A company has deployed a custom DNS server in AWS.The Security Engineer wants to ensure that Amazon EC2 instances cannot use the Amazon-providedDNS.How can the Security Engineer block access to the Amazon-provided DNS in the VPC?Read More →
A development team is working on a mobile app that allows users to upload pictures to Amazon S3.The team expects the app will be used by hundreds of thousands of users during a single event simultaneously.Once the pictures are uploaded, the backend service will scan and parse the pictures for inappropriate content.Which approach is the MOST resilient way to achieve this goal, which also smooths out temporary volume spikes for the backend service?Read More →
When an EC2 instance mat is backed by an S3-Based AMI is terminated, what happens to the data on the root volume?Read More →
An ecommerce company wants to use machine learning (ML) to monitor fraudulent transactions on its website.The company is using Amazon SageMaker to research, train, deploy, and monitor the ML models.The historical transactions data is in a .csv file that is stored in Amazon S3.The data contains features such as the user’s IP address, navigation time, average time on each page, and the number of clicks for each session.There is no label in the data to indicate if a transaction is anomalous.Which models should the company use in combination to detect anomalous transactions? (Choose two.)Read More →
A company has an application that scans millions of connected devices for security threats and pushes the scan logs to an Amazon S3 bucket.A total of 70 GB of data is generated each week, and the company needs to store 3 years of data for historical reporting.The company must process, aggregate, and enrich the data from Amazon S3 by performing complex analytical queries and joins in the least amount of time.The aggregated dataset is visualized on an Amazon QuickSight dashboard.What should a solutions architect recommend to meet these requirements?Read More →
A pharmaceutical company uses Amazon Quantum Ledger Database (Amazon QLDB) to store its clinical trial data records.The company has an application that runs as AWS Lambda functions.The application is hosted in the private subnet in a VPC.The application does not have internet access and needs to read some of the clinical data records.The company is concerned that traffic between the QLDB ledger and the VPC could leave the AWS network.The company needs to secure access to the QLDB ledger and allow the VPC traffic to have read-only access.Which security strategy should a database specialist implement to meet these requirements?Read More →
A company is building a solution for storing files containing Personally Identifiable Information (PII) on AWS.Requirements state:✑ All data must be encrypted at rest and in transit.✑ All data must be replicated in at least two locations that are at least 500 miles (805 kilometers) apart.Which solution meets these requirements?Read More →
A SysOps administrator is creating an Amazon EC2 Auto Scaling group in a new AWS account.After adding some instances, the SysOps administrator notices that the group has not reached the minimum number of instances.The SysOps administrator receives the following error message:Launching a new EC2 instance.Status Reason: Your quota allows for 0 more running instance(s).You requested at least 1.Launching EC2 instance failed.Which action will resolve this issue?Read More →
A company has developed a web application that runs on Amazon EC2 instances in one AWS Region.The company has taken on new business in other countries and must deploy its application into other regions to meet low-latency requirements for its users.The regions can be segregated, and an application running in one region does not need to communicate with instances in other regions.How should the company’s Solutions Architect automate the deployment of the application so that it can be MOST efficiently deployed into multiple regions?Read More →
A company operates a web application that runs on Amazon EC2 instances.The application listens on port 80 and port 443.The company uses an Application Load Balancer (ALB) with AWS WAF to terminate SSL and to forward traffic to the application instances only on port 80.The ALB is in public subnets that are associated with a network ACL that is named NACL.The application instances are in dedicated private subnets that are associated with a network ACL that is named NACL2.An Amazon RDS for PostgreSQL DB instance that uses port 5432 is in a dedicated private subnet that is associated with a network ACL that is named NACL3.All the network ACLs currently allow all inbound and outbound traffic.Which set of network ACL changes will increase the security of the application while ensuring functionality?Read More →
© 2026. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.