A company uses AWS Organizations to manage multiple accounts.Information security policies require that all unencrypted Amazon EBS volumes be marked as non-compliant.A DevOps engineer needs to automatically deploy the solution and ensure that this compliance check is always present.With solution will accomplish this?Read More →
A DevOps engineer has created an AWS CloudFormation template that deploys an application on Amazon EC2 instances.The EC2 instances run Amazon Linux.The application is deployed to the EC2 instances by using shell scripts that contain user data.The EC2 instances have an IAM instance profile that has an IAM role with the AmazonSSMManagedinstanceCore managed policy attached.The DevOps engineer has modified the user data in the CloudFormation template to install a new version of the application.The engineer has also applied the stack update.However, the application was not updated on the running EC2 instances.The engineer needs to ensure that the changes to the application are installed on the running EC2 instances.Which combination of steps will meet these requirements? (Choose two.)Read More →
ASysOps administrator configures an application to run on Amazon EC2 instances behind an Application Load Balancer (ALB) in a simple scaling Auto Scaling group with the default settings.The Auto Scaling group is configured to use the RequestCountPerTarget metric for scaling.The SysOps administrator notices that the RequestCountPerTarget metric exceeded the specified limit twice in 180 seconds.How will the number of EC2 instances in this Auto Scaling group be affected in this scenario?Read More →
A Development team is deploying new APIs as serverless applications within a company.The team is currently using the AWS Management Console to provisionAmazon API Gateway, AWS Lambda, and Amazon DynamoDB resources.A Solutions Architect has been tasked with automating the future deployments of these serverless APIs.How can this be accomplished?Read More →
A company has a PHP-based web application that uses Amazon S3 as an object store for user files.The S3 bucket that stores the files is configured for server- side encryption with S3 managed encryption keys (SSE-S3).According to new security requirements, the company must control all encryption keys.Additionally, all objects in the S3 bucket must be encrypted by a key that the company controls.Which combination of steps must a security engineer take to meet these requirements? (Choose three.)Read More →
A company has a business-critical application that runs on Amazon EC2 instances.The application stores data in an Amazon DynamoDB table.The company must be able to revert the table to any point within the last 24 hours.Which solution meets these requirements with the LEAST operational overhead?Read More →
A company is planning to migrate its on-premises VMware cluster of 120 VMs to AWS.The VMs have many different operating systems and many custom software packages installed.The company also has an on-premises NFS server that is 10 TB in size.The company has set up a 10 Gbps AWS Direct Connect connection to AWS for the migration.Which solution will complete the migration to AWS in the LEAST amount of time?Read More →
A Development team is working on a case management solution that allows medical claims to be processed and reviewed.Users log in to provide information related to their medical and financial situations.As part of the application, sensitive documents such as medical records, medical imaging, bank statements, and receipts are uploaded to Amazon S3.All documents must be securely transmitted and stored.All access to the documents must be recorded for auditing.What is the MOST secure approach?Read More →
A company wants to run Amazon EC2 instances in locations that are near the company’s global users.Which aspect of the AWS environment will support this requirement?Read More →
A company is concerned about its ability to recover from a disaster because all of its Amazon EC2 instances are located in a single Amazon VPC in us-east-1.A second Amazon VPC has been configured in eu-west-1 to act as a backup VPC in case of an outage.Data will be replicated from the primary region to the secondary region.The Information Security team’s compliance requirements specify that all data must be encrypted and must not traverse the public internet.How should the SysOps Administrator connect the two VPCs while meeting the compliance requirements?Read More →
© 2026. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.