Amazon SAP-C02 Practice Exam Questions

Amazon SAP-C02 Sample Question Answers

Question # 1

A startup company recently migrated a large ecommerce website to AWS The website hasexperienced a 70% increase in sates Software engineers are using a private GitHubrepository to manage code The DevOps team is using Jenkins for builds and unit testingThe engineers need to receive notifications for bad builds and zero downtime duringdeployments The engineers also need to ensure any changes to production are seamlessfor users and can be rolled back in the event of a major issueThe software engineers have decided to use AWS CodePipeline to manage their build anddeployment processWhich solution will meet these requirements'?

A. Use GitHub websockets to trigger the CodePipeline pipeline Use the Jenkins plugin forAWS CodeBuild to conduct unit testing Send alerts to an Amazon SNS topic for any badbuilds Deploy in an in-place all-at-once deployment configuration using AWS CodeDeploy
B. Use GitHub webhooks to trigger the CodePipelme pipeline Use the Jenkins plugin forAWS CodeBuild to conduct unit testing Send alerts to an Amazon SNS topic for any bad builds Deploy in a blue'green deployment using AWS CodeDeploy
C. Use GitHub websockets to trigger the CodePipelme pipeline. Use AWS X-Ray for unittesting and static code analysis Send alerts to an Amazon SNS topic for any bad buildsDeploy in a blue/green deployment using AWS CodeDeploy.
D. Use GitHub webhooks to trigger the CodePipeline pipeline Use AWS X-Ray for unittesting and static code analysis Send alerts to an Amazon SNS topic for any bad buildsDeploy in an m-place. all-at-once deployment configuration using AWS CodeDeploy

Show Answer

Question # 2

To abide by industry regulations, a solutions architect must design a solution that will storea company's critical data in multiple public AWS Regions, including in the United States,where the company's headquarters is located The solutions architect is required to provideaccess to the data stored in AWS to the company's global WAN network The security teammandates that no traffic accessing this data should traverse the public internetHow should the solutions architect design a highly available solution that meets therequirements and is cost-effective'?

A. Establish AWS Direct Connect connections from the company headquarters to all AWSRegions in use the company WAN to send traffic over to the headquarters and then to the respective DX connection to access the data
B. Establish two AWS Direct Connect connections from the company headquarters to anAWS Region Use the company WAN to send traffic over a DX connection Use inter-regionVPC peering to access the data in other AWS Regions
C. Establish two AWS Direct Connect connections from the company headquarters to anAWS Region Use the company WAN to send traffic over a DX connection Use an AWStransit VPC solution to access data in other AWS Regions
D. Establish two AWS Direct Connect connections from the company headquarters to anAWS Region Use the company WAN to send traffic over a DX connection Use DirectConnect Gateway to access data in other AWS Regions.

Show Answer

Question # 3

A company has developed a new release of a popular video game and wants to make itavailable for public download The new release package is approximately 5 GB in size. Thecompany provides downloads for existing releases from a Linux-based publicly facing FTPsite hosted in an on-premises data center The company expects the new release will bedownloaded by users worldwide The company wants a solution that provides improveddownload performance and low transfer costs regardless of a user's locationWhich solutions will meet these requirements'?

A. Store the game files on Amazon EBS volumes mounted on Amazon EC2 instanceswithin an Auto Scaling group Configure an FTP service on the EC2 instances Use anApplication Load Balancer in front of the Auto Scaling group. Publish the game downloadURL for users to download the package
B. Store the game files on Amazon EFS volumes that are attached to Amazon EC2instances within an Auto Scaling group Configure an FTP service on each of the EC2instances Use an Application Load Balancer in front of the Auto Scaling group Publish thegame download URL for users to download the package
C. Configure Amazon Route 53 and an Amazon S3 bucket for website hosting Upload thegame files to the S3 bucket Use Amazon CloudFront for the website Publish the gamedownload URL for users to download the package
D. Configure Amazon Route 53 and an Amazon S3 bucket for website hosting Upload thegame files to the S3 bucket Set Requester Pays for the S3 bucket Publish the game download URL for users to download the package

Show Answer

Question # 4

A company runs an application in (he cloud that consists of a database and a websiteUsers can post data to the website, have the data processed, and have the data sent backto them in an email Data is stored in a MySQL database running on an Amazon EC2instance The database is running in a VPC with two private subnets The website is runningon Apache Tomcat in a single EC2 instance in a different VPC with one public subnetThere is a single VPC peering connection between the database and website VPC. The website has suffered several outages during the last month due to high trafficWhich actions should a solutions architect take to increase the reliability of the application?(Select THREE.)

