A company needs to manage multiple logins across AWS accounts within the same organization in AWS Organizations.Which AWS service should the company use to meet this requirement?Read More →
The Security team has decided that there will be no public internet access to HTTP (TCP port 80) because it is moving to HTTPS for all incoming web traffic.The team has asked a SysOps Administrator to provide a report on any security groups that are not compliant.What should the SysOps Administrator do to provide near real-time compliance reporting?Read More →
A manufacturing company produces 100 types of steel rods.The rod types have varying material grades and dimensions.The company has sales data for the steel rods for the past 50 years.A data scientist needs to build a machine learning (ML) model to predict future sales of the steel rods.Which solution will meet this requirement in the MOST operationally efficient way?Read More →
A company has a legacy data processing application that runs on Amazon EC2 instances.Data is processed sequentially, but the order of results does not matter.The application uses a monolithic architecture.The only way that the company can scale the application to meet increased demand is to increase the size of the instances.The company’s developers have decided to rewrite the application to use a microservices architecture on Amazon Elastic Container Service (Amazon ECS).What should a solutions architect recommend for communication between the microservices?Read More →
A company has an on-premises production Microsoft SQL Server with 250 GB of data in one database.A database specialist needs to migrate this on-premisesSQL Server to Amazon RDS for SQL Server.The nightly native SQL Server backup file is approximately 120 GB in size.The application can be down for an extended period of time to complete the migration.Connectivity between the on-premises environment and AWS can be initiated from on-premises only.How can the database be migrated from on-premises to Amazon RDS with the LEAST amount of effort?Read More →
An application that runs on AWS Lambda requires access to specific highly confidential objects in an Amazon S3 bucket.In accordance with the principle of least privilege, a company grants access to the S3 bucket by using only temporary credentials.How can a developer configure access to the S3 bucket in the MOST secure way?Read More →
A DevOps engineer needs to grant several external contractors access to a legacy application that runs on an Amazon Linux Amazon EC2 instance.The application server is available only in a private subnet.The contractors are not authorized for VPN access.What should the DevOps engineer do to grant the contactors access to the application server?Read More →
A company builds an application that uses an Application Load Balancer in front of Amazon EC2 instances that are in an Auto Scaling group.The application is stateless.The Auto Scaling group uses a custom AMI that is fully prebuilt.The EC2 instances do not have a custom bootstrapping process.The AMI that the Auto Scaling group uses was recently deleted.The Auto Scaling group’s scaling activities show failures because the AMI ID does not exist.Which combination of steps should a DevOps engineer take to meet these requirements? (Choose three.)Read More →
An organization created an Amazon Elastic File System (Amazon EFS) volume with a file system ID of fs-85ba41fc, and it is actively used by 10 Amazon EC2 hosts.The organization has become concerned that the file system is not encrypted.How can this be resolved?Read More →
A solutions architect at a large company needs to set up network security for outbound traffic to the internet from all AWS accounts within an organization in AWSOrganizations.The organization has more than 100 AWS accounts, and the accounts route to each other by using a centralized AWS Transit Gateway.Each account has both an internet gateway and a NAT gateway for outbound traffic to the internet.The company deploys resources only into a single AWS Region.The company needs the ability to add centrally managed rule-based filtering on all outbound traffic to the internet for all AWS accounts in the organization.The peak load of outbound traffic will not exceed 25 Gbps in each Availability Zone.Which solution meets these requirements?Read More →
© 2026. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.