SAP-C02 Practice Exam 4 — 20 Questions

Question 1

A company runs a critical application on EC2 instances behind an Application Load Balancer (ALB) in a production AWS account. Recently, the application has experienced intermittent timeouts. The operations team notices that the CPU utilization of the instances spikes to 100% for a few minutes during the timeouts. The Auto Scaling group is configured with a target tracking scaling policy based on average CPU utilization at 70%. What should a solutions architect do to improve the application's availability and reduce timeouts?

Accepted Answer

Add a step scaling policy to scale out by 2 instances when CPU exceeds 80% for 1 minute.. Option B is correct because adding a step scaling policy that triggers at 80% CPU for 1 minute provides a faster, more aggressive scale-out response than the existing target tracking policy alone. This helps preempt the CPU spikes that reach 100% and cause timeouts, improving application availability by adding capacity before performance degrades.

Answer

Increase the ALB idle timeout to 120 seconds.

Answer

Enable cross-zone load balancing on the ALB.

Answer

Reduce the target tracking scaling threshold to 50% average CPU.

Question 2

A company is running a web application on EC2 instances in an Auto Scaling group behind an ALB. The application uses an Amazon RDS for MySQL database. Recently, the application has become slow, and the operations team identifies that the database is the bottleneck due to a high number of read queries. Which TWO actions should a solutions architect take to improve read performance? (Choose two.)

Accepted Answer

Add an Amazon RDS Read Replica in the same AWS Region.. Option D is correct because adding an Amazon RDS Read Replica offloads read traffic from the primary MySQL database, allowing read queries to be served by the replica and reducing load on the source instance. This directly addresses the high number of read queries causing the bottleneck, as read replicas are designed for read-heavy workloads and can be promoted to a standalone instance if needed.

Answer

Enable Multi-AZ for the RDS instance.

Answer

Implement DynamoDB Accelerator (DAX) in front of the database.

Answer

Scale up the RDS instance to a larger instance type.

Question 3

A company is running a stateful web application on EC2 instances in an Auto Scaling group behind an ALB. The application stores session data locally on the instance. The company notices that users are frequently logged out and lose session data during scaling events. What is the MOST operationally efficient way to preserve session state?

Accepted Answer

Migrate session data to ElastiCache for Redis and modify the application to use it.. Option A is correct because migrating session state to ElastiCache for Redis provides a centralized, external, and highly available session store that persists independently of EC2 instance lifecycles. This ensures that when instances are terminated or added during Auto Scaling events, session data remains intact and accessible from any instance, eliminating user logouts and data loss. It is operationally efficient as it requires minimal application code changes and leverages a fully managed, in-memory data store optimized for low-latency access.

Answer

Create a custom AMI that pre-populates session data from Amazon S3.

Answer

Increase the Auto Scaling group's cooldown period to 600 seconds.

Answer

Enable sticky sessions (session affinity) on the ALB.

Question 4

A company has a legacy application that runs on a single EC2 instance. The application writes logs to a local file. The company wants to centralize log management without modifying the application code. Which solution is MOST operationally efficient?

Accepted Answer

Install and configure the Amazon CloudWatch agent on the EC2 instance.. The Amazon CloudWatch agent can be installed on the EC2 instance without modifying application code. It reads the local log file and sends the logs to Amazon CloudWatch Logs for centralized management, making it the most operationally efficient solution.

Answer

Use AWS CloudTrail to capture log file changes.

Answer

Modify the application to write logs to stdout and use the awslogs driver.

Answer

Set up an Amazon S3 bucket and use an AWS Lambda function to periodically copy log files.

Question 5

A company is deploying a new application on AWS and wants to implement a least-privilege IAM policy for an EC2 instance that needs to read from an S3 bucket (my-bucket) and write logs to CloudWatch Logs. Which THREE statements should be included in the IAM policy? (Choose three.)

Accepted Answer

{"Effect": "Allow", "Action": ["s3:GetObject"], "Resource": "arn:aws:s3:::my-bucket/*"}. Option A is correct because the EC2 instance only needs to read objects from the S3 bucket, so the least-privilege action is s3:GetObject. The resource ARN 'arn:aws:s3:::my-bucket/*' correctly targets all objects within the bucket, which is required for reading objects. This adheres to the principle of granting only the necessary permissions.

Answer

{"Effect": "Allow", "Action": ["s3:*"], "Resource": "arn:aws:s3:::my-bucket/*"}

Answer

{"Effect": "Allow", "Action": ["logs:PutLogEvents"], "Resource": "*"}

Question 6

A company uses AWS CodePipeline to automate deployments of a microservices application to Amazon ECS. The pipeline builds a Docker image, pushes it to Amazon ECR, and updates the ECS service. Recently, deployments have failed because insufficient IAM permissions cause the pipeline to fail when updating the ECS service. The development team wants to implement least privilege permissions. Which IAM policy statement should be added to the CodePipeline service role to allow it to update the ECS service?