A. Place the Tomcat server in an Auto Scaling group with multiple EC2 instances behindan Application Load Balancer
B. Provision an additional VPC peering connection
C. Migrate the MySQL database to Amazon Aurora with one Aurora Replica
D. Provision two NAT gateways in the database VPC.
E. Move the Tomcat server to the database VPC
F. Create an additional public subnet in a different Availability Zone in the website VPC

Show Answer

Question # 5

A company provides a centralized Amazon EC2 application hosted in a single shared VPCThe centralized application must be accessible from client applications running in the VPCsof other business units The centralized application front end is configured with a NetworkLoad Balancer (NLB) for scalability Up to 10 business unit VPCs will need to be connected to the shared VPC Some ot thebusiness unit VPC CIDR blocks overlap with the shared VPC and some overlap with eachother Network connectivity to the centralized application in the shared VPC should beallowed from authorized business unit VPCs onlyWhich network configuration should a solutions architect use to provide connectivity fromthe client applications in the business unit VPCs to the centralized application in the sharedVPC?

A. Create an AWS Transit Gateway Attach the shared VPC and the authorized businessunit VPCs to the transit gateway Create a single transit gateway route table and associateit with all of the attached VPCs Allow automatic propagation of routes from the attachmentsinto the route table Configure VPC routing tables to send traffic to the transit gateway
B. Create a VPC endpoint service using the centralized application NLB and enable theoption to require endpoint acceptance Create a VPC endpoint in each of the business unitVPCs using the service name of the endpoint service. Accept authorized endpoint requestsfrom the endpoint service console.
C. Create a VPC peering connection from each business unit VPC to the shared VPCAccept the VPC peering connections from the shared VPC console Configure VPC routingtables to send traffic to the VPC peering connection
D. Configure a virtual private gateway for the shared VPC and create customer gatewaysfor each of the authorized business unit VPCs Establish a Site-to-Site VPN connection fromthe business unit VPCs to the shared VPC Configure VPC routing tables to send traffic tothe VPN connection

Show Answer

Question # 6

An events company runs a ticketing platform on AWS. The company's customers configureand schedule their events on the platform The events result in large increases of traffic tothe platform The company knows the date and time of each customer's eventsThe company runs the platform on an Amazon Elastic Container Service (Amazon ECS)cluster The ECS cluster consists of Amazon EC2 On-Demand Instances that are in an AutoScaling group. The Auto Scaling group uses a predictive scaling policyThe ECS cluster makes frequent requests to an Amazon S3 bucket to download ticketassets The ECS cluster and the S3 bucket are in the same AWS Region and the sameAWS account Traffic between the ECS cluster and the S3 bucket flows across a NATgatewayThe company needs to optimize the cost of the platform without decreasing the platform'savailabilityWhich combination of steps will meet these requirements? (Select TWO)

A. Create a gateway VPC endpoint for the S3 bucket
B. Add another ECS capacity provider that uses an Auto Scaling group of Spot InstancesConfigure the new capacity provider strategy to have the same weight as the existingcapacity provider strategy
C. Create On-Demand Capacity Reservations for the applicable instance type for the timeperiod of the scheduled scaling policies
D. Enable S3 Transfer Acceleration on the S3 bucket
E. Replace the predictive scaling policy with scheduled scaling policies for the scheduled events

Show Answer

Question # 7

A company uses AWS Organizations to manage its development environment. Eachdevelopment team at the company has its own AWS account Each account has a singleVPC and CIDR blocks that do not overlap.The company has an Amazon Aurora DB cluster in a shared services account All thedevelopment teams need to work with live data from the DB clusterWhich solution will provide the required connectivity to the DB cluster with the LEASToperational overhead?

