Tip 2 Cloud – Page 293 – Free study guides, practices test, sample questions

What is the MOST secure solution that meets these requirements?

A company has developed a serverless web application that is hosted on AWS.The application consists of Amazon S3.Amazon API Gateway, several AWS Lambda functions, and an Amazon RDS for MySQL database.The company is using AWS CodeCommit to store the source code.The source code is a combination of AWS Serverless Application Model (AWS SAM) templates and Python code.A security audit and penetration test reveal that user names and passwords for authentication to the database are hardcoded within CodeCommit repositories.A DevOps engineer must implement a solution to automatically detect and prevent hardcoded secrets.What is the MOST secure solution that meets these requirements?Read More →

What should a SysOps administrator recommend to fix this issue?

By: study aws cloud

In: SOA-C02

With: 2 Comments

A company hosts a static website on Amazon S3.An Amazon CloudFront distribution presents this site to global users.The company uses the Managed-CachingDisabled CloudFront cache policy.The company’s developers confirm that they frequently update a file in Amazon S3 with new information.Users report that the website presents correct information when the website first loads the file.However, the users’ browsers do not retrieve the updated file after a refresh.What should a SysOps administrator recommend to fix this issue?Read More →

Which approach should a solutions architect take to migrate this solution to AWS?

By: study aws cloud

In: SAP-C01

With: 2 Comments

A company currently has data hosted in an IBM Db2 database.A web application calls an API that runs stored procedures on the database to retrieve user information data that is read-only.This data is historical in nature and changes on a daily basis.When a user logs in to the application, this data needs to be retrieved within 3 seconds.Each time a user logs in, the stored procedures run.Users log in several times a day to check stock prices.Running this database has become cost-prohibitive due to Db2 CPU licensing.Performance goals are not being met.Timeouts from Db2 are common due to long-running queries.Which approach should a solutions architect take to migrate this solution to AWS?Read More →

Which configuration will ensure continued connectivity between sites MOST securely?

By: study aws cloud

In: SCS-C01

With: 2 Comments

An organization is moving non-business-critical applications to AWS while maintaining a mission-critical application in an on-premises data center.An on-premises application must share limited confidential information with the applications in AWS.The internet performance is unpredictable.Which configuration will ensure continued connectivity between sites MOST securely?Read More →

Which solution will meet these requirements?

By: study aws cloud

In: SAA-C03

With: 2 Comments

An ecommerce company runs several internal applications in multiple AWS accounts.The company uses AWS Organizations to manage its AWS accounts.A security appliance in the company’s networking account must inspect interactions between applications across AWS accounts.Which solution will meet these requirements?Read More →

Which combination of changes will produce multi-Region deployment that meets these requirements?

By: study aws cloud

In: SAP-C02

With: 2 Comments

A company runs a serverless application in a single AWS Region.The application accesses external URLs and extracts metadata from those sites.The company uses an Amazon Simple Notification Service (Amazon SNS) topic to publish URLs to an Amazon Simple Queue Service (Amazon SQS) queue.An AWS Lambda function uses the queue as an event source and processes the URLs from the queue.Results are saved to an Amazon S3 bucket.The company wants to process each URL in other Regions to compare possible differences in site localization.URLs must be published from the existing Region.Results must be written to the existing S3 bucket in the current Region.Which combination of changes will produce multi-Region deployment that meets these requirements? (Choose two.)Read More →

Which design of the DynamoDB table primary key will have the MINIMUM performance impact?

By: study aws cloud

In: DVA-C01

With: 2 Comments

A company that has multiple offices uses an Amazon DynamoDB table to store employee payroll information. Item attributes consist of employee names, office identifiers, and cumulative daily hours worked The most frequently used query extracts a report of an alphabetical subset of employees for a specific office.Which design of the DynamoDB table primary key will have the MINIMUM performance impact?Read More →

Which AWS service or tool lists all the users in an account and reports on the status of account details, including passwords, access keys, and multi-factor authentication (MFA) devices?

By: study aws cloud

In: CLF-C01

With: 2 Comments

Which AWS service or tool lists all the users in an account and reports on the status of account details, including passwords, access keys, and multi-factor authentication (MFA) devices?Read More →

______ in VPC are stateful where return traffic is automatically allowed, regardless of any rules?

By: study aws cloud

In: SOA-C01

With: 2 Comments

______ in VPC are stateful where return traffic is automatically allowed, regardless of any rules.Read More →

How should the ML Specialist define the Amazon SageMaker notebook instance so it can read the same dataset from Amazon S3?

By: study aws cloud

In: MLS-C01

With: 2 Comments

A Machine Learning Specialist uploads a dataset to an Amazon S3 bucket protected with server-side encryption using AWS KMS.How should the ML Specialist define the Amazon SageMaker notebook instance so it can read the same dataset from Amazon S3?Read More →