Which of the following is a recommended design principle for AWS Cloud architecture?
2026-03-19
Which of the following is a recommended design principle for AWS Cloud architecture?Read More →
Which solution will meet these requirements with the MOST operational efficiency?
2026-03-19
A company needs to harden its container images before the images are in a running state.The company’s application uses Amazon Elastic Container Registry (Amazon ECR) as an image registry.Amazon Elastic Kubernetes Service (Amazon EKS) for compute, and an AWS CodePipeline pipeline that orchestrates a continuous integration and continuous delivery (CI/CD) workflow.Dynamic application security testing occurs in the final stage of the pipeline after a new image is deployed to a development namespace in the EKS cluster.A developer needs to place an analysis stage before this deployment to analyze the container image earlier in the CI/CD pipeline.Which solution will meet these requirements with the MOST operational efficiency?Read More →
Which solution should the Solutions Architect use to meet the security requirements?
2026-03-19
A company uses Amazon S3 to host a web application.Currently, the company uses a continuous integration tool running on an Amazon EC2 instance that builds and deploys the application by uploading it to an S3 bucket.A Solutions Architect needs to enhance the security of the company’s platform with the following requirements:✑ A build process should be run in a separate account from the account hosting the web application.✑ A build process should have minimal access in the account it operates in.✑ Long-lived credentials should not be used.As a start, the Development team created two AWS accounts: one for the application named web account process; other is a named build account.Which solution should the Solutions Architect use to meet the security requirements?Read More →
Which storage option meets these requirements?
2026-03-19
A solutions architect is using Amazon S3 to design the storage architecture of a new digital media application.The media files must be resilient to the loss of an Availability Zone.Some files are accessed frequently while other files are rarely accessed in an unpredictable pattern.The solutions architect must minimize the costs of storing and retrieving the media files.Which storage option meets these requirements?Read More →
Which solution will meet this requirement with the LEAST operational overhead?
2026-03-19
A company is deploying a new application on AWS.The application consists of an Amazon Elastic Kubernetes Service (Amazon EKS) cluster and an Amazon Elastic Container Registry (Amazon ECR) repository.The EKS cluster has an AWS managed node group.The company’s security guidelines state that all resources on AWS must be continuously scanned for security vulnerabilities.Which solution will meet this requirement with the LEAST operational overhead?Read More →
Where can the company find this documentation?
2026-03-19
A company is preparing for an audit and wants documentation that AWS complies with the Payment Card Industry Data Security Standard (PCI DSS).Where can the company find this documentation?Read More →
Which solution will improve the VPN throughput?
2026-03-19
A company is using Site-to-Site VPN connections for secure connectivity to its AWS Cloud resources from on premises.Due to an increase in traffic across theVPN connections to the Amazon EC2 instances, users are experiencing slower VPN connectivity.Which solution will improve the VPN throughput?Read More →
Which AWS service helps users audit API activity across their AWS account?
2026-03-19
Which AWS service helps users audit API activity across their AWS account?Read More →
Which additional set of changes should the developer make to the application to improve the application’s performance?
2026-03-19
A developer needs to migrate an online retail application to AWS to handle an anticipated increase in traffic.The application currently runs on two servers: one server for the web application and another server for the database.The web server renders webpages and manages session state in memory.The database server hosts a MySQL database that contains order details.When traffic to the application is heavy, the memory usage for the web server approaches 100% and the application slows down considerably.The developer has found that most of the memory increase and performance decrease is related to the load of managing additional user sessions.For the web server migration, the developer will use Amazon EC2 instances with an Auto Scaling group behind an Application Load Balancer.Which additional set of changes should the developer make to the application to improve the application’s performance?Read More →
Which strategies should the Solutions Architect use?
2026-03-19
A company experienced a breach of highly confidential personal information due to permission issues on an Amazon S3 bucket.The Information Security team has tightened the bucket policy to restrict access.Additionally, to be better prepared for future attacks, these requirements must be met:✑ Identify remote IP addresses that are accessing the bucket objects.✑ Receive alerts when the security policy on the bucket is changed.✑ Remediate the policy changes automatically.Which strategies should the Solutions Architect use?Read More →