A company decides to use AWS Key Management Service (AWS KMS) for data encryption operations.The company must create a KMS key and automate the rotation of the key.The company also needs the ability to deactivate the key and schedule the key for deletion.Which solution will meet these requirements?Read More →
A company runs its production workload on Amazon EC2 instances with Amazon Elastic Block Store (Amazon EBS) volumes.A solutions architect needs to analyze the current EBS volume cost and to recommend optimizations.The recommendations need to include estimated monthly saving opportunities.Which solution will meet these requirements?Read More →
A financial services company sells its software-as-a-service (SaaS) platform for application compliance to large global banks.The SaaS platform runs on AWS and uses multiple AWS accounts that are managed in an organization in AWS Organizations.The SaaS platform uses many AWS resources globally.For regulatory compliance, all API calls to AWS resources must be audited, tracked for changes, and stored in a durable and secure data store.Which solution will meet these requirements with the LEAST operational overhead?Read More →
A developer has created a web API that uses Amazon Elastic Container Service (Amazon ECS) and an Application Load Balancer (ALB).An Amazon CloudFront distribution uses the API as an origin for web clients.The application has received millions of requests with a JSON Web Token (JWT) that is not valid in the authorization header.The developer has scaled out the application to handle the unauthenticated requests.What should the developer do to reduce the number of unauthenticated requests to the API?Read More →
Which AWS service is a highly available and scalable DNS web service?Read More →
A company has enabled AWS CloudTrail logs to deliver log files to an Amazon S3 bucket for each of its developer accounts.The company has created a centralAWS account for streamlining management and audit reviews.An internal auditor needs to access the CloudTrail logs, yet access needs to be restricted for all developer account users.The solution must be secure and optimized.How should a solutions architect meet these requirements?Read More →
A developer needs to maintain a development environment infrastructure and a production environment infrastructure in a repeatable fashion.Which AWS service should the developer use to meet these requirements?Read More →
A company uses Amazon Simple Queue Service (Amazon SQS) to decouple its microservices architecture.Some messages in an SQS queue contain sensitive information.A developer must implement a solution that encrypts all the data at rest.Which solution will meet this requirement?Read More →
A company requires that its internally facing web application be highly available.The architecture is made up of one Amazon EC2 web server instance and one NAT instance that provides outbound internet access for updates and accessing public data.Which combination of architecture adjustments should the company implement to achieve high availability? (Choose two.)Read More →
A company is undergoing an external audit of its systems, which run wholly on AWS.A SysOps administrator must supply documentation of Payment Card Industry Data Security Standard (PCI DSS) compliance for the infrastructure managed by AWS.Which set of actions should the SysOps administrator take to meet this requirement?Read More →
© 2026. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.