A Security Administrator has a website hosted in Amazon S3.The Administrator has been given the following requirements:✑ Users may access the website by using an Amazon CloudFront distribution.✑ Users may not access the website directly by using an Amazon S3 URL.Which configurations will support these requirements? (Choose two.)Read More →
A company needs to grant a team of developers access to the company’s AWS resources.The company must maintain a high level of security for the resources.The company requires an access control solution that will prevent unauthorized access to the sensitive data.Which solution will meet these requirements?Read More →
A company uses AWS Organizations for a multi-account setup in the AWS Cloud.The company’s finance team has a data processing application that uses AWS Lambda and Amazon DynamoDB.The company’s marketing team wants to access the data that is stored in the DynamoDB table.The DynamoDB table contains confidential data.The marketing team can have access to only specific attributes of data in the DynamoDB table.The finance team and the marketing team have separate AWS accounts.What should a solutions architect do to provide the marketing team with the appropriate access to the DynamoDB table?Read More →
Two containerized microservices are hosted on Amazon EC2 ECS.The first microservice reads an Amazon RDS Aurora database instance, and the second microservice reads an Amazon DynamoDB table.How can each microservice be granted the minimum privileges?Read More →
A company needs to control inbound and outbound traffic for an Amazon EC2 instance.Which AWS service or feature can the company associate with the EC2 instance to meet this requirement?Read More →
A company built a food ordering application that captures user data and stores it for future analysis.The application’s static front end is deployed on an AmazonEC2 instance.The front-end application sends the requests to the backend application running on separate EC2 instance.The backend application then stores the data in Amazon RDS.What should a solutions architect do to decouple the architecture and make it scalable?Read More →
A company hosts an application on multiple Amazon EC2 instances.The application uses Amazon Simple Notification Service (Amazon SNS) to send messages.Which AWS service or feature will give the application permission to access required AWS services?Read More →
A developer has an application that uses WebSocket APIs in Amazon API Gateway.The developer wants to use an API Gateway Lambda authorizer to control access to the application.The developer needs to add credential caching and reduce repeated usage of secret keys and authorization tokens on every request.Which combination of steps should the developer take to meet these requirements? (Choose two.)Read More →
A DevOps engineer is building the infrastructure for an application.The application needs to run on an Amazon Elastic Kubernetes Service (Amazon EKS) cluster that includes Amazon EC2 instances.The EC2 instances need to use an Amazon Elastic File System (Amazon EFS) file system as a storage backend.The Amazon EFS Container Storage Interface (CSI) driver is installed on the EKS cluster.When the DevOps engineer starts the application, the EC2 instances do not mount the EFS file system.Which solutions will fix the problem? (Choose three.)Read More →
A SysOps administrator needs to automate the invocation of an AWS Lambda function.The Lambda function must run at the end of each day to generate a report on data that is stored in an Amazon S3 bucket.What is the MOST operationally efficient solution that meets these requirements?Read More →
© 2026. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.