SAP-C02 Practice Test 21 — 15 Questions

Question 1

A company is designing a new data lake on AWS using Amazon S3. The data will be ingested from various sources, including IoT devices, application logs, and streaming data. The data must be processed in near real-time as it arrives. Which combination of services should be used for ingestion and processing?

Accepted Answer

Amazon Kinesis Data Firehose and Amazon Kinesis Data Analytics. Option B is correct because Amazon Kinesis Data Firehose can ingest streaming data and deliver it to S3, and Kinesis Data Analytics can process the data in near real-time. Option A is wrong because S3 Transfer Acceleration is for uploading to S3, not for streaming. Option C is wrong because AWS Glue is a batch ETL service, not real-time. Option D is wrong because Amazon Athena is an interactive query service, not for ingestion.

Answer

Amazon S3 Transfer Acceleration and AWS Lambda

Answer

Amazon Athena and Amazon S3

Answer

AWS Glue and Amazon Redshift

Question 2

A company needs to provide temporary, limited-privilege credentials to mobile app users to access AWS resources. Which AWS service should the architect recommend?

Accepted Answer

Use Amazon Cognito with an identity pool to issue temporary credentials.. AWS Cognito Identity Pools (option C) provide temporary credentials for authenticated users. Option A (IAM users) is not for mobile users. Option B (STS) is for federated users, not directly for mobile. Option D (IAM roles) cannot be assumed directly by mobile apps.

Answer

Create IAM users for each mobile user and distribute access keys.

Answer

Use AWS Security Token Service (STS) directly from the mobile app.

Answer

Create an IAM role and have the mobile app assume it directly.

Question 3

A company is designing a new web application that will run on Amazon EC2 instances behind an Application Load Balancer. The application must handle sudden spikes in traffic without manual intervention. Which scaling approach should they use?

Accepted Answer

Target tracking scaling policies. Option B is correct because target tracking scaling policies automatically adjust capacity based on a target metric. Option A is wrong because simple scaling requires manual intervention for cooldown. Option C is wrong because scheduled scaling is for predictable traffic. Option D is wrong because manual scaling is not automatic.

Answer

Manual scaling

Answer

Scheduled scaling

Answer

Simple scaling policies

Question 4

A startup is building a serverless application using AWS Lambda for business logic and Amazon DynamoDB for data storage. The application must process a high volume of writes to a single DynamoDB table. The development team is concerned about throttling due to hot partitions. Which design should the team implement to avoid throttling?

Accepted Answer

Use a composite primary key with a partition key that has high cardinality, such as a user ID.. Using a composite key with a partition key that has high cardinality, such as a user ID, distributes writes evenly across partitions. Option B (LSI) doesn't help with write distribution. Option C (DAX) is a cache, not a solution for hot partitions. Option D (GSI) is for querying, not for write distribution.

Answer

Enable DynamoDB Accelerator (DAX) to cache write operations.

Answer

Use a global secondary index (GSI) as the primary index for writes.

Answer

Add a local secondary index (LSI) to the table.

Question 5

A company is designing a microservices architecture using Amazon ECS with Fargate. The services need to communicate with each other. The company wants to implement service discovery and load balancing at the application layer. Which TWO services should the company use?

Accepted Answer

AWS Cloud Map. AWS Cloud Map provides service discovery, and Application Load Balancer provides application-layer load balancing. Option B (NLB) is layer 4. Option C (Route 53) is for DNS. Option D (API Gateway) is for API management.

Answer

Amazon API Gateway

Answer

Network Load Balancer (NLB)

Answer

Amazon Route 53

Question 6

A company is designing a disaster recovery solution for a critical application running on Amazon EC2. The application uses an Amazon RDS for MySQL database. The recovery time objective (RTO) is 15 minutes, and the recovery point objective (RPO) is 1 hour. The primary region is us-east-1, and the secondary region is us-west-2. Which solution meets the requirements with the LOWEST cost?

