The two policies that you attach to an IAM role are the access policy and the trust policy.The trust policy identifies who can assume the role and grants the permission in the AWS Lambda account principal by adding the _______ action.Read More →
An ecommerce company hosts its analytics application in the AWS Cloud.The application generates about 300 MB of data each month.The data is stored in JSON format.The company is evaluating a disaster recovery solution to back up the data.The data must be accessible in milliseconds if it is needed, and the data must be kept for 30 days.Which solution meets these requirements MOST cost-effectively?Read More →
An AWS partner company is building a service in AWS Organizations using its organization named org1.This service requires the partner company to have access to AWS resources in a customer account, which is in a separate organization named org2.The company must establish least privilege security access using an API or command line tool to the customer account.What is the MOST secure way to allow org1 to access resources in org2?Read More →
Which AWS services can a company use to achieve a loosely coupled architecture? (Choose two.)Read More →
A company is running a web application on Amazon EC2 instances in an Auto Scaling group.The application uses a database that runs on an Amazon RDS forPostgreSQL DB instance.The application performs slowly as traffic increases, and the database experiences a heavy read load during periods of high traffic.Which actions should a solutions architect take to resolve these performance issues? (Choose two.)Read More →
Which AWS service provides the ability to manage infrastructure as code?Read More →
A developer is creating a new application for a pet store.The application will manage customer rewards points.The developer will use Amazon DynamoDB to store the data for the application.The developer needs to optimize query performance and limit partition overload before actual performance analysis.Which option should the developer use for a partition key to meet these requirements?Read More →
A company uses an Amazon API Gateway regional REST API to host its application API.The REST API has a custom domain.The REST API’s default endpoint is deactivated.The company’s internal teams consume the API.The company wants to use mutual TLS between the API and the internal teams as an additional layer of authentication.Which combination of steps will meet these requirements? (Choose two.)Read More →
A company uses AWS Organizations to host several applications across multiple AWS accounts.Several teams are responsible for building and maintaining the infrastructure of the applications across the AWS accounts.A SysOps administrator must implement a solution to ensure that user accounts and permissions are centrally managed.The solution must be integrated with the company’s existing on-premises Active Directory environment.The SysOps administrator already has enabled AWS IAM Identity Center (AWS Single Sign-On) and has set up an AWS Direct Connect connection.What is the MOST operationally efficient solution that meets these requirements?Read More →
An organization is setting up an application on AWS to have both High Availability (HA) and Disaster Recovery (DR).The organization wants to have bothRecovery point objective (RPO) and Recovery time objective (RTO) of 10 minutes.Which of the below mentioned service configurations does not help the organization achieve the said RPO and RTO?Read More →
© 2026. Tip2Cloud doesn't offer any real exam questions. All questions & answers were supported by AI.