Which set of additional steps should the DevOps engineer take to meet these requirements MOST cost-effectively?

2026-03-31
By:
In: DOP-C01
With: 2 Comments

A company has deployed an application in a production VPC in a single AWS account.The application is popular and is experiencing heavy usage.The company’s security team wants to add additional security, such as AWS WAF, to the application deployment.However, the application’s product manager is concerned about cost and does not want to approve the change unless the security team can prove that additional security is necessary.The security team believes that some of the application’s demand might come from users that have IP addresses that are on a deny list.The security team provides the deny list to a DevOps engineer.If any of the IP addresses on the deny list access the application, the security team wants to receive automated notification in near real time so that the security team can document that the application needs additional security.The DevOps engineer creates a VPC flow log for the production VPC.Which set of additional steps should the DevOps engineer take to meet these requirements MOST cost-effectively?Read More →

Which combination of steps must the DevOps team take to implement automated patch and configuration management across the company’s EC2 instances, IoT devices, and on-premises infrastructure?

2026-03-31
By:
In: DOP-C02
With: 2 Comments

A company deploys its corporate infrastructure on AWS across multiple AWS Regions and Availability Zones.The infrastructure is deployed on Amazon EC2 instances and connects with AWS IoT Greengrass devices.The company deploys additional resources on on-premises servers that are located in the corporate headquarters.The company wants to reduce the overhead involved in maintaining and updating its resources.The company’s DevOps team plans to use AWS Systems Manager to implement automated management and application of patches.The DevOps team confirms that Systems Manager is available in the Regions that the resources are deployed in.Systems Manager also is available in a Region near the corporate headquarters.Which combination of steps must the DevOps team take to implement automated patch and configuration management across the company’s EC2 instances, IoT devices, and on-premises infrastructure? (Choose three.)Read More →

Which solution will meet this requirement?

2026-03-31
By:
In: SOA-C02
With: 2 Comments

A company has internal hybrid applications that have resources in the AWS Cloud and on premises.Users report that the applications sometimes are not available.The company has configured an Amazon CloudWatch alarm to monitor the tunnel status of its AWS Site-to-Site VPN connection.A SysOps administrator must implement a solution that creates a high-priority ticket in an internal ticketing tool when the VPN tunnel is down.Which solution will meet this requirement?Read More →

Which solution will meet these requirements?

2026-03-31
By:
In: SAP-C01
With: 2 Comments

A solutions architect has an operational workload deployed on Amazon EC2 instances in an Auto Scaling group.The VPC architecture spans two AvailabilityZones (AZ) with a subnet in each that the Auto Scaling group is targeting.The VPC is connected to an on-premises environment and connectivity cannot be interrupted.The maximum size of the Auto Scaling group is 20 instances in service.The VPC IPv4 addressing is as follows:VPC CIDR: 10.0.0.0/23 -AZ1 subnet CIDR: 10.0.0.0/24 -AZ2 subnet CIDR: 10.0.1.0/24 -Since deployment, a third AZ has become available in the Region.The solutions architect wants to adopt the new AZ without adding additional IPv4 address space and without service downtime.Which solution will meet these requirements?Read More →

How can the security team resolve the noncompliance with the LEAST disruption of application availability for the end users?

2026-03-31
By:
In: SCS-C01
With: 2 Comments

A company released a new software-as-a-service (SaaS) application that is receiving significant adoption by end users.The rds-storage-encrypted AWS Config managed rule generates an alert that notifies the company’s security team about a resource that is not compliant.The noncompliant resource is an Amazon RDS for MySQL database that was deployed as part of the newly released application.How can the security team resolve the noncompliance with the LEAST disruption of application availability for the end users?Read More →

Which solution will meet these requirements?

2026-03-31
By:
In: SAP-C02
With: 2 Comments

A company needs to gather data from an experiment in a remote location that does not have internet connectivity.During the experiment, sensors that are connected to a local network will generate 6 TB of data in a proprietary format over the course of 1 week.The sensors can be configured to upload their data files to an FTP server periodically, but the sensors do not have their own FTP server.The sensors also do not support other protocols.The company needs to collect the data centrally and move the data to object storage in the AWS Cloud as soon as possible after the experiment.Which solution will meet these requirements?Read More →

Which solution will meet these requirements?

2026-03-31
By:
In: DVA-C01
With: 2 Comments

A company is migrating a legacy application to a serverless application on AWS.The legacy application consists of a set of web services that are exposed by an Amazon API Gateway API.A developer needs to replace the existing implementation of web services with AWS Lambda functions.The developer needs to test a new version of the API that uses the functions in production.The developer must minimize the impact of the testing on the application’s users.Which solution will meet these requirements?Read More →