A company is moving to the AWS Cloud to reduce operational overhead for its application infrastructure.Which IT operation will the company still be responsible for after the migration to AWS?Read More →
A company has global users accessing an application deployed in different AWS Regions, exposing public static IP addresses.The users are experiencing poor performance when accessing the application over the internet.What should a solutions architect recommend to reduce internet latency?Read More →
A user wants to review all Amazon S3 buckets with ACLs and S3 bucket policies in the S3 console.Which AWS service or resource will meet this requirement?Read More →
A company has an application that is hosted on Amazon EC2 instances.The application stores objects in an Amazon S3 bucket and allows users to download objects from the S3 bucket.A developer turns on S3 Block Public Access for the S3 bucket.After this change, users report errors when they attempt to download objects.The developer needs to implement a solution so that only users who are signed in to the application can access objects in the S3 bucket.Which combination of steps will meet these requirements in the MOST secure way? (Choose two.)Read More →
A company has a data ingestion application that runs across multiple AWS accounts.The accounts are in an organization in AWS Organizations.The company needs to monitor the application and consolidate access to the application.Currently, the company is running the application on Amazon EC2 instances from several Auto Scaling groups.The EC2 instances have no access to the internet because the data is sensitive.Engineers have deployed the necessary VPC endpoints.The EC2 instances run a custom AMI that is built specifically for the application.To maintain and troubleshoot the application, system administrators need the ability to log in to the EC2 instances.This access must be automated and controlled centrally.The company’s security team must receive a notification whenever the instances are accessed.Which solution will meet these requirements?Read More →
A company uses Amazon CloudFront to serve static content to end users.The company’s marketing team recently deployed updates to 150 images on the company’s website.However, the website is not displaying some of the new images.A SysOps administrator reviews the CloudFront distribution’s cache settings.The default TTL for the distribution is set to 1 week (604,800 seconds).What should the SysOps administrator do to refresh the cache with the new images in the MOST operationally efficient way?Read More →
A user has enabled detailed CloudWatch monitoring with the AWS Simple Notification Service.Which of the below mentioned statements helps the user understand detailed monitoring better?Read More →
A company has an AWS WAF web ACL.According to a new compliance requirement, the company must configure comprehensive logging of all web ACL requests.The company has created an Amazon S3 bucket to store the logs.Which combination of steps should the company take next to meet this requirement? (Choose two.)Read More →
A company has a web application that runs on premises.The application experiences latency issues during peak hours.The latency issues occur twice each month.At the start of a latency issue, the application’s CPU utilization immediately increases to 10 times its normal amount.The company wants to migrate the application to AWS to improve latency.The company also wants to scale the application automatically when application demand increases.The company will use AWS Elastic Beanstalk for application deployment.Which solution will meet these requirements?Read More →
A solutions architect has an operational workload deployed on Amazon EC2 instances in an Auto Scaling group.The VPC architecture spans two Availability Zones (AZ) with a subnet in each that the Auto Scaling group is targeting.The VPC is connected to an on-premises environment and connectivity cannot be interrupted.The maximum size of the Auto Scaling group is 20 instances in service.The VPC IPv4 addressing is as follows:VPC CIDR: 10.0.0.0/23 -AZ1 subnet CIDR: 10.0.0.0/24 -AZ2 subnet CIDR: 10.0.1.0/24 -Since deployment, a third AZ has become available in the Region.The solutions architect wants to adopt the new AZ without adding additional IPv4 address space and without service downtime.Which solution will meet these requirements?Read More →
© 2026. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.