A developer is running an application on an Amazon EC2 instance.When the application tries to read an Amazon S3 bucket, the application fails.The developer notices that the associated IAM role is missing the S3 read permission.The developer needs to give the application the ability to read the S3 bucket.Which solution will meet this requirement with the LEAST application disruption?Read More →
A company recently created a new AWS Control Tower landing zone in a new organization in AWS Organizations.The landing zone must be able to demonstrate compliance with the Center for Internet Security (CIS) Benchmarks for AWS Foundations.The company’s security team wants to use AWS Security Hub to view compliance across all accounts.Only the security team can be allowed to view aggregated Security Hub findings.In addition, specific users must be able to view findings from their own accounts within the organization.All accounts must be enrolled in Security Hub after the accounts are created.Which combination of steps will meet these requirements in the MOST automated way? (Choose three.)Read More →
A SysOps administrator has enabled AWS CloudTrail in an AWS account.If CloudTrail is disabled, it must be re-enabled immediately.What should the SysOps administrator do to meet these requirements WITHOUT writing custom code?Read More →
A company wants to host a global web application on AWS.It has the following design requirements:* The access pattern must allow for fetching data from multiple data sources.* Minimize the cost of API calls.* Keep page load times to within 50 ms.* Provide user authentication and authorization and manage data access for different user personas (for example, administrator, manager, or engineer).* Use a serverless design.Which set of strategies should a solutions architect use?Read More →
A company has multiple departments.Each department has its own AWS account.All these accounts belong to the same organization in AWS Organizations.A large .csv file is stored in an Amazon S3 bucket in the sales department’s AWS account.The company wants to allow users from the other accounts to access the .csv file’s content through the combination of AWS Glue and Amazon Athena.However, the company does not want to allow users from the other accounts to access other files in the same folder.Which solution will meet these requirements?Read More →
A company hosts a multiplayer gaming application on AWS.The company wants the application to read data with sub-millisecond latency and run one-time queries on historical data.Which solution will meet these requirements with the LEAST operational overhead?Read More →
A company is migrating its development and production workloads to a new organization in AWS Organizations.The company has created a separate member account for development and a separate member account for production.Consolidated billing is linked to the management account.In the management account, a solutions architect needs to create an IAM user that can stop or terminate resources in both member accounts.Which solution will meet this requirement?Read More →
A company is creating a continuous integration and continuous delivery (CI/CD) process by using AWS CodePipeline for its application on AWS.The CI/CD process will pull code from an AWS CodeCommit repository, create the application infrastructure by using AWS CloudFormation, deploy the frontend code to an Amazon S3 bucket that is configured for static website hosting, and deploy the application backend on an Amazon Elastic Container Service (Amazon ECS) cluster.A developer needs to create a new CodePipeline stage that creates the application infrastructure.Which solution will meet these requirements with the LEAST operational overhead?Read More →
A company wants to build an application that consists entirely of microservices.Which AWS Cloud architecture design principle supports this goal?Read More →
A company requires that all access from on-premises applications to AWS services go over its AWS Direct Connect connection rather than the public internet.How would a SysOps Administrator implement this requirement?Read More →
© 2026. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.