A Security Engineer is looking for a way to control access to data that is being encrypted under a CMK.The Engineer is also looking to use additional authenticated data (AAD) to prevent tampering with ciphertext.Which action would provide the required functionality?Read More →
A company that uses AWS is building an application to transfer data to a product manufacturer.The company has its own identity provider (IdP).The company wants the IdP to authenticate application users while the users use the application to transfer data.The company must use Applicability Statement 2 (AS2) protocol.Which solution will meet these requirements?Read More →
A company wants to use a third-party software-as-a-service (SaaS) application.The third-party SaaS application is consumed through several API calls.The third-party SaaS application also runs on AWS inside a VPC.The company will consume the third-party SaaS application from inside a VPC.The company has internal security policies that mandate the use of private connectivity that does not traverse the internet.No resources that run in the company VPC are allowed to be accessed from outside the company’s VPC.All permissions must conform to the principles of least privilege.Which solution meets these requirements?Read More →
A company is planning to migrate to the AWS Cloud.The company wants to identify measurable business outcomes that will explain the value of the company’s decision to migrate.Which phase of the cloud transformation journey includes these activities?Read More →
A company is building applications in containers.The company wants to migrate its on-premises development and operations services from its on-premises data center to AWS.Management states that production systems must be cloud agnostic and use the same configuration and administrator tools across production systems.A solutions architect needs to design a managed solution that will align open-source software.Which solution meets these requirements?Read More →
Which AWS feature provides a no-cost platform for AWS users to join community groups, ask questions, find answers, and read community-generated articles about best practices?Read More →
An application is using Amazon Cognito user pools and identity pools for secure access.A developer wants to integrate the user-specific file upload and download features in the application with Amazon S3.The developer must ensure that the files are saved and retrieved in a secure manner and that users can access only their own files.The file sizes range from 3 KB to 300 MB.Which option will meet these requirements with the HIGHEST level of security?Read More →
A company that uses electronic health records is running a fleet of Amazon EC2 instances with an Amazon Linux operating system.As part of patient privacy requirements, the company must ensure continuous compliance for patches for operating system and applications running on the EC2 instances.How can the deployments of the operating system and application patches be automated using a default and custom repository?Read More →
A company wants to prohibit its developers from using a particular family of Amazon EC2 instances.The company uses AWS Organizations and wants to apply the restriction across multiple accounts.What is the MOST operationally efficient way for the company to apply service control policies (SCPs) to meet these requirements?Read More →
An organization is planning to setup a management network on the AWS VPC.The organization is trying to secure the webserver on a single VPC instance such that it allows the internet traffic as well as the back-end management traffic.The organization wants to make so that the back end management network interface can receive the SSH traffic only from a selected IP range, while the internet facing webserver will have an IP address which can receive traffic from all the internetIPs.How can the organization achieve this by running web server on a single instance?Read More →
© 2026. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.