A company needs to monitor a growing number of Amazon S3 buckets across two AWS Regions.The company also needs to track the percentage of objects that are encrypted in Amazon S3.The company needs a dashboard to display this information for internal compliance teams.Which solution will meet these requirements with the LEAST operational overhead?Read More →
A company is storing backup files by using Amazon S3 Standard storage.The files are accessed frequently for 1 month.However, the files are not accessed after 1 month.The company must keep the files indefinitely.Which storage solution will meet these requirements MOST cost-effectively?Read More →
A company experienced a breach of highly confidential personal information due to permission issues on an Amazon S3 bucket.The Information Security team has tightened the bucket policy to restrict access.Additionally, to be better prepared for future attacks, these requirements must be met:✑ Identify remote IP addresses that are accessing the bucket objects.✑ Receive alerts when the security policy on the bucket is changed.✑ Remediate the policy changes automatically.Which strategies should the Solutions Architect use?Read More →
A developer needs to migrate an online retail application to AWS to handle an anticipated increase in traffic.The application currently runs on two servers: one server for the web application and another server for the database.The web server renders webpages and manages session state in memory.The database server hosts a MySQL database that contains order details.When traffic to the application is heavy, the memory usage for the web server approaches 100% and the application slows down considerably.The developer has found that most of the memory increase and performance decrease is related to the load of managing additional user sessions.For the web server migration, the developer will use Amazon EC2 instances with an Auto Scaling group behind an Application Load Balancer.Which additional set of changes should the developer make to the application to improve the application’s performance?Read More →
Which AWS service helps users audit API activity across their AWS account?Read More →
A company is using Site-to-Site VPN connections for secure connectivity to its AWS Cloud resources from on premises.Due to an increase in traffic across theVPN connections to the Amazon EC2 instances, users are experiencing slower VPN connectivity.Which solution will improve the VPN throughput?Read More →
A company is preparing for an audit and wants documentation that AWS complies with the Payment Card Industry Data Security Standard (PCI DSS).Where can the company find this documentation?Read More →
A company is deploying a new application on AWS.The application consists of an Amazon Elastic Kubernetes Service (Amazon EKS) cluster and an Amazon Elastic Container Registry (Amazon ECR) repository.The EKS cluster has an AWS managed node group.The company’s security guidelines state that all resources on AWS must be continuously scanned for security vulnerabilities.Which solution will meet this requirement with the LEAST operational overhead?Read More →
A solutions architect is using Amazon S3 to design the storage architecture of a new digital media application.The media files must be resilient to the loss of an Availability Zone.Some files are accessed frequently while other files are rarely accessed in an unpredictable pattern.The solutions architect must minimize the costs of storing and retrieving the media files.Which storage option meets these requirements?Read More →
A company uses Amazon S3 to host a web application.Currently, the company uses a continuous integration tool running on an Amazon EC2 instance that builds and deploys the application by uploading it to an S3 bucket.A Solutions Architect needs to enhance the security of the company’s platform with the following requirements:✑ A build process should be run in a separate account from the account hosting the web application.✑ A build process should have minimal access in the account it operates in.✑ Long-lived credentials should not be used.As a start, the Development team created two AWS accounts: one for the application named web account process; other is a named build account.Which solution should the Solutions Architect use to meet the security requirements?Read More →
© 2026. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.