A company is about to launch a new product, and test databases must be re-created from production data.The company runs its production databases on anAmazon Aurora MySQL DB cluster.A Database Specialist needs to deploy a solution to create these test databases as quickly as possible with the least amount of administrative effort.What should the Database Specialist do to meet these requirements?Read More →
A company has developed a serverless web application that is hosted on AWS.The application consists of Amazon S3.Amazon API Gateway, several AWS Lambda functions, and an Amazon RDS for MySQL database.The company is using AWS CodeCommit to store the source code.The source code is a combination of AWS Serverless Application Model (AWS SAM) templates and Python code.A security audit and penetration test reveal that user names and passwords for authentication to the database are hardcoded within CodeCommit repositories.A DevOps engineer must implement a solution to automatically detect and prevent hardcoded secrets.What is the MOST secure solution that meets these requirements?Read More →
A company observes that a newly created Amazon CloudWatch alarm is not transitioning out of the INSUFFICIENT_DATA state.The alarm was created to track the mem_used_percent metric from an Amazon EC2 instance that is deployed in a public subnet.A review of the EC2 instance shows that the unified CloudWatch agent is installed and is running.However, the metric is not available in CloudWatch.A SysOps administrator needs to implement a solution to resolve this problem.Which solution will meet these requirements?Read More →
A company has automated the nightly retraining of its machine learning models by using AWS Step Functions.The workflow consists of multiple steps that useAWS Lambda.Each step can fail for various reasons, and any failure causes a failure of the overall workflow.A review reveals that the retraining has failed multiple nights in a row without the company noticing the failure.A solutions architect needs to improve the workflow so that notifications are sent for all types of failures in the retraining process.Which combination of steps should the solutions architect take to meet these requirements? (Choose three.)Read More →
The Security team believes that a former employee may have gained unauthorized access to AWS resources sometime in the past 3 months by using an identified access key.What approach would enable the Security team to find out what the former employee may have done within AWS?Read More →
A developer wants to process personally identifiable information by using a public HTTP API that is hosted on Amazon EC2.The developer also wants to protect the data as securely as possible in transit.Which combination of steps will meet these requirements? (Choose two.)Read More →
Your organization’s security policy requires that all privileged users either use frequently rotated passwords or one-time access credentials in addition to username/password.Which two of the following options would allow an organization to enforce this policy for AWS users? (Choose two.)Read More →
A company is building a pipeline that periodically retrains its machine learning (ML) models by using new streaming data from devices.The company’s data engineering team wants to build a data ingestion system that has high throughput, durable storage, and scalability.The company can tolerate up to 5 minutes of latency for data ingestion.The company needs a solution that can apply basic data transformation during the ingestion process.Which solution will meet these requirements with the MOST operational efficiency?Read More →
A company is running a web-based game in two Availability Zones in the us-west-2 Region.The web servers use an Application Load Balancer (ALB) in public subnets.The ALB has an SSL certificate from AWS Certificate Manager (ACM) with a custom domain name.The game is written in JavaScript and runs entirely in a user’s web browser.The game is increasing in popularity in many countries around the world.The company wants to update the application architecture and optimize costs without compromising performance.What should a solutions architect do to meet these requirements?Read More →
A media company is using Amazon RDS for PostgreSQL to store user data.The RDS DB instance currently has a publicly accessible setting enabled and is hosted in a public subnet.Following a recent AWS Well-Architected Framework review, a Database Specialist was given new security requirements.✑ Only certain on-premises corporate network IPs should connect to the DB instance.✑ Connectivity is allowed from the corporate network only.Which combination of steps does the Database Specialist need to take to meet these new requirements? (Choose three.)Read More →
© 2026. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.