What should a SysOps administrator do to configure this integration?

2025-10-01
By:
In: SOA-C02
With: 1 Comment

A company is partnering with an external vendor to provide data processing services.For this integration, the vendor must host the company’s data in an AmazonS3 bucket in the vendor’s AWS account.The vendor is allowing the company to provide an AWS Key Management Service (AWS KMS) key to encrypt the company’s data.The vendor has provided an IAM role Amazon Resources Name (ARN) to the company for this integration.What should a SysOps administrator do to configure this integration?Read More →

What is the MOST secure and flexible way to obtain password credentials during deployment?

2025-10-01
By:
In: DOP-C01
With: 1 Comment

A large enterprise is deploying a web application on AWS.The application runs on Amazon EC2 instances behind an Application Load Balancer.The instances run in an Auto Scaling group across multiple Availability Zones.The application stores data in an Amazon RDS Oracle DB instance and Amazon DynamoDB.There are separate environments for development, testing, and production.What is the MOST secure and flexible way to obtain password credentials during deployment?Read More →

Which solutions will meet this requirement?

2025-10-01
By:
In: DBS-C01
With: 1 Comment

A company provisioned a three-tier application by using AWS CloudFormation and an Amazon RDS DB instance.During a test, a database administrator accidentally deleted the CloudFormation stack.The results were a deletion of all the resources, including the DB instance, and a loss of critical data.The company wants to prevent accidental deletion of a DB instance from happening in the future.Which solutions will meet this requirement? (Choose two.)Read More →

Which solution will meet these requirements with the LEAST operational overhead?

2025-10-01
By:
In: SAA-C02
With: 1 Comment

A company has an Amazon S3 data lake that is governed by AWS Lake Formation.The company wants to create a visualization in Amazon QuickSight by joining the data in the data lake with operational data that is stored in an Amazon Aurora MySQL database.The company wants to enforce column-level authorization so that the company’s marketing team can access only a subset of columns in the database.Which solution will meet these requirements with the LEAST operational overhead?Read More →

How should the ML engineer configure the SageMaker AMT data types to meet these requirements?

2025-10-01
By:
In: MLS-C01
With: 1 Comment

A machine learning (ML) engineer is using Amazon SageMaker automatic model tuning (AMT) to optimize a model’s hyperparameters.The ML engineer notices that the tuning jobs take a long time to run.The tuning jobs continue even when the jobs are not significantly improving against the objective metric.The ML engineer needs the training jobs to optimize the hyperparameters more quickly.How should the ML engineer configure the SageMaker AMT data types to meet these requirements?Read More →

What should the Administrator do with the weekly archive?

2025-10-01
By:
In: SOA-C01
With: 1 Comment

On a weekly basis, the Administrator for a photo sharing website receives an archive of all files users have uploaded the previous week.these file archives can be as large as 10TB in size.For legal reasons, these archives must be saved with no possibility of someone deleting or modifying these archives.Occasionally, there may be a need to view the contents, but it is expected that retrieving them can take three or more hours.What should the Administrator do with the weekly archive?Read More →

Which solution will meet these requirements?

2025-10-01
By:
In: DVA-C01
With: 1 Comment

A website allows users to upload photos to Amazon S3.An S3 event invokes an AWS Lambda function that uses the Amazon Rekognition DetectLabels operation to detect real-world objects within a photo.The website needs to store this data in a search index to allow users to quickly locate all photos associated with a label.Which solution will meet these requirements?Read More →

Which combination of steps should the security engineer take to meet these requirements?

2025-10-01
By:
In: SCS-C01
With: 1 Comment

A security engineer is working for a parent company that provides hosting and services to client companies.The parent company maintains an organization in AWS Organizations for all client company accounts.The parent company adds any new accounts to the organization when the new accounts are created.The parent company currently uses IAM users to administer the client company accounts.As more client accounts are added, the administration of the IAM accounts takes more time.The security engineer must design a solution to reduce the amount of time that the parent company spends on administration and access provisioning for client accounts.Which combination of steps should the security engineer take to meet these requirements? (Choose two.)Read More →

What is the MOST secure way to allow org1 to access resources in org2?

2025-10-01
By:
In: SAP-C01
With: 1 Comment

An AWS partner company is building a service in AWS Organizations using its organization named org1.This service requires the partner company to have access to AWS resources in a customer account, which is in a separate organization named org2.The company must establish least privilege security access using an API or command line tool to the customer account.What is the MOST secure way to allow org1 to access resources in org2?Read More →

What will happen when CPU utilization reaches the 80% threshold?

2025-10-01
By:
In: SOA-C02
With: 1 Comment

A company is using an Amazon EC2 Auto Scaling group to support a workload.A SysOps administrator finds that the Auto Scaling group is configured with two similar scaling policies.One scaling policy adds 5 instances when CPU utilization reaches 80%.The other scaling policy adds 10 instances when CPU utilization reaches 80%.What will happen when CPU utilization reaches the 80% threshold?Read More →