What is the MOST effective way to accomplish these requirements?

2026-03-30
By:
In: DOP-C01
With: 2 Comments

A company is creating a software solution that executes a specific parallel-processing mechanism.The software can scale to tens of servers in some special scenarios.This solution uses a proprietary library that is license-based, requiring that each individual server have a single, dedicated license installed.The company has 200 licenses and is planning to run 200 server nodes concurrently at most.The company has requested the following features:✑ A mechanism to automate the use of the licenses at scale.✑ Creation of a dashboard to use in the future to verify which licenses are available at any moment.What is the MOST effective way to accomplish these requirements?Read More →

Which combination of steps will meet these requirements?

2026-03-30
By:
In: DOP-C02
With: 2 Comments

A company has deployed a new platform that runs on Amazon Elastic Kubernetes Service (Amazon EKS).The new platform hosts web applications that users frequently update.The application developers build the Docker images for the applications and deploy the Docker images manually to the platform.The platform usage has increased to more than 500 users every day.Frequent updates, building the updated Docker images for the applications, and deploying the Docker images on the platform manually have all become difficult to manage.The company needs to receive an Amazon Simple Notification Service (Amazon SNS) notification if Docker image scanning returns any HIGH or CRITICAL findings for operating system or programming language package vulnerabilities.Which combination of steps will meet these requirements? (Choose two.)Read More →

Which of the following configurations will support these requirements?

2026-03-30
By:
In: SAP-C01
With: 2 Comments

An AWS customer is deploying an application mat is composed of an AutoScaling group of EC2 Instances.The customers security policy requires that every outbound connection from these instances to any other service within the customers Virtual Private Cloud must be authenticated using a unique x 509 certificate that contains the specific instance-id.In addition, an x 509 certificates must Designed by the customer’s Key management service in order to be trusted for authentication.Which of the following configurations will support these requirements?Read More →

What else should the security engineer check to determine why the request from the EC2 instance is failing?

2026-03-30
By:
In: SCS-C01
With: 2 Comments

A company has configured a gateway VPC endpoint in a VPC.Only Amazon EC2 instances that reside in a single subnet in the VPC can use the endpoint.The company has modified the route table for this single subnet to route traffic to Amazon S3 through the gateway VPC endpoint.The VPC provides internet access through an internet gateway.A security engineer attempts to use instance profile credentials from an EC2 instance to retrieve an object from the S3 bucket, but the attempt fails.The security engineer verifies that the EC2 instance has an IAM instance profile with the correct permissions to access the S3 bucket and to retrieve objects.The security engineer also verifies that the S3 bucket policy is allowing access properly.Additionally, the security engineer verifies that the EC2 instance’s security group and the subnet’s network ACLs allow the communication.What else should the security engineer check to determine why the request from the EC2 instance is failing?Read More →

Which solution will improve the reliability of the application?

2026-03-30
By:
In: SAP-C02
With: 2 Comments

A company has an application that uses an Amazon Aurora PostgreSQL DB cluster for the application’s database.The DB cluster contains one small primary instance and three larger replica instances.The application runs on an AWS Lambda function.The application makes many short-lived connections to the database’s replica instances to perform read-only operations.During periods of high traffic, the application becomes unreliable and the database reports that too many connections are being established.The frequency of high-traffic periods is unpredictable.Which solution will improve the reliability of the application?Read More →