A company runs an application on Amazon EC2 instances in a private subnet.The application needs to store and retrieve data in Amazon S3 buckets.According to regulatory requirements, the data must not travel across the public internet.What should a solutions architect do to meet these requirements MOST cost-effectively?Read More →
A company is running an application that uses an Amazon ElastiCache for Redis cluster as a caching layer.A recent security audit revealed that the company has configured encryption at rest for ElastiCache.However, the company did not configure ElastiCache to use encryption in transit.Additionally, users can access the cache without authentication.A solutions architect must make changes to require user authentication and to ensure that the company is using end-to-end encryption.Which solution will meet these requirements?Read More →
A company is using an AWS Lambda function to process records from an Amazon Kinesis data stream.The company recently observed slow processing of the records.A developer notices that the iterator age metric for the function is increasing and that the Lambda run duration is constantly above normal.Which actions should the developer take to increase the processing speed? (Choose two.)Read More →
Which tasks require use of the AWS account root user? (Choose two.)Read More →
An ecommerce company has noticed performance degradation of its Amazon RDS based web application.The performance degradation is attributed to an increase in the number of read-only SQL queries triggered by business analysts.A solutions architect needs to solve the problem with minimal changes to the existing web application.What should the solutions architect recommend?Read More →
A developer has written a distributed application that uses microservices.The microservices are running on Amazon EC2 instances.Because of message volume, the developer is unable to match log output from each microservice to a specific transaction.The developer needs to analyze the message flow to debug the application.Which combination of steps should the developer take to meet this requirement? (Choose two.)Read More →
A company is launching an application.The application must use only approved AWS services.The account that runs the application was created less than 1 year ago and is assigned to an AWS Organizations OU.The company needs to create a new Organizations account structure.The account structure must have an appropriate SCP that supports the use of only services that are currently active in the AWS account.The company will use AWS Identity and Access Management (IAM) Access Analyzer in the solution.Which solution will meet these requirements?Read More →
A company runs an application on Amazon EC2 instances.The EC2 instances are in an Auto Scaling group and run behind an Application Load Balancer (ALB).The application experiences errors when total requests exceed 100 requests per second.A SysOps administrator must collect information about total requests for a 2-week period to determine when requests exceeded this threshold.What should the SysOps administrator do to collect this data?Read More →
A media company has a static web application that is generated programmatically.The company has a build pipeline that generates HTML content that is uploaded to an Amazon S3 bucket served by Amazon CloudFront.The build pipeline runs inside a Build Account.The S3 bucket and CloudFront distribution are in a Distribution Account.The build pipeline uploads the files to Amazon S3 using an IAM role in the Build Account.The S3 bucket has a bucket policy that only allows CloudFront to read objects using an origin access identity (OAI).During testing all attempts to access the application using the CloudFront URL result in anHTTP 403 Access Denied response.What should a solutions architect suggest to the company to allow access the objects in Amazon S3 through CloudFront?Read More →
A Solutions Architect is designing a web application that uses Amazon CloudFront, an Elastic Load Balancing Application Load Balancer, and an Auto Scaling group of Amazon EC2 instances.The load balancer and EC2 instances are in the US West (Oregon) region.It has been decided that encryption in transit is necessary by using a customer-branded domain name from the client to CloudFront and from CloudFront to the load balancer.Assuming that AWS Certificate Manager is used, how many certificates will need to be generated?Read More →
© 2026. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.