Which combination of steps should the DevOps engineer take to meet these requirements?

2026-03-24
By:
In: DOP-C02
With: 2 Comments

A company has an application that stores data that includes personally identifiable information (PII) in an Amazon S3 bucket.All data is encrypted with AWS Key Management Service (AWS KMS) customer managed keys.All AWS resources are deployed from an AWS CloudFormation template.A DevOps engineer needs to set up a development environment for the application in a different AWS account.The data in the development environment’s S3 bucket needs to be updated once a week from the production environment’s S3 bucket.The company must not move PII from the production environment without anonymizing the PII first.The data in each environment must be encrypted with different KMS customer managed keys.Which combination of steps should the DevOps engineer take to meet these requirements? (Choose two.)Read More →

What should the SysOps administrator do to resolve the issue?

2026-03-24
By:
In: SOA-C02
With: 2 Comments

A company has a policy that all Amazon EC2 instance logs must be published to Amazon CloudWatch Logs.A SysOps administrator is troubleshooting an EC2 instance that is running Amazon Linux 2.The EC2 instance is not publishing logs to CloudWatch Logs.The Amazon CloudWatch agent is running on the EC2 instance, and the agent configuration file is correct.What should the SysOps administrator do to resolve the issue?Read More →

Which configuration will meet these requirements?

2026-03-24
By:
In: SAP-C01
With: 2 Comments

A company is migrating its data center from on premises to the AWS Cloud.The migration will take several months to complete.The company will use AmazonRoute 53 for private DNS zones.During the migration, the company must keep its AWS services pointed at the VPC’s Route 53 Resolver for DNS.The company also must maintain the ability to resolve addresses from its on-premises DNS server.A solutions architect must set up DNS so that Amazon EC2 instances can use native Route 53 endpoints to resolve on-premises DNS queries.Which configuration will meet these requirements?Read More →

How can the Administrator restrict usage of member root user accounts across the organization?

2026-03-24
By:
In: SCS-C01
With: 2 Comments

A Security Administrator is restricting the capabilities of company root user accounts.The company uses AWS Organizations and has enabled it for all feature sets, including consolidated billing.The top-level account is used for billing and administrative purposes, not for operational AWS resource purposes.How can the Administrator restrict usage of member root user accounts across the organization?Read More →

Which solution will meet these requirements?

2026-03-24
By:
In: SAA-C03
With: 2 Comments

A company uses an Amazon RDS for MySQL instance.To prepare for end-of-year processing, the company added a read replica to accommodate extra read-only queries from the company’s reporting tool.The read replica CPU usage was 60% and the primary instance CPU usage was 60%.After end-of-year activities are complete, the read replica has a constant 25% CPU usage.The primary instance still has a constant 60% CPU usage.The company wants to rightsize the database and still provide enough performance for future growth.Which solution will meet these requirements?Read More →

Which solution will meet these requirements with the LEAST ongoing operational overhead?

2026-03-24
By:
In: SAP-C02
With: 2 Comments

A company wants to containerize a multi-tier web application and move the application from an on-premises data center to AWS.The application includes web.application, and database tiers.The company needs to make the application fault tolerant and scalable.Some frequently accessed data must always be available across application servers.Frontend web servers need session persistence and must scale to meet increases in traffic.Which solution will meet these requirements with the LEAST ongoing operational overhead?Read More →

What should a solutions architect recommend to meet these requirements in the MOST secure manner?

2026-03-24
By:
In: SAA-C02
With: 2 Comments

A company has an application that calls AWS Lambda functions.A code review shows that database credentials are stored in a Lambda function’s source code, which violates the company’s security policy.The credentials must be securely stored and must be automatically rotated on an ongoing basis to meet security policy requirements.What should a solutions architect recommend to meet these requirements in the MOST secure manner?Read More →