How should the Database Specialist satisfy this new requirement?

2025-10-01
By:
In: DBS-C01
With: 1 Comment

A Database Specialist migrated an existing production MySQL database from on-premises to an Amazon RDS for MySQL DB instance.However, after the migration, the database needed to be encrypted at rest using AWS KMS.Due to the size of the database, reloading, the data into an encrypted database would be too time-consuming, so it is not an option.How should the Database Specialist satisfy this new requirement?Read More →

What should a solutions architect recommend?

2025-10-01
By:
In: SAA-C02
With: 1 Comment

A company operates an ecommerce website on Amazon EC2 instances behind an Application Load Balancer (ALB) in an Auto Scaling group.The site is experiencing performance issues related to a high request rate from illegitimate external systems with changing IP addresses.The security team is worried about potential DDoS attacks against the website.The company must block the illegitimate incoming requests in a way that has a minimal impact on legitimate users.What should a solutions architect recommend?Read More →

What should be done to reduce the impact of having such a large number of features?

2025-10-01
By:
In: MLS-C01
With: 1 Comment

A Machine Learning Specialist is building a prediction model for a large number of features using linear models, such as linear regression and logistic regression.During exploratory data analysis, the Specialist observes that many features are highly correlated with each other.This may make the model unstable.What should be done to reduce the impact of having such a large number of features?Read More →

Which of the following options will mitigate the threat?

2025-10-01
By:
In: SCS-C01
With: 1 Comment

A threat assessment has identified a risk whereby an internal employee could exfiltrate sensitive data from production host running inside AWS (Account 1).The threat was documented as follows:Threat description: A malicious actor could upload sensitive data from Server X by configuring credentials for an AWS account (Account 2) they control and uploading data to an Amazon S3 bucket within their control.Server X has outbound internet access configured via a proxy server.Legitimate access to S3 is required so that the application can upload encrypted files to anS3 bucket.Server X is currently using an IAM instance role.The proxy server is not able to inspect any of the server communication due to TLS encryption.Which of the following options will mitigate the threat? (Choose two.)Read More →

Which solution will meet these requirements?

2025-10-01
By:
In: SAP-C01
With: 1 Comment

A company deploys a new web application.As part of the setup, the company configures AWS WAF to log to Amazon S3 through Amazon Kinesis Data Firehose.The company develops an Amazon Athena query that runs once daily to return AWS WAF log data from the previous 24 hours.The volume of daily logs is constant.However, over time, the same query is taking more time to run.A solutions architect needs to design a solution to prevent the query time from continuing to increase.The solution must minimize operational overhead.Which solution will meet these requirements?Read More →

Which solution will meet these requirements?

2025-10-01
By:
In: DOP-C01
With: 1 Comment

A company deploys updates to its Amazon API Gateway API several times a week by using an AWS CodePipeline pipeline.As part of the update process, the company exports the JavaScript SDK for the API from the API Gateway console and uploads the SDK to an Amazon S3 bucket.The company has configured an Amazon CloudFront distribution that uses the S3 bucket as an origin.Web clients then download the SDK by using the CloudFront distribution’s endpoint.A DevOps engineer needs to implement a solution to make the new SDK available automatically during new API deployments.Which solution will meet these requirements?Read More →

Which combination of actions should the Database Specialist take?

2025-10-01
By:
In: DBS-C01
With: 1 Comment

A company’s Security department established new requirements that state internal users must connect to an existing Amazon RDS for SQL Server DB instance using their corporate Active Directory (AD) credentials.A Database Specialist must make the modifications needed to fulfill this requirement.Which combination of actions should the Database Specialist take? (Choose three.)Read More →