Which response will immediately mitigate the attack and help investigate the root cause?

2026-04-02
By:
In: SCS-C01
With: 2 Comments

A security engineer receives a notice from the AWS Abuse team about suspicious activity from a Linux-based Amazon EC2 instance that uses Amazon Elastic Block Store (Amazon EBS)-based storage.The instance is making connections to known malicious addresses.The instance is in a development account within a VPC that is in the us-east-1 Region.The VPC contains an internet gateway and has a subnet in us-east-1a and us-east-1 b.Each subnet is associate with a route table that uses the internet gateway as a default route.Each subnet also uses the default network ACL.The suspicious EC2 instance runs within the us-east-1 b subnet.During an initial investigation, a security engineer discovers that the suspicious instance is the only instance that runs in the subnet.Which response will immediately mitigate the attack and help investigate the root cause?Read More →

What should a solutions architect recommend?

2026-04-02
By:
In: SAA-C03
With: 2 Comments

A company is launching a new application deployed on an Amazon Elastic Container Service (Amazon ECS) cluster and is using the Fargate launch type for ECS tasks.The company is monitoring CPU and memory usage because it is expecting high traffic to the application upon its launch.However, the company wants to reduce costs when utilization decreases.What should a solutions architect recommend?Read More →

Which solution will meet these requirements MOST cost-effectively?

2026-04-02
By:
In: SAP-C02
With: 2 Comments

A company ingests and processes streaming market data.The data rate is constant.A nightly process that calculates aggregate statistics takes 4 hours to complete.The statistical analysis is not critical to the business, and data points are processed during the next iteration if a particular run fails.The current architecture uses a pool of Amazon EC2 Reserved Instances with 1-year reservations.These EC2 instances run full time to ingest and store the streaming data in attached Amazon Elastic Block Store (Amazon EBS) volumes.A scheduled script launches EC2 On-Demand Instances each night to perform the nightly processing.The instances access the stored data from NFS shares on the ingestion servers.The script terminates the instances when the processing is complete.The Reserved Instance reservations are expiring.The company needs to determine whether to purchase new reservations or implement a new design.Which solution will meet these requirements MOST cost-effectively?Read More →

Which approach will meet these requirements with the LEAST operational overhead?

2026-04-02
By:
In: MLS-C01
With: 2 Comments

A company wants to predict the classification of documents that are created from an application.New documents are saved to an Amazon S3 bucket every 3 seconds.The company has developed three versions of a machine learning (ML) model within Amazon SageMaker to classify document text.The company wants to deploy these three versions to predict the classification of each document.Which approach will meet these requirements with the LEAST operational overhead?Read More →

What should the solutions architect do to meet these requirements?

2026-04-02
By:
In: SAA-C02
With: 2 Comments

A company is hosting 60 TB of production-level data in an Amazon S3 bucket.A solutions architect needs to bring that data on premises for quarterly audit requirements.This export of data must be encrypted while in transit.The company has low network bandwidth in place between AWS and its on-premises data center.What should the solutions architect do to meet these requirements?Read More →