Which solution will meet these requirements?

2026-03-21
By:
In: SAP-C02
With: 2 Comments

A retail company has an on-premises data center in Europe.The company also has a multi-Region AWS presence that includes the eu-west-1 and us-east-1 Regions.The company wants to be able to route network traffic from its on-premises infrastructure into VPCs in either of those Regions.The company also needs to support traffic that is routed directly between VPCs in those Regions.No single points of failure can exist on the network.The company already has created two 1 Gbps AWS Direct Connect connections from its on-premises data center.Each connection goes into a separate Direct Connect location in Europe for high availability.These two locations are named DX-A and DX-B, respectively.Each Region has a single AWS Transit Gateway that is configured to route all inter-VPC traffic within that Region.Which solution will meet these requirements?Read More →

How can the developer expand the application to run in the destination Region while meeting the encryption requirement?

2026-03-21
By:
In: DVA-C02
With: 2 Comments

A developer wants to expand an application to run in multiple AWS Regions.The developer wants to copy Amazon Machine Images (AMIs) with the latest changes and create a new application stack in the destination Region.According to company requirements, all AMIs must be encrypted in all Regions.However, not all the AMIs that the company uses are encrypted.How can the developer expand the application to run in the destination Region while meeting the encryption requirement?Read More →

Which solution meets these requirements with the LEAST amount of operational overhead?

2026-03-21
By:
In: SAP-C01
With: 2 Comments

A company has an organization that has many AWS accounts in AWS Organizations.A solutions architect must improve how the company manages common security group rules for the AWS accounts in the organization.The company has a common set of IP CIDR ranges in an allow list in each AWS account to allow access to and from the company’s on-premises network.Developers within each account are responsible for adding new IP CIDR ranges to their security groups.The security team has its own AWS account.Currently, the security team notifies the owners of the other AWS accounts when changes are made to the allow list.The solutions architect must design a solution that distributes the common set of CIDR ranges across all accounts.Which solution meets these requirements with the LEAST amount of operational overhead?Read More →

Which solution will meet these requirements with the LEAST operational overhead?

2026-03-21
By:
In: SAA-C03
With: 2 Comments

A company has a mobile app for customers.The app’s data is sensitive and must be encrypted at rest.The company uses AWS Key Management Service (AWS KMS).The company needs a solution that prevents the accidental deletion of KMS keys.The solution must use Amazon Simple Notification Service (Amazon SNS) to send an email notification to administrators when a user attempts to delete a KMS key.Which solution will meet these requirements with the LEAST operational overhead?Read More →

Which combination of steps will meet these requirements?

2026-03-21
By:
In: SAP-C02
With: 2 Comments

A company is running an application in the AWS Cloud.The company’s security team must approve the creation of all new IAM users.When a new IAM user is created, all access for the user must be removed automatically.The security team must then receive a notification to approve the user.The company has a multi-Region AWS CloudTrail trail in the AWS account.Which combination of steps will meet these requirements? (Choose three.)Read More →