A company runs a cron job on an Amazon EC2 instance on a predefined schedule.The cron job calls a bash script that encrypts a 2 KB file.A security engineer creates an AWS Key Management Service (AWS KMS) CMK with a key policy.The key policy and the EC2 instance role have the necessary configuration for this job.Which process should the bash script use to encrypt the file?Read More →
A company is developing a new service that will be accessed using TCP on a static port.A solutions architect must ensure that the service is highly available, has redundancy across Availability Zones, and is accessible using the DNS name my.service.com, which is publicly accessible.The service must use fixed address assignments so other companies can add the addresses to their allow lists.Assuming that resources are deployed in multiple Availability Zones in a single Region, which solution will meet these requirements?Read More →
A company’s SysOps administrator must ensure that all Amazon EC2 Windows instances that are launched in an AWS account have a third-party agent installed.The third-party agent has an .msi package.The company uses AWS Systems Manager for patching, and the Windows instances are tagged appropriately.The third-party agent requires periodic updates as new versions are released.The SysOps administrator must deploy these updates automatically.Which combination of steps will meet these requirements with the LEAST operational effort? (Choose two.)Read More →
A company is running Amazon RDS for MySQL for its workloads.There is downtime when AWS operating system patches are applied during the Amazon RDS- specified maintenance window.What is the MOST cost-effective action that should be taken to avoid downtime?Read More →
A company has copied 1 PB of data from a colocation facility to an Amazon S3 bucket in the us-east-1 Region using an AWS Direct Connect link.The company now wants to copy the data to another S3 bucket in the us-west-2 Region.The colocation facility does not allow the use of AWS Snowball.What should a solutions architect recommend to accomplish this?Read More →
A company is planning a marketing campaign to promote a new product to existing customers.The company has data for past promotions that are similar.The company decides to try an experiment to send a more expensive marketing package to a smaller number of customers.The company wants to target the marketing campaign to customers who are most likely to buy the new product.The experiment requires that at least 90% of the customers who are likely to purchase the new product receive the marketing materials.The company trains a model by using the linear learner algorithm in Amazon SageMaker.The model has a recall score of 80% and a precision of 75%.How should the company retrain the model to meet these requirements?Read More →
A user has enabled termination protection on an EC2 instance.The user has also set Instance initiated shutdown behavior to terminate.When the user shuts down the instance from the OS, what will happen?Read More →
A company needs to use HTTPS when connecting to its web applications to meet compliance requirements.These web applications run in Amazon VPC onAmazon EC2 instances behind an Application Load Balancer (ALB).A security engineer wants to ensure that the load balancer will only accept connections over port 443, even if the ALB is mistakenly configured with an HTTP listener.Which configuration steps should the security engineer take to accomplish this task?Read More →
A company has migrated a legacy application to the AWS Cloud.The application runs on three Amazon EC2 instances that are spread across three Availability Zones.One EC2 instance is in each Availability Zone.The EC2 instances are running in three private subnets of the VPC and are set up as targets for an Application Load Balancer (ALB) that is associated with three public subnets.The application needs to communicate with on-premises systems.Only traffic from IP addresses in the company’s IP address range are allowed to access the on-premises systems.The company’s security team is bringing only one IP address from its internal IP address range to the cloud.The company has added this IP address to the allow list for the company firewall.The company also has created an Elastic IP address for this IP address.A solutions architect needs to create a solution that gives the application the ability to communicate with the on-premises systems.The solution also must be able to mitigate failures automatically.Which solution will meet these requirements?Read More →
A company is using Amazon Elastic Container Service (Amazon ECS) to run a containerized application on Amazon EC2 instances.A SysOps administrator needs to monitor only traffic flows between the ECS tasks.Which combination of steps should the SysOps administrator take to meet this requirement? (Choose two.)Read More →
© 2025. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.