Accepted Answer

{"Effect":"Allow","Action":["ecs:UpdateService"],"Resource":"*"}. Option A is correct because the CodePipeline service role needs the ecs:UpdateService permission to trigger an ECS service update after a new Docker image is pushed to Amazon ECR. This action allows the pipeline to instruct ECS to redeploy the service using the updated task definition, which is the specific step that was failing due to insufficient permissions. The resource wildcard is acceptable here because the pipeline role is scoped by the pipeline's own trust policy and resource-based policies on the ECS service.

Answer

{"Effect":"Allow","Action":["ecr:PutImage"],"Resource":"*"}

Answer

{"Effect":"Allow","Action":["ecs:RunTask"],"Resource":"*"}

Answer

{"Effect":"Allow","Action":["ecs:RegisterTaskDefinition"],"Resource":"*"}

Question 7

An e-commerce company runs its application on Amazon EC2 instances behind an Application Load Balancer (ALB). The application uses an Amazon Aurora MySQL DB cluster with one writer and two reader instances. During a sales event, the database CPU utilization is high, and read replicas show high replica lag. The company needs to improve the read scalability and reduce replica lag. Which THREE actions should the company take? (Choose THREE.)

Accepted Answer

Add more reader instances to the cluster to distribute the read traffic.. Adding more reader instances (Option A) distributes the read workload across additional nodes, reducing the load on each reader and helping to lower replica lag. Aurora Auto Scaling (Option E) automatically adjusts the number of reader instances based on metrics like CPU utilization or replica lag, providing dynamic scaling during traffic spikes. Increasing the instance size of reader instances (Option D) provides more CPU and memory resources to each reader, enabling them to process more read queries and apply changes from the writer faster, which directly reduces replica lag.

Answer

Enable Multi-AZ for the cluster to improve read availability.

Answer

Increase the instance size of the writer instance to improve write throughput.

Question 8

A company uses AWS CloudFormation to manage its infrastructure. The operations team reports that stack updates often fail because of resource conflicts. The team wants to improve the reliability of updates without manual intervention. Which solution provides the MOST automated recovery from update failures?

Accepted Answer

Use the default CloudFormation rollback behavior that automatically reverts changes on failure.. Option D is correct because CloudFormation's built-in rollback behavior automatically reverts all changes made during a failed stack update, restoring the stack to its last known stable state without requiring any custom code or manual intervention. This provides the most automated recovery mechanism as it is natively integrated into the CloudFormation service and requires no additional infrastructure or scripting.

Answer

Use CloudFormation change sets to review and approve all changes before update.

Answer

Write a custom AWS Lambda function that reverts changes when a stack update fails.

Answer

Apply a stack policy to prevent updates to critical resources.

Question 9

An IAM policy is attached to a group. A user in the group tries to terminate an EC2 instance in us-east-1 using the AWS CLI. What will happen?

Accepted Answer

The user can describe instances but cannot terminate instances in any region.. The IAM policy attached to the group allows the user to describe instances (ec2:DescribeInstances) but explicitly denies the ability to terminate instances (ec2:TerminateInstances) in any region. Since the policy is attached to the group, the user inherits these permissions, so they can list instances but any attempt to terminate them will be denied by AWS IAM, regardless of the region specified.

Answer

The user cannot describe instances or terminate instances.

Answer

The user can terminate instances and describe instances.

Answer

The user can describe instances but cannot terminate any instances.

Question 10

A solutions architect runs the command shown in the exhibit. Which statement is true about the output?

Accepted Answer

The command displays the instance ID, instance type, and launch time of three running instances.. The command `aws ec2 describe-instances --query 'Reservations[].Instances[?State.Name==`running`].[InstanceId,InstanceType,LaunchTime]' --output table` filters for running instances and projects only the InstanceId, InstanceType, and LaunchTime fields. The output shows three rows, each representing a running instance with those three attributes. Therefore, option B is correct because it accurately describes the displayed data.

Answer

There are two instances with the Environment=production tag.

Answer

One of the instances is stopped.

Answer

The command lists all instances in the account regardless of tags.

Question 11

A company runs a web application on Amazon EC2 instances behind an Application Load Balancer (ALB). The application uses an Amazon RDS MySQL Multi-AZ DB instance. During a recent load test, the application became unresponsive for several minutes. The monitoring shows that the RDS instance CPU utilization spiked to 100% during the test. The application reads and writes to the same database. Which design change would provide the BEST improvement in database scalability and reduce CPU contention?

