Free Access Amazon.AWS-Solutions-Architect-Associate.v2024-03-28.q387 Practice Test (Page 9)

Question 36

In IAM, which of the following is true of temporary security credentials?

A.Once you issue temporary security credentials, they cannot be revoked.

B.None of these are correct.

C.Once you issue temporary security credentials, they can be revoked only when the virtual MFA device is used.

D.Once you issue temporary security credentials, they can be revoked.

Question 37

A solutions architect needs to ensure that API calls to Amazon DynamoDB from Amazon EC2 instances in a VPC do not traverse the internet.
What should the solutions architect do to accomplish this? (Choose two.)

A.Create a route table entry for the endpoint.

B.Create a gateway endpoint for DynamoDB.

C.Create a new DynamoDB table that uses the endpoint.

D.Create an ENI for the endpoint in each of the subnets of the VPC.

E.Create a security group entry in the default security group to provide access.

Question 38

A company recently deployed a new auditing system to centralize information about operating system versions patching and installed software for Amazon EC2 instances. A solutions architect must ensure all instances provisioned through EC2 Auto Scaling groups successfully send reports to the auditing system as soon as they are launched and terminated Which solution achieves these goals MOST efficiently?

A.Use EC2 Auto Scaling lifecycle hooks to run a custom script to send data to the audit system when instances are launched and terminated

B.Use a scheduled AWS Lambda function and run a script remotely on all EC2 instances to send data to the audit system.

C.Use an EC2 Auto Scaling launch configuration to run a custom script through user data to send data to the audit system when instances are launched and terminated

D.Run a custom script on the instance operating system to send data to the audit system Configure the script to be invoked by the EC2 Auto Scaling group when the instance starts and is terminated

Question 39

A large company is migrating its entire IT portfolio to AWS. Each business unit in the company has a standalone AWS account that supports both development and test environments. New accounts to support production workloads will be needed soon.
The Finance department requires a centralized method for payment but must maintain visibility into each group's spending to allocate costs.
The Security team requires a centralized mechanism to control IAM usage in all the company's accounts.
What combination of the following options meet the company's needs with the LEAST effort? (Choose two.)

A.Consolidate all of the company's AWS accounts into a single AWS account. Use tags for billing purposes and IAM's Access Advice feature to enforce the least privilege model.

B.Use AWS Organizations to create a new organization from a chosen payer account and define an organizational unit hierarchy. Invite the existing accounts to join the organization and create new accounts using Organizations.

C.Enable all features of AWS Organizations and establish appropriate service control policies that filter IAM permissions for sub-accounts.

D.Require each business unit to use its own AWS accounts. Tag each AWS account appropriately and enable Cost Explorer to administer chargebacks.

E.Use a collection of parameterized AWS CloudFormation templates defining common IAM permissions that are launched into each account. Require all new and existing accounts to launch the appropriate stacks to enforce the least privilege model.

Question 40

After setting up several database instances in Amazon Relational Database Service (Amazon RDS) you decide that you need to track the performance and health of your databases. How can you do this?

A.Subscribe to Amazon RDS events to be notified when changes occur with a DB instance, DB snapshot, DB parameter group, or DB security group.

B.Use the free Amazon CloudWatch service to monitor the performance and health of a DB instance.

C.All of the items listed will track the performance and health of a database.

D.View, download, or watch database log files using the Amazon RDS console or Amazon RDS APIs.
You can also query some database log files that are loaded into database tables.

Premium Bundle

Newest AWS-Solutions-Architect-Associate Exam PDF Dumps shared by BraindumpsPass.com for Helping Passing AWS-Solutions-Architect-Associate Exam! BraindumpsPass.com now offer the updated AWS-Solutions-Architect-Associate exam dumps, the BraindumpsPass.com AWS-Solutions-Architect-Associate exam questions have been updated and answers have been corrected get the latest BraindumpsPass.com AWS-Solutions-Architect-Associate pdf dumps with Exam Engine here:

Access AWS-Solutions-Architect-Associate Premium Version

(652 Q&As Dumps, 40%OFF Special Discount: Exam-Tests)

Other Version: 1115Amazon.AWS-Solutions-Architect-Associate.v2024-02-26.q153; 7036Amazon.AWS-Solutions-Architect-Associate.v2022-09-03.q474; 5534Amazon.AWS-Solutions-Architect-Associate.v2022-08-23.q335; 12201Amazon.AWS-Solutions-Architect-Associate.v2022-02-10.q543; 111Amazon.Examboosts.AWS-Solutions-Architect-Associate.v2021-10-14.by.ronald.156q.pdf

Latest Upload: 200PaloAltoNetworks.NGFW-Engineer.v2026-05-01.q43; 292Nokia.4A0-113.v2026-05-01.q69; 250EC-COUNCIL.312-49v11.v2026-04-30.q214; 227Microsoft.MB-820.v2026-04-30.q101; 207Salesforce.MC-202.v2026-04-30.q57; 204BICSI.INSTC_V8.v2026-04-29.q53; 332NMLS.MLO.v2026-04-28.q82; 241NCARB.Project-Management.v2026-04-28.q27; 457EMC.D-AV-DY-23.v2026-04-27.q184; 1109ServiceNow.CSA.v2026-04-27.q483