Accepted Answer

Use a cross-region read replica in us-west-2 with MySQL asynchronous replication. Option A is correct because a cross-region read replica with MySQL asynchronous replication provides an RPO of seconds to minutes and can be promoted quickly, meeting RTO and RPO at low cost. Option B is incorrect because Database Migration Service is not designed for real-time replication. Option C is incorrect because Multi-AZ is for high availability within a region, not cross-region DR. Option D is incorrect because automated backups have a restore time longer than 15 minutes typically.

Answer

Use AWS Database Migration Service (DMS) for continuous replication to us-west-2

Answer

Use automated backups and restore to us-west-2 when needed

Answer

Use a Multi-AZ deployment in us-east-1 and failover to a standby instance

Question 7

Refer to the exhibit. An IAM policy allows ec2:Describe* actions on all resources. A developer wants to also allow describing RDS instances. Which action must be added to the policy?

Accepted Answer

rds:Describe*. Option D is correct because RDS describe actions use the rds:Describe* prefix. Option A is incorrect because ec2:Describe* does not cover RDS. Option B is incorrect because rds:List* is not a valid action. Option C is incorrect because rds:Get* is not standard.

Answer

rds:List*

Answer

rds:Get*

Answer

ec2:DescribeRdsInstances

Question 8

A media company is building a video transcoding pipeline using AWS Elemental MediaConvert. The source videos are uploaded to an S3 bucket, and the transcoded outputs are stored in another S3 bucket. The company wants to trigger the transcoding job as soon as a new video is uploaded. The pipeline must handle high volumes of uploads and ensure that no upload is missed. Which solution is MOST reliable and scalable?

Accepted Answer

Configure an S3 event notification to directly invoke an AWS Lambda function that starts the MediaConvert job.. Using S3 Event Notifications with Lambda to invoke MediaConvert is a reliable, serverless pattern. Option B (SQS) adds unnecessary complexity. Option C (SNS to Lambda) is indirect. Option D (CloudWatch Events) is not designed for S3 upload triggers.

Answer

Configure an S3 event notification to publish to an Amazon SNS topic, which triggers an AWS Lambda function that starts the MediaConvert job.

Answer

Use Amazon EventBridge to detect S3 PUT events and route them to a Lambda function.

Answer

Configure an S3 event notification to send events to an Amazon SQS queue, and have a Lambda function poll the queue and start MediaConvert jobs.

Question 9

A company is designing a multi-region active-active application using Amazon DynamoDB global tables. The application requires strong consistency reads. However, global tables only support eventual consistency. What should the solutions architect do to meet the requirement?

Accepted Answer

Design the application to handle eventual consistency using conditional writes and application logic.. Option A is correct. DynamoDB global tables use eventual consistency, but the application can use conditional writes and application-level conflict resolution to achieve strong consistency. Option B is wrong because DynamoDB Accelerator (DAX) is a cache, not a consistency mechanism. Option C is wrong because DynamoDB Streams is for change data capture. Option D is wrong because there is no configuration for strong consistency in global tables.

Answer

Enable strong consistency in the global table configuration.

Answer

Use DynamoDB Streams to replicate data to another region with strong consistency.

Answer

Use DynamoDB Accelerator (DAX) to provide strong consistency reads.

Question 10

A company is deploying a web application on AWS that requires a relational database. The application is read-heavy and expects sudden spikes in traffic. The database must be highly available and perform well under load. Which database configuration meets these requirements?

Accepted Answer

Deploy Amazon RDS in a Multi-AZ configuration and use read replicas to offload read traffic.. Amazon RDS Multi-AZ provides high availability, and read replicas offload read traffic. Option A (Single-AZ) is not highly available. Option C (Multi-AZ without replicas) does not help with read performance. Option D (Memcached) is not a relational database.

Answer

Use Amazon ElastiCache for Memcached as the primary database.

Answer

Deploy Amazon RDS in a Multi-AZ configuration without read replicas.

Answer

Deploy Amazon RDS in a single Availability Zone with a large instance size.

