A company wants to control access to its AWS resources by using identities and groups that are defined in its existing Microsoft Active Directory.What must the company create in its AWS account to map permissions for AWS services to Active Directory user attributes?Read More →
A company has developed a mobile game.The backend for the game runs on several virtual machines located in an on-premises data center.The business logic is exposed using a REST API with multiple functions.Player session data is stored in central file storage.Backend services use different API keys for throttling and to distinguish between live and test traffic.The load on the game backend varies throughout the day.During peak hours, the server capacity is not sufficient.There are also latency issues when fetching player session data.Management has asked a solutions architect to present a cloud architecture that can handle the game’s varying load and provide low-latency data access.The API model should not be changed.Which solution meets these requirements?Read More →
A company is using AWS Certificate Manager (ACM) to manage public SSL/TLS certificates.A SysOps administrator needs to send an email notification when a certificate has less than 14 days until expiration.Which solution will meet this requirement with the LEAST operational overhead?Read More →
A company manages a web application that runs on Amazon EC2 instances behind an Application Load Balancer (ALB).The EC2 instances run in an AutoScaling group across multiple Availability Zones.The application uses an Amazon RDS for MySQL DB instance to store the data.The company has configuredAmazon Route 53 with an alias record that points to the ALB.Anew company guideline requires a geographically isolated disaster recovery (DR) site with an RTO of 4 hours and an RPO of 15 minutes.Which DR strategy will meet these requirements with the LEAST change to the application stack?Read More →
Accompany is using Amazon Redshift for its data warehouse.During review of the last few AWS monthly bills, a database specialist notices charges for Amazon Redshift backup storage.The database specialist needs to decrease the cost of these charges in the future and must create a solution that provides notification if the charges exceed a threshold.Which combination of actions will moot those requirements with the LEAST operational overhead? (Choose two.)Read More →
An application calls a service run by a vendor.The vendor charges based on the number of calls.The finance department needs to know the number of calls that are made to the service to validate the billing statements.How can a solutions architect design a system to durably store the number of calls without requiring changes to the application?Read More →
A retail company wants to build a recommendation system for the company’s website.The system needs to provide recommendations for existing users and needs to base those recommendations on each user’s past browsing history.The system also must filter out any items that the user previously purchased.Which solution will meet these requirements with the LEAST development effort?Read More →
A large company has multiple AWS accounts that are assigned to each department.A SysOps administrator needs to help the company reduce overhead and manage its AWS resources more easily.The SysOps administrator also must ensure that department users, including AWS account root users, have access only to AWS services that are essential for their job function.Which solution will meet these requirements?Read More →
A company needs to develop a proof of concept for a web service application.The application will show the weather forecast for one of the company’s office locations.The application will provide a REST endpoint that clients can call.Where possible, the application should use caching features provided by AWS to limit the number of requests to the backend service.The application backend will receive a small amount of traffic only during testing.Which approach should the developer take to provide the REST endpoint MOST cost-effectively?Read More →
An application is currently secured using network access control lists and security groups.Web servers are located in public subnets behind an Application LoadBalancer (ALB); application servers are located in private subnets.How can edge security be enhanced to safeguard the Amazon EC2 instances against attack? (Choose two.)Read More →
© 2025. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.