A developer is creating a template that uses AWS CloudFormation to deploy an application.The application is serverless and uses Amazon API Gateway.Amazon DynamoDB, and AWS Lambda.Which AWS service or tool should the developer use to define serverless resources in YAML?Read More →
A company needs to run some of its workloads on premises to comply with regulatory guidelines.The company wants to use the AWS Cloud to run workloads that are not required to be on premises.The company also wants to be able to use the same API calls for the on-premises workloads and the cloud workloads.Which AWS service or feature should the company use to meet these requirements?Read More →
A company has an application with a REST-based interface that allows data to be received in near-real time from a third-party vendor.Once received, the application processes and stores the data for further analysis.The application is running on Amazon EC2 instances.The third-party vendor has received many 503 Service Unavailable Errors when sending data to the application.When the data volume spikes, the compute capacity reaches its maximum limit and the application is unable to process all requests.Which design should a solutions architect recommend to provide a more scalable solution?Read More →
A company requires that all applications running on Amazon EC2 use IAM roles to gain access to AWS services.A developer is modifying an application that currently relies on IAM user access keys stored in environment variables to access Amazon DynamoDB tables using boto, the AWS SDK for Python.The developer associated a role with the same permissions as the IAM user to the EC2 instance, then deleted the IAM user.When the application was restarted, the AWS AccessDeniedException messages started appearing in the application logs.The developer was able to use their personal account on the server to run DynamoDB API commands using the AWS CLI.What is the MOST likely cause of the exception?Read More →
A company is hosting a static website from an Amazon S3 bucket.The website is available to customers at example.com.The company uses an Amazon Route 53 weighted routing policy with a TTL of 1 day.The company has decided to replace the existing static website with a dynamic web application.The dynamic web application uses an Application Load Balancer (ALB) in front of a fleet of Amazon EC2 instances.On the day of production launch to customers, the company creates an additional Route 53 weighted DNS record entry that points to the ALB with a weight of 255 and a TTL of 1 hour.Two days later, a DevOps engineer notices that the previous static website is displayed sometimes when customers navigate to example.com.How can the DevOps engineer ensure that the company serves only dynamic content for example.com?Read More →
A SysOps administrator notices that the cache hit ratio for an Amazon CloudFront distribution is less than 10%.The SysOps administrator needs to increase the cache hit ratio for the distribution, improve network performance, and reduce the load on the origin.Which combination of actions should the SysOps administrator take to meet these requirements? (Choose two.)Read More →
A company is moving a business-critical, multi-tier application to AWS.The architecture consists of a desktop client application and server infrastructure.The server infrastructure resides in an on-premises data center that frequently fails to maintain the application uptime SLA of 99.95%.A Solutions Architect must re- architect the application to ensure that it can meet or exceed the SLA.The application contains a PostgreSQL database running on a single virtual machine.The business logic and presentation layers are load balanced between multiple virtual machines.Remote users complain about slow load times while using this latency-sensitive application.Which of the following will meet the availability requirements with little change to the application while improving user experience and minimizing costs?Read More →
A company’s policies require that code be validated to ensure that the code has not been altered before invocation.A security engineer needs to update code in an AWS Lambda function.The developer has finalized the code and has stored the code in an Amazon S3 bucket.Which combination of steps should the security engineer take to meet these requirements? (Choose two.)Read More →
A company runs its application by using Amazon EC2 instances and AWS Lambda functions.The EC2 instances run in private subnets of a VPC.The Lambda functions need direct network access to the EC2 instances for the application to work.The application will run for 1 year.The number of Lambda functions that the application uses will increase during the 1-year period.The company must minimize costs on all application resources.Which solution will meet these requirements?Read More →
A company is using an organization in AWS Organizations to manage hundreds of AWS accounts.A solutions architect is working on a solution to provide baseline protection for the Open Web Application Security Project (OWASP) top 10 web application vulnerabilities.The solutions architect is using AWS WAF for all existing and new Amazon CloudFront distributions that are deployed within the organization.Which combination of steps should the solutions architect take to provide the baseline protection? (Choose three.)Read More →
© 2026. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.