Accepted Answer

Create RDS read replicas for the DB instance and route read queries from the application to the replicas.. The correct answer is A because creating RDS read replicas offloads read queries from the primary DB instance, reducing CPU contention from read-heavy workloads. Since the application reads and writes to the same database, directing read traffic to replicas decreases the primary instance's CPU utilization, directly addressing the 100% CPU spike observed during the load test. This improves database scalability by distributing read operations horizontally without altering write capacity.

Answer

Configure an in-memory cache like Amazon ElastiCache to cache frequent queries.

Answer

Increase the instance size of the RDS DB instance to a larger instance type.

Answer

Enable Multi-AZ for the RDS instance to distribute the load across two instances.

Question 12

A company is migrating a large-scale, stateful application to AWS. The application maintains session state in memory on the current on-premises servers. The company needs a solution that preserves session state during migration and minimizes latency for users worldwide. Which strategy should the company use?

Accepted Answer

Use AWS Global Accelerator to gradually shift traffic, and use Amazon ElastiCache for Redis to centralize session state. Option A is correct because AWS Global Accelerator allows you to gradually shift traffic from on-premises to AWS using endpoint weights, minimizing disruption during migration. Amazon ElastiCache for Redis provides a centralized, in-memory session store that preserves session state across the migration, ensuring low-latency access for users worldwide by leveraging Global Accelerator's anycast IP and AWS edge locations.

Answer

Use Amazon Route 53 weighted routing to shift traffic to new EC2 instances, and store session state in Amazon S3

Answer

Use AWS CloudFront to cache static content, and use Amazon DynamoDB for session state

Answer

Use AWS Global Accelerator to shift traffic, and deploy AWS WAF to protect the application

Question 13

A company is planning to modernize a legacy Java application that runs on a single on-premises server. The application uses a proprietary file-based storage system. The company wants to migrate to AWS with the following goals: reduce operational overhead, improve availability, and minimize code changes. Which THREE strategies should the company use? (Choose three.)

Accepted Answer

Use AWS Application Migration Service (MGN) to migrate the application server to Amazon EC2. AWS Application Migration Service (MGN) is correct because it automates the lift-and-shift migration of the on-premises server to Amazon EC2 with minimal downtime and no code changes, directly addressing the goal of reducing operational overhead and minimizing code changes. It replicates the entire server, including the proprietary file-based storage, to AWS, allowing the application to run unchanged.

Answer

Migrate the proprietary storage to Amazon S3

Answer

Refactor the application into microservices and deploy on Amazon EKS

Question 14

A company is migrating a 10 TB Oracle database to Amazon Aurora PostgreSQL. The database is business-critical and must have minimal downtime. The company has set up AWS DMS with ongoing replication from the source. During the migration, the company notices that DMS is failing with an error indicating insufficient memory. What should the company do to resolve this issue and complete the migration?

Accepted Answer

Increase the instance class of the DMS replication instance. AWS DMS replication instances have finite memory allocated to cache changes during ongoing replication (CDC). When the volume of cached changes exceeds the instance's memory, DMS fails with an insufficient memory error. Increasing the instance class of the DMS replication instance (Option B) provides more memory to handle the cache, resolving the error without disrupting the migration.

Answer

Increase the memory on the source Oracle database

Answer

Change the DMS task to use change data capture (CDC) only and skip the full load

Answer

Split the migration into multiple smaller tasks

Question 15

A company is migrating a 2 TB Oracle database to Amazon Aurora PostgreSQL. The database has frequent write operations and the migration must have minimal downtime. The team uses AWS DMS for ongoing replication. After the initial full load, the target Aurora instance becomes unresponsive during ongoing replication. What is the MOST likely cause?

Accepted Answer

The number of logical replication slots on the Aurora PostgreSQL instance exceeds the maximum supported.. The most likely cause is that the number of logical replication slots on the Aurora PostgreSQL instance exceeds the maximum supported. AWS DMS uses logical replication slots to capture ongoing changes from the source Oracle database and apply them to the target Aurora PostgreSQL. Each DMS task creates at least one replication slot on the target. If the number of slots exceeds the Aurora PostgreSQL limit (typically 1 for Aurora Serverless v1 or a configurable limit for provisioned instances), the target instance can become unresponsive due to resource contention or slot management overhead.

Answer

The DMS task is configured to replicate DDL changes, which are not supported for Oracle to Aurora PostgreSQL.

Answer

The DMS task is using full LOB mode, which is not supported with ongoing replication.

Answer

The target Aurora instance's storage is full and cannot accept new writes.

