Free AWS Certified Solutions Architect - Professional (SAP-C02) Practice Questions

Sample SAP-C02 Practice Questions

Browse all 5 free AWS Certified Solutions Architect - Professional practice questions below.

1. A company is migrating its on-premises data center to AWS. The company has a requirement to maintain a hybrid connectivity solution that provides consistent network performance and private connectivity between their data center and multiple VPCs across different AWS regions. The solution must support BGP routing and provide redundancy. Which combination of AWS services should the solutions architect recommend? (Select TWO)

   • AWS Site-to-Site VPN with Customer Gateway
   • AWS Transit Gateway with Direct Connect Gateway
   • AWS PrivateLink endpoints in each VPC
   • VPC Peering connections between all VPCs
   • AWS Direct Connect with Virtual Private Gateways in each region

2. An enterprise application processes sensitive financial data and must comply with PCI DSS requirements. The application runs on Amazon EC2 instances behind an Application Load Balancer. Data must be encrypted in transit and at rest, and the company requires detailed audit logs of all database access. The database contains 10 TB of data with predictable read patterns. Which solution meets these requirements while optimizing costs?

   • Use self-managed PostgreSQL on EC2 with EBS encryption, install a third-party audit logging tool, and use AWS Key Management Service for encryption key management. Implement daily snapshots to S3.
   • Use Amazon Aurora PostgreSQL with encryption at rest, AWS Secrets Manager for credentials, Database Activity Streams to Amazon Kinesis Data Streams, and AWS Certificate Manager for TLS certificates. Enable automated backups with 7-day retention and manual snapshots for long-term retention.
   • Use Amazon RDS for PostgreSQL with encryption enabled, AWS Certificate Manager for SSL/TLS, and Amazon CloudWatch Logs for database activity monitoring. Enable automated backups with 35-day retention.
   • Use Amazon DynamoDB with encryption enabled, VPC endpoints for private access, and AWS CloudTrail for API logging. Enable point-in-time recovery for 35 days.

3. A media company stores petabytes of video content in Amazon S3. The content must be available for streaming with low latency to users globally. Frequently accessed videos (less than 30 days old) must have sub-second retrieval times, while older content is accessed less frequently but must still be retrievable within minutes. The company wants to minimize storage costs. What S3 storage strategy should be implemented?

   • Use S3 Intelligent-Tiering for all content with lifecycle policies to move to S3 Glacier after 180 days. Enable S3 Transfer Acceleration for uploads.
   • Store all content in S3 Standard and use CloudFront for global distribution. Enable S3 Intelligent-Tiering after 90 days.
   • Store all content in S3 One Zone-IA with lifecycle transition to S3 Glacier Deep Archive after 60 days. Use multiple CloudFront distributions in each region.
   • Use S3 Standard for new content, implement S3 Lifecycle policies to transition objects to S3 Standard-IA after 30 days and to S3 Glacier Flexible Retrieval after 90 days. Use CloudFront with origin shield for global distribution.

4. A company is running a legacy .NET application on Windows Server 2012 R2 instances in their data center. The application uses Microsoft SQL Server 2014, Active Directory for authentication, and relies on NTFS file shares for document storage. The company wants to migrate to AWS with minimal code changes while maintaining high availability across multiple Availability Zones. What migration strategy and architecture should be recommended?

   • Use AWS Application Migration Service (MGN) to migrate Windows instances to EC2, set up AWS Managed Microsoft AD across multiple AZs, use Amazon RDS for SQL Server Multi-AZ, and implement Amazon FSx for Windows File Server with Multi-AZ deployment.
   • Use VM Import/Export to bring Windows Server images to AWS, run SQL Server on EC2 with scheduled snapshots, set up Simple AD, and use Amazon S3 for file storage with a Windows mount point.
   • Refactor the application to use Linux, migrate the database to Amazon Aurora PostgreSQL, implement Amazon Cognito for authentication, and use Amazon EFS for file storage.
   • Containerize the .NET application using Amazon ECS on Fargate, use Amazon RDS for SQL Server, implement AWS Directory Service AD Connector pointing to on-premises AD, and use Amazon EFS with Windows clients.

5. A financial services company has a multi-account AWS environment with 50+ accounts organized using AWS Organizations. They need to implement centralized security controls including: mandatory encryption for all S3 buckets, prevention of public S3 access, enforcement of MFA for privileged operations, and centralized logging of all API calls. The solution must scale automatically as new accounts are added. Which combination of services and features should be implemented?

   • Enable AWS CloudTrail organization trail to centralize API logging across all accounts to a designated S3 bucket in a security account
   • Use AWS Config aggregator with conformance packs to monitor compliance across all accounts
   • Deploy AWS Security Hub in each account and enable automated response through EventBridge and Lambda
   • Implement AWS IAM Access Analyzer in the organization management account
   • Implement AWS Organizations Service Control Policies (SCPs) to enforce encryption, block public S3 access, and require MFA