An application stores financial statements in an Amazon S3 bucket.A recent security audit found that the bucket does not comply with company standards.Currently, several IAM policies allow encrypted calls and unencrypted calls to the bucket.The company needs to create a bucket policy that forces all requests to the bucket to use encrypted connections.Which solution will meet this requirement?Read More →
A company has an application that is hosted on two Amazon EC2 instances in different Availability Zones.Both instances contain data that is critical for the company’s business.Backups need to be retained for 7 days and need to be updated every 12 hours.Which solution will meet these requirements with the LEAST amount of effort?Read More →
An ecommerce company wants to train a large image classification model with 10,000 classes.The company runs multiple model training iterations and needs to minimize operational overhead and cost.The company also needs to avoid loss of work and model retraining.Which solution will meet these requirements?Read More →
A manufacturing company has machine sensors that upload .csv files to an Amazon S3 bucket.These .csv files must be converted into images and must be made available as soon as possible for the automatic generation of graphical reports.The images become irrelevant after 1 month, but the .csv files must be kept to train machine learning (ML) models twice a year.The ML trainings and audits are planned weeks in advance.Which combination of steps will meet these requirements MOST cost-effectively? (Choose two.)Read More →
A company uses Amazon DynamoDB as a data store for multi-tenant data.Approximately 70% of the reads by the company’s application are strongly consistent.The current key schema for the DynamoDB table is as follows:Partition key: OrgID -Sort key: TenantID#Version -Due to a change in design and access patterns, the company needs to support strongly consistent lookups based on the new schema below:Partition key: OrgID#TenantID -Sort key: Version -How can the database specialist implement this change?Read More →
A company’s application development team uses Linux-based Amazon EC2 instances as bastion hosts.Inbound SSH access to the bastion hosts is restricted to specific IP addresses, as defined in the associated security groups.The company’s security team wants to receive a notification if the security group rules are modified to allow SSH access from any IP address.What should a DevOps engineer do to meet this requirement?Read More →
A company has a cluster of Linux Amazon EC2 Spot Instances that read many files from and write many files to attached Amazon Elastic Block Store (Amazon EBS) volumes.The EC2 instances are frequently started and stopped.As part of the process when an EC2 instance starts, an EBS volume is restored from a snapshot.EBS volumes that are restored from snapshots are experiencing initial performance that is lower than expected.The company’s workload needs almost all the provisioned IOPS on the attached EBS volumes.The EC2 instances are unable to support the workload when the performance of the EBS volumes is too low.A SysOps administrator must implement a solution to ensure that the EBS volumes provide the expected performance when they are restored from snapshots.Which solution will meet these requirements?Read More →
An IoT company has rolled out a fleet of sensors for monitoring temperatures in remote locations.Each device connects to AWS IoT Core and sends a message30 seconds, updating an Amazon DynamoDB table.A System Administrator users AWS IoT to verify the devices are still sending messages to AWS IoT Core: the database is not updating.What should a Solutions Architect check to determine why the database is not being updated?Read More →
A company’s Security Engineer has been tasked with restricting a contractor’s IAM account access to the company’s Amazon EC2 console without providing access to any other AWS services.The contractor’s IAM account must not be able to gain access to any other AWS service, even if the IAM account is assigned additional permissions based on IAM group membership.What should the Security Engineer do to meet these requirements?Read More →
An application receives authenticated user data in the form of a JSON Web Token (JWT) from an Amazon Cognito user pool.A developer is setting up an Amazon API Gateway API to handle requests from the application and is using the token to verify the user’s identity.Which of the following must the developer validate before the user data can be trusted?Read More →
© 2026. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.