Which combination of steps should the company take to ensure that the EC2 instances will receive traffic only from CloudFront?

2026-04-02
By:
In: SCS-C01
With: 2 Comments

A company’s public Application Load Balancer (ALB) recently experienced a DDoS attack.To mitigate this issue.the company deployed Amazon CloudFront in front of the ALB so that users would not directly access the Amazon EC2 instances behind the ALB.The company discovers that some traffic is still coming directly into the ALB and is still being handled by the EC2 instances.Which combination of steps should the company take to ensure that the EC2 instances will receive traffic only from CloudFront? (Choose two.)Read More →

How should a solutions architect improve the CI/CD pipeline to reduce the likelihood that changes in the templates will cause downtime?

2026-04-02
By:
In: SAP-C02
With: 2 Comments

A company is using AWS CodePipeline for the CI/CD of an application to an Amazon EC2 Auto Scaling group.All AWS resources are defined in AWS CloudFormation templates.The application artifacts are stored in an Amazon S3 bucket and deployed to the Auto Scaling group using instance user data scripts.As the application has become more complex, recent resource changes in the CloudFormation templates have caused unplanned downtime.How should a solutions architect improve the CI/CD pipeline to reduce the likelihood that changes in the templates will cause downtime?Read More →

Which approach will address all of these requirements with the LEAST development effort?

2026-04-02
By:
In: MLS-C01
With: 2 Comments

A company is building a new version of a recommendation engine.Machine learning (ML) specialists need to keep adding new data from users to improve personalized recommendations.The ML specialists gather data from the users’ interactions on the platform and from sources such as external websites and social media.The pipeline cleans, transforms, enriches, and compresses terabytes of data daily, and this data is stored in Amazon S3.A set of Python scripts was coded to do the job and is stored in a large Amazon EC2 instance.The whole process takes more than 20 hours to finish, with each script taking at least an hour.The company wants to move the scripts out of Amazon EC2 into a more managed solution that will eliminate the need to maintain servers.Which approach will address all of these requirements with the LEAST development effort?Read More →

Which solution will meet these requirements?

2026-04-02
By:
In: SOA-C02
With: 2 Comments

A company runs an application on hundreds of Amazon EC2 instances in three Availability Zones.The application calls a third-party API over the public internet.A SysOps administrator must provide the third party with a list of static IP addresses so that the third party can allow traffic from the application.Which solution will meet these requirements?Read More →