A company is planning to deploy an application on AWS behind an Elastic Load Balancer.The application uses an HTTP/HTTPS listener and must access the client IP addresses.Which load-balancing solution meets these requirements?Read More →
Which AWS service or tool is associated with an Amazon EC2 instance and acts as a virtual firewall to control inbound and outbound traffic?Read More →
A user has created a VPC with CIDR 20.0.0.0/16 with only a private subnet and VPN connection using the VPC wizard.The user wants to connect to the instance in a private subnet over SSH.How should the user define the security rule for SSH?Read More →
A machine learning (ML) engineer uses Bayesian optimization for a hyperpara meter tuning job in Amazon SageMaker.The ML engineer uses precision as the objective metric.The ML engineer wants to use recall as the objective metric.The ML engineer also wants to expand the hyperparameter range for a new hyperparameter tuning job.The new hyperparameter range will include the range of the previously performed tuning job.Which approach will run the new hyperparameter tuning job in the LEAST amount of time?Read More →
A company’s legacy application is currently relying on a single-instance Amazon RDS MySQL database without encryption.Due to new compliance requirements, all existing and new data in this database must be encrypted.How should this be accomplished?Read More →
A gaming company uses Amazon Aurora Serverless for one of its internal applications.The company’s developers use Amazon RDS Data API to work with theAurora Serverless DB cluster.After a recent security review, the company is mandating security enhancements.A database specialist must ensure that access toRDS Data API is private and never passes through the public internet.What should the database specialist do to meet this requirement?Read More →
A company has an application that receives batches of orders from partners every day.The application uses an AWS Lambda function to process the batches.If a batch contains no orders, the Lambda function must publish to an Amazon Simple Notification Service (Amazon SNS) topic as soon as possible.Which combination of steps will meet this requirement with the LEAST implementation effort? (Choose two.)Read More →
A company uses a single AWS account to test applications on Amazon EC2 instances.The company has turned on AWS Config in the AWS account and has activated the restricted-ssh AWS Config managed rule.The company needs an automated monitoring solution that will provide a customized notification in real time if any security group in the account is not compliant with the restricted-ssh rule.The customized notification must contain the name and ID of the noncompliant security group.A DevOps engineer creates an Amazon Simple Notification Service (Amazon SNS) topic in the account and subscribes the appropriate personnel to the topic.What should the DevOps engineer do next to meet these requirements?Read More →
A SysOps administrator is responsible for a company’s security groups.The company wants to maintain a documented trail of any changes that are made to the security groups.The SysOps administrator must receive notification whenever the security groups change.Which solution will meet these requirements?Read More →
A company with global offices has a single 1 Gbps AWS Direct Connect connection to a single AWS Region.The company’s on-premises network uses the connection to communicate with the company’s resources in the AWS Cloud.The connection has a single private virtual interface that connects to a single VPC.A solutions architect must implement a solution that adds a redundant Direct Connect connection in the same Region.The solution also must provide connectivity to other Regions through the same pair of Direct Connect connections as the company expands into other Regions.Which solution meets these requirements?Read More →
© 2026. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.