Question 11

A solutions architect is troubleshooting an EC2 instance that is not sending metrics to CloudWatch. The instance is running and has internet connectivity. Based on the exhibit, what is the MOST likely reason?

Accepted Answer

The CloudWatch agent is not installed or running on the instance.. The exhibit shows that monitoring is disabled. Detailed monitoring is required for EC2 metrics at 1-minute frequency, but basic monitoring (5-minute) is enabled by default. However, if the CloudWatch agent is not installed, custom metrics won't be sent. The most likely reason is that the CloudWatch agent is not installed or configured. Option A (no IAM role) is possible but not shown. Option B (security group) is not shown. Option D (wrong region) is unlikely.

Answer

The instance does not have an IAM role that allows sending metrics to CloudWatch.

Answer

The instance's security group is blocking outbound traffic to CloudWatch endpoints.

Answer

The instance is in the wrong AWS region for CloudWatch.

Question 12

A company is designing a new data lake on AWS using Amazon S3. The data must be encrypted at rest. Which TWO options comply with the requirement? (Choose TWO.)

Accepted Answer

Use server-side encryption with Amazon S3 managed keys (SSE-S3). Options A and D are correct because SSE-S3 and SSE-KMS are both server-side encryption options that encrypt data at rest. Option B is incorrect because client-side encryption is not at rest encryption; it is before sending. Option C is incorrect because SSL/TLS is for data in transit. Option E is incorrect because S3 Access Points do not provide encryption.

Answer

Enable SSL/TLS for all data transfers

Answer

Use S3 Access Points with a bucket policy

Answer

Use client-side encryption before uploading

Question 13

A company is designing a new global application that will serve users worldwide. The application uses an Application Load Balancer (ALB) in a single region. To reduce latency for users in other regions, the company wants to cache static content at edge locations. The dynamic content must still be served from the ALB. Which configuration should be used?

Accepted Answer

Amazon CloudFront with multiple origins: S3 for static content and ALB for dynamic content. Option D is correct because Amazon CloudFront can be configured with multiple origins: an S3 bucket for static content and the ALB for dynamic content. CloudFront caches static content at edge locations and forwards dynamic requests to the ALB. Option A is wrong because CloudFront with only the ALB as origin does not separate static and dynamic content. Option B is wrong because Global Accelerator does not cache content; it only accelerates traffic. Option C is wrong because S3 Transfer Acceleration is for fast uploads to S3, not for content delivery.

Answer

AWS Global Accelerator with the ALB as the endpoint

Answer

Amazon CloudFront with the ALB as the origin

Answer

Amazon S3 Transfer Acceleration for static content

Question 14

A company is designing a multi-region active-active application using Amazon Aurora Global Database. The application must have Recovery Point Objective (RPO) of less than 1 second and Recovery Time Objective (RTO) of less than 1 minute in case of a regional failure. Which configuration meets these requirements?

Accepted Answer

Deploy Aurora Global Database with multi-master clusters in two regions.. Aurora Global Database uses storage-based replication with typical RPO of seconds, but for sub-second RPO, multi-master with asynchronous replication (option C) is needed. Option A (single-master) has failover time > 1 minute. Option B (DynamoDB Global Tables) is not Aurora. Option D (read replicas cross-region) has higher RPO.

Answer

Deploy a single Aurora cluster with a primary in one region and a read replica in the secondary region.

Answer

Use cross-region read replicas with synchronous replication.

Answer

Use Amazon DynamoDB Global Tables instead of Aurora.

Question 15

A company is running a containerized application on Amazon ECS with Fargate launch type. The application needs to store persistent data that must be shared across multiple containers in the same task. Which storage option should the company use?

Accepted Answer

Amazon EFS file system. Amazon EFS can be mounted as a volume that is shared across containers in the same ECS task. Option A (EBS) cannot be shared across containers. Option B (S3) is object storage, not a file system. Option C (FSx for Lustre) is for high-performance computing.

Answer

Amazon S3 bucket mounted using s3fs

Answer

Amazon FSx for Lustre

Answer

Amazon EBS volume