A. Create an AWS Resource Access Manager (AWS RAM) resource share tor the DBcluster. Share the DB cluster with all the development accounts
B. Create a transit gateway in the shared services account Create an AWS ResourceAccess Manager (AWS RAM) resource share for the transit gateway Share the transitgateway with all the development accounts Instruct the developers to accept the resourceshare Configure networking.
C. Create an Application Load Balancer (ALB) that points to the IP address of the DBcluster Create an AWS PrivateLink endpoint service that uses the ALB Add permissions toallow each development account to connect to the endpoint service
D. Create an AWS Site-to-Site VPN connection in the shared services account Configurenetworking Use AWS Marketplace VPN software in each development account to connectto the Site-to-Site VPN connection

Show Answer

Question # 8

A company wants to migrate virtual Microsoft workloads from an on-premises data centerto AWS The company has successfully tested a few sample workloads on AWS. Thecompany also has created an AWS Site-to-Site VPN connection to a VPC A solutionsarchitect needs to generate a total cost of ownership (TCO) report for the migration of allthe workloads from the data centerSimple Network Management Protocol (SNMP) has been enabled on each VM in the datacenter The company cannot add more VMs m the data center and cannot install additionalsoftware on the VMs The discovery data must be automatically imported into AWSMigration HubWhich solution will meet these requirements?

A. Use the AWS Application Migration Service agentless service and the AWS MigrationHub Strategy Recommendations to generate the TCO report
B. Launch a Windows Amazon EC2 instance Install the Migration Evaluator agentlesscollector on the EC2 instance Configure Migration Evaluator to generate the TCO report
C. Launch a Windows Amazon EC2 instance. Install the Migration Evaluator agentlesscollector on the EC2 instance. Configure Migration Hub to generate the TCO report
D. Use the AWS Migration Readiness Assessment tool inside the VPC Configure MigrationEvaluator to generate the TCO report

Show Answer

Question # 9

A software as a service (SaaS) company provides a media software solution to customersThe solution is hosted on 50 VPCs across various AWS Regions and AWS accounts Oneof the VPCs is designated as a management VPC The compute resources in the VPCswork independently The company has developed a new feature that requires all 50 VPCs to be able tocommunicate with each other. The new feature also requires one-way access from eachcustomer's VPC to the company's management VPC The management VPC hosts acompute resource that validates licenses for the media software solutionThe number of VPCs that the company will use to host the solution will continue to increaseas the solution growsWhich combination of steps will provide the required VPC connectivity with the LEASToperational overhead'' (Select TWO.)

A. Create a transit gateway Attach all the company's VPCs and relevant subnets to thetransit gateway
B. Create VPC peering connections between all the company's VPCs
C. Create a Network Load Balancer (NLB) that points to the compute resource for licensevalidation. Create an AWS PrivateLink endpoint service that is available to each customer'sVPC Associate the endpoint service with the NLB
D. Create a VPN appliance in each customer's VPC Connect the company's managementVPC to each customer's VPC by using AWS Site-to-Site VPN
E. Create a VPC peering connection between the company's management VPC and eachcustomer's VPC

Show Answer

Question # 10

A company creates an AWS Control Tower landing zone to manage and govern a multiaccountAWS environment. The company's security team will deploy preventive controlsand detective controls to monitor AWS services across all the accounts. The security teamneeds a centralized view of the security state of all the accounts.Which solution will meet these requirements'?

A. From the AWS Control Tower management account, use AWS CloudFormationStackSets to deploy an AWS Config conformance pack to all accounts in the organization
B. Enable Amazon Detective for the organization in AWS Organizations Designate oneAWS account as the delegated administrator for Detective
C. From the AWS Control Tower management account, deploy an AWS CloudFormationstack set that uses the automatic deployment option to enable Amazon Detective for theorganization
D. Enable AWS Security Hub for the organization in AWS Organizations Designate oneAWS account as the delegated administrator for Security Hub

Show Answer