA-C01
With: 1 Comment

A company is using AWS CloudFormation to deploy a two-tier application.The application will use Amazon RDS as its backend database.The company wants a solution that will randomly generate the database password during deployment.The solution also must automatically rotate the database password without requiring changes to the application.What is the MOST operationally efficient solution that meets these requirements?Read More →

Which option meets these requirements?

2025-10-02
By:
In: SAP-C01
With: 1 Comment

A retail company is running an application that stores invoice files in an Amazon S3 bucket and metadata about the files in an Amazon DynamoDB table.The application software runs in both us-east-1 and eu-west-1.The S3 bucket and DynamoDB table are in us-east-1.The company wants to protect itself from data corruption and loss of connectivity to either Region.Which option meets these requirements?Read More →

What should a DevOps engineer do to meet these requirements?

2025-10-02
By:
In: DOP-C01
With: 1 Comment

A development team is building a full-stack serverless web application.The serverless application will consist of a backend REST API and a front end that is built with a single-page application (SPA) framework.The team wants to use a Git-based workflow to develop and deploy the application.The team has created an AWS CodeCommit repository to store the application code.The team wants to use multiple development branches to test new features.In addition, the team wants to ensure that code changes on the development branches are deployed to the different development environments.Code changes to the main branches must be released automatically to production.The development deployments must be available as a subdomain of the main application website, which is hosted in an Amazon Route 53 public hosted zone.What should a DevOps engineer do to meet these requirements?Read More →

What is the MOST cost-effective solution?

2025-10-02
By:
In: SAA-C02
With: 1 Comment

A company recently started using Amazon Aurora as the data store for its global ecommerce application.When large reports are run, developers report that the ecommerce application is performing poorly.After reviewing metrics in Amazon CloudWatch, a solutions architect finds that the ReadIOPS and CPUUtilization metrics are spiking when monthly reports run.What is the MOST cost-effective solution?Read More →