A SysOps administrator noticed that the cache hit ratio for an Amazon CloudFront distribution is less than 10%.Which collection of configuration changes will increase the cache hit ratio for the distribution? (Choose two.)Read More →
A company hosts a game player-matching service on a public facing, physical, on-premises instance that all users are able to access over the internet.All traffic to the instance uses UDP.The company wants to migrate the service to AWS and provide a high level of security.A solutions architect needs to design a solution for the player-matching service using AWS.Which combination of steps should the solutions architect take to meet these requirements? (Choose three.)Read More →
A Security Engineer creates an Amazon S3 bucket policy that denies access to all users.A few days later, the Security Engineer adds an additional statement to the bucket policy to allow read-only access to one other employee.Even after updating the policy, the employee still receives an access denied message.What is the likely cause of this access denial?Read More →
A company wants to configure its Amazon CloudFront distribution to use SSL/TLS certificates.The company does not want to use the default domain name for the distribution.Instead, the company wants to use a different domain name for the distribution.Which solution will deploy the certificate without incurring any additional costs?Read More →
A company migrated to AWS and uses AWS Business Support.The company wants to monitor the cost-effectiveness of Amazon EC2 instances across AWS accounts.The EC2 instances have tags for department, business unit, and environment.Development EC2 instances have high cost but low utilization.The company needs to detect and stop any underutilized development EC2 instances.Instances are underutilized if they had 10% or less average daily CPU utilization and 5 MB or less network I/O for at least 4 of the past 14 days.Which solution will meet these requirements with the LEAST operational overhead?Read More →
A company stores all personally identifiable information (PII) in an Amazon DynamoDB table named PII in Account A.Developers are working on an application that is running on Amazon EC2 instances in Account B.The application in Account B requires access to the PII table.An administrator in Account A creates an IAM role named AccessPII that has permission to access the PII table.The administrator also creates a trust policy that specifies Account B as a principal that can assume the role.Which combination of steps should the developers take in Account B to allow their application to access the PII table? (Choose two.)Read More →
A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access.What should the company use to access instances remotely instead of opening inbound SSH ports and managing SSH keys?Read More →
A company has a Microsoft Windows-based application that must be migrated to AWS.This application requires the use of a shared Windows file system attached to multiple Amazon EC2 Windows instances.What should a solutions architect do to accomplish this?Read More →
What does “security of the cloud” refer to in the AWS shared responsibility model?Read More →
An application uses AWS X-Ray to generate a large amount of trace data on an hourly basis.A developer wants to use filter expressions to limit the returned results through user-specified custom attributes.How should the developer use filter expressions to filter the results in X-Ray?Read More →
© 2026. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.