Question 16

A company wants to migrate a legacy monolithic application to AWS with minimal changes. The application currently runs on a single on-premises server with a Microsoft SQL Server database. The company wants to use AWS managed services to reduce operational overhead. Which combination of services should the company use to meet these requirements?

Accepted Answer

AWS Application Migration Service (MGN) to Amazon EC2, and AWS DMS to Amazon RDS for SQL Server. Option B is correct because AWS Application Migration Service (MGN) enables lift-and-shift migration of the on-premises server to Amazon EC2 with minimal changes, while AWS DMS can migrate the Microsoft SQL Server database to Amazon RDS for SQL Server, a fully managed service that reduces operational overhead. This combination meets the requirement of minimal application changes and leverages AWS managed services for the database.

Answer

AWS Application Migration Service (MGN) to Amazon EC2, and AWS DMS to Amazon DynamoDB

Answer

AWS Server Migration Service (SMS) to Amazon EC2, and AWS DMS to Amazon RDS for SQL Server

Answer

AWS CloudFormation to provision EC2 instances, and AWS DMS to Amazon RDS for SQL Server

Question 17

A company is migrating a legacy application that uses SOAP web services to AWS. The application currently runs on a single on-premises server. The company wants to minimize changes and reduce operational overhead. Which approach should the company take?

Accepted Answer

Rehost the application on Amazon EC2 using AWS Application Migration Service (MGN).. Option C is correct because rehosting the application on Amazon EC2 using AWS Application Migration Service (MGN) minimizes changes by lifting and shifting the entire on-premises server, including the SOAP web services, to AWS with minimal modification. This approach reduces operational overhead by automating server replication and cutover, avoiding the need to refactor or containerize the application, which aligns with the requirement to minimize changes.

Answer

Refactor the SOAP web services to RESTful APIs and deploy on Amazon API Gateway and AWS Lambda.

Answer

Containerize the application and deploy it on Amazon ECS using Fargate.

Answer

Use AWS Database Migration Service (DMS) to migrate the database and redeploy the application manually.

Question 18

A company plans to modernize an existing .NET Framework 4.7 application running on Windows Server 2012 R2. The company wants to move to a containerized architecture on AWS with minimal code changes. Which service should the company use to meet these requirements?

Accepted Answer

AWS App2Container (A2C). AWS App2Container (A2C) is specifically designed to containerize existing .NET Framework applications running on Windows Server with minimal code changes. It analyzes the application, generates Docker images, and produces CloudFormation templates for deployment on Amazon ECS or EKS, directly meeting the requirement to modernize a .NET Framework 4.7 application to a containerized architecture without significant refactoring.

Answer

AWS Serverless Application Model (SAM)

Answer

AWS Copilot

Answer

AWS Migration Hub

Question 19

A company is planning to migrate a legacy application to AWS. The application runs on a single server with a monolithic architecture and uses an Oracle database. The migration team wants to reduce licensing costs and improve scalability. Which TWO strategies should the team consider?

Accepted Answer

Replatform the application to use AWS Elastic Beanstalk and Amazon RDS for PostgreSQL.. Option A is correct because replatforming the application to AWS Elastic Beanstalk reduces operational overhead by automating capacity provisioning, load balancing, and scaling, while migrating from Oracle to Amazon RDS for PostgreSQL eliminates Oracle licensing costs and provides a managed database service with built-in high availability and scalability. This approach directly addresses the company's goals of reducing licensing costs and improving scalability without requiring a full application rewrite.

Answer

Refactor the application into microservices and use Amazon DynamoDB for data storage.

Answer

Rehost the application on Amazon EC2 and use Amazon RDS for Oracle with license-included.

Answer

Rehost the application on Amazon EC2 and use Amazon RDS for Oracle with BYOL.

Question 20

A company is using AWS Migration Hub to track a large-scale migration to AWS. The company wants to automate the replatforming of multiple Windows web servers to Amazon EC2 instances running Amazon Linux 2. The migration must be repeatable and minimize manual intervention. Which AWS service should the company use to achieve this?

Accepted Answer

AWS Application Migration Service (MGN). AWS Application Migration Service (MGN) is the correct choice because it automates the replatforming of Windows web servers to Amazon Linux 2 by continuously replicating source servers, performing automated conversion of the OS and applications, and enabling cutover to target EC2 instances with minimal manual intervention. It supports heterogeneous OS migrations (e.g., Windows to Linux) and provides a repeatable, automated workflow that aligns with the company's requirement for a large-scale, repeatable migration.

Answer

AWS OpsWorks for Chef Automate

Answer

AWS Server Migration Service (SMS)

Answer

AWS CloudFormation templates to provision new EC2 instances and migrate data manually