Which process will have minimal impact on your application while complying with this requirement?

2025-09-30
By:
In: SOA-C01
With: 1 Comment

An application you maintain consists of multiple EC2 instances in a default tenancy VPC.This application has undergone an internal audit and has been determined to require dedicated hardware for one instance.Your compliance team has given you a week to move this instance to single-tenant hardware.Which process will have minimal impact on your application while complying with this requirement?Read More →

How can the security engineer meet these requirements?

2025-09-30
By:
In: SCS-C01
With: 1 Comment

A company is running an Amazon RDS Multi-AZ DB instance inside a VPC.The DB instance is using two subnets that provide a default route to the internet through a NAT gateway.The company also has application servers that run on Amazon EC2 instances that use the RDS database.The company has deployed these EC2 instances into two other private subnets within the same VPC.These EC2 instances use a default route to access the internet through the same NAT gateway.Each subnet in the VPC uses its own unique route table.After a recent security audit, the company added a new security requirement.The DB instance must never be able to connect to the internet.A security engineer must make this change immediately without disrupting the application servers’ network traffic.How can the security engineer meet these requirements?Read More →

Which resources specified in the CloudFormation template will meet the security engineer’s requirements with the LEAST amount of operational overhead?

2025-09-30
By:
In: SAP-C01
With: 1 Comment

A security engineer determined that an existing application retrieves credentials to an Amazon RDS for MySQL database from an encrypted file in Amazon S3.For the next version of the application, the security engineer wants to implement the following application design changes to improve security:✑ The database must use strong, randomly generated passwords stored in a secure AWS managed service.✑ The application resources must be deployed through AWS CloudFormation.✑ The application must rotate credentials for the database every 90 days.A solutions architect will generate a CloudFormation template to deploy the application.Which resources specified in the CloudFormation template will meet the security engineer’s requirements with the LEAST amount of operational overhead?Read More →

Which solution meets these requirements?

2025-09-30
By:
In: DBS-C01
With: 1 Comment

A company is using Amazon Aurora with Aurora Replicas.A database specialist needs to split up two read-only applications so that each application connects to a different set of DB instances.The database specialist wants to implement load balancing and high availability for the read-only applications.Which solution meets these requirements?Read More →

Which algorithms are best suited to this scenario?

2025-09-30
By:
In: MLS-C01
With: 1 Comment

A pharmaceutical company performs periodic audits of clinical trial sites to quickly resolve critical findings.The company stores audit documents in text format.Auditors have requested help from a data science team to quickly analyze the documents.The auditors need to discover the 10 main topics within the documents to prioritize and distribute the review work among the auditing team members.Documents that describe adverse events must receive the highest priority.A data scientist will use statistical modeling to discover abstract topics and to provide a list of the top words for each category to help the auditors assess the relevance of the topic.Which algorithms are best suited to this scenario? (Choose two.)Read More →

Which of the following actions could fix this issue?

2025-09-30
By:
In: SCS-C01
With: 1 Comment

A Security Engineer is troubleshooting a connectivity issue between a web server that is writing log files to the logging server in another VPC.The Engineer has confirmed that a peering relationship exists between the two VPCs.VPC flow logs show that requests sent from the web server are accepted by the logging server, but the web server never receives a reply.Which of the following actions could fix this issue?Read More →

Which solution meets these requirements MOST cost-effectively?

2025-09-30
By:
In: SAP-C01
With: 1 Comment

A data analytics company has an Amazon Redshift cluster that consists of several reserved nodes.The cluster is experiencing unexpected bursts of usage because a team of employees is compiling a deep audit analysis report.The queries to generate the report are complex read queries and are CPU intensive.Business requirements dictate that the cluster must be able to service read and write queries at all times.A solutions architect must devise a solution that accommodates the bursts of usage.Which solution meets these requirements MOST cost-effectively?Read More →