Which combination of actions will allow the company to conduct forensic analysis on the EC2 instance without compromising forensic data?

2026-04-02
By:
In: SCS-C01
With: 2 Comments

A company is attempting to conduct forensic analysis on an Amazon EC2 instance, but the company is unable to connect to the instance by using AWS Systems Manager Session Manager.The company has installed AWS Systems Manager Agent (SSM Agent) on the EC2 instance.The EC2 instance is in a subnet in a VPC that does not have an internet gateway attached.The company has associated a security group with the EC2 instance.The security group does not have inbound or outbound rules.The subnet’s network ACL allows all inbound and outbound traffic.Which combination of actions will allow the company to conduct forensic analysis on the EC2 instance without compromising forensic data? (Choose three.)Read More →

Which solution will help the company migrate the database to AWS MOST cost-effectively?

2026-04-02
By:
In: SAA-C03
With: 2 Comments

A company runs its application on an Oracle database.The company plans to quickly migrate to AWS because of limited resources for the database, backup administration, and data center maintenance.The application uses third-party database features that require privileged access.Which solution will help the company migrate the database to AWS MOST cost-effectively?Read More →

What should the solutions architect do to meet these requirements?

2026-04-02
By:
In: SAP-C02
With: 2 Comments

A company uses AWS CloudFormation to deploy applications within multiple VPCs that are all attached to a transit gateway.Each VPC that sends traffic to the public internet must send the traffic through a shared services VPC.Each subnet within a VPC uses the default VPC route table, and the traffic is routed to the transit gateway.The transit gateway uses its default route table for any VPC attachment.A security audit reveals that an Amazon EC2 instance that is deployed within a VPC can communicate with an EC2 instance that is deployed in any of the company’s other VPCs.A solutions architect needs to limit the traffic between the VPCs.Each VPC must be able to communicate only with a predefined, limited set of authorized VPCs.What should the solutions architect do to meet these requirements?Read More →

Which solution for encryption keys should a developer use to meet these requirements?

2026-04-02
By:
In: DVA-C01
With: 2 Comments

A software company must ensure that documents that are uploaded by users are securely stored in Amazon S3.The documents must be encrypted at rest in Amazon S3.The company wants to avoid client-side encryption and does not want to manage the security infrastructure.In addition, the company wants control over the keys that are used for encryption at rest.Which solution for encryption keys should a developer use to meet these requirements?Read More →

What should the ML specialist do to resolve the violations?

2026-04-02
By:
In: MLS-C01
With: 2 Comments

A machine learning (ML) specialist is administering a production Amazon SageMaker endpoint with model monitoring configured.Amazon SageMaker ModelMonitor detects violations on the SageMaker endpoint, so the ML specialist retrains the model with the latest dataset.This dataset is statistically representative of the current production traffic.The ML specialist notices that even after deploying the new SageMaker model and running the first monitoring job, the SageMaker endpoint still has violations.What should the ML specialist do to resolve the violations?Read More →

Which solution meets these requirements?

2026-04-02
By:
In: SAA-C02
With: 2 Comments

A company is creating a web application that will store a large number of images in Amazon S3.The images will be accessed by users over variable periods of time.The company wants to:✑ Retain all the images✑ Incur no cost for retrieval.✑ Have minimal management overhead.✑ Have the images available with no impact on retrieval time.Which solution meets these requirements?Read More →

What should the database administrator use to set up the encryption to meet these requirements?

2026-04-02
By:
In: DBS-C01
With: 2 Comments

A financial services company uses Amazon RDS for Oracle with Transparent Data Encryption (TDE).The company is required to encrypt its data at rest at all times.The key required to decrypt the data has to be highly available, and access to the key must be limited.As a regulatory requirement, the company must have the ability to rotate the encryption key on demand.The company must be able to make the key unusable if any potential security breaches are spotted.The company also needs to accomplish these tasks with minimum overhead.What should the database administrator use to set up the encryption to meet these requirements?Read More →