A Machine Learning Specialist at a company sensitive to security is preparing a dataset for model training.The dataset is stored in Amazon S3 and containsPersonally Identifiable Information (PII).The dataset:✑ Must be accessible from a VPC only.✑ Must not traverse the public internet.How can these requirements be satisfied?Read More →
A company has two VPCs that are located in the us-west-2 Region within the same AWS account.The company needs to allow network traffic between theseVPCs.Approximately 500 GB of data transfer will occur between the VPCs each month.What is the MOST cost-effective solution to connect these VPCs?Read More →
A company uses an Amazon Redshift cluster to support its business intelligence (BI) team.The cluster has a maintenance window that overlaps with some business report jobs that run long-running queries on the cluster.During a recent maintenance window, the cluster went offline and restarted for an update.The BI team wants to know which queries were terminated during the maintenance window.What should a database specialist do to obtain this information?Read More →
A company has a social media application that receives large amounts of traffic.User posts and interactions are continuously updated in an Amazon RDS database.The data changes frequently, and the data types can be complex.The application must serve read requests with minimal latency.The application’s current architecture struggles to deliver these rapid data updates efficiently.The company needs a solution to improve the application’s performance.Which solution will meet these requirements?Read More →
A company requires an RPO of 2 hours and an RTO of 10 minutes for its data and application at all times.An application uses a MySQL database and AmazonEC2 web servers.The development team needs a strategy for failover and disaster recovery.Which combination of deployment strategies will meet these requirements? (Choose two.)Read More →
A company uses Amazon EC2 as its primary compute platform.A DevOps team wants to audit the company’s EC2 instances to check whether any prohibited applications have been installed on the EC2 instances.Which solution will meet these requirements with the MOST operational efficiency?Read More →
A company’s SysOps administrator deploys four new Amazon EC2 instances by using the standard Amazon Linux 2 Amazon Machine Image (AMI).The company needs to be able to use AWS Systems Manager to manage the instances.The SysOps administrator notices that the instances do not appear in the Systems Manager console.What must the SysOps administrator do to resolve this issue?Read More →
To serve Web traffic for a popular product your chief financial officer and IT director have purchased 10 m1.large heavy utilization Reserved Instances (RIs), evenly spread across two availability zones; Route 53 is used to deliver the traffic to an Elastic Load Balancer (ELB).After several months, the product grows even more popular and you need additional capacity.As a result, your company purchases two C3.2xlarge medium utilization Ris.You register the two c3.2xlarge instances with your ELB and quickly find that the m1.large instances are at 100% of capacity and the c3.2xlarge instances have significant capacity that’s unused.Which option is the most cost effective and uses EC2 capacity most effectively?Read More →
A company’s web application is hosted on Amazon EC2 instances running behind an Application Load Balancer (ALB) in an Auto Scaling group.An AWS WAF web ACL is associated with the ALB.AWS CloudTrail is enabled, and stores logs in Amazon S3 and Amazon CloudWatch Logs.The Operations team has observed some EC2 instances reboot at random.After rebooting, all access logs on the instances have been deleted.During an investigation, the Operations team found that each reboot happened just after a PHP error occurred on the new-user-creation.php file.The Operations team needs to view log information to determine if the company is being attacked.Which set of actions will identify the suspect attacker’s IP address for future occurrences?Read More →
A company has applications hosted on Amazon EC2 instances with IPv6 addresses.The applications must initiate communications with other external applications using the internet.However the company’s security policy states that any external service cannot initiate a connection to the EC2 instances.What should a solutions architect recommend to resolve this issue?Read More →
© 2026. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.