SAP-C02 Practice Test 46 — 15 Questions

Question 1

Refer to the exhibit. A CloudFormation template is used to create an S3 bucket. After deployment, the bucket is created but objects are not automatically deleted after 30 days as expected. What is the most likely cause?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The lifecycle rule only applies to noncurrent versions, not current objects.. The lifecycle rule in the template likely uses `NoncurrentVersionExpirationInDays`, which only applies to noncurrent versions, not current objects. To delete current objects after 30 days, an `ExpirationInDays` rule is needed. Versioning being enabled (option C) is necessary for the noncurrent version expiration to work, but the issue is that current objects are not expiring. The bucket name conflict (option B) would cause a deployment failure, not a lifecycle misconfiguration. Region-specific prefix (option D) is not required for lifecycle rules.

Answer

The bucket name conflicts with an existing bucket.

Answer

Versioning is not enabled on the bucket.

Answer

The lifecycle rule requires a region-specific prefix.

Question 2

A company is using the 7 Rs strategy to migrate a monolithic application to AWS. They want to move the application to the cloud without modifying the code but plan to later refactor parts of it. Which migration strategy should they choose initially?

Accepted Answer

Rehost. Rehost (lift-and-shift) is the correct initial strategy because it moves the application to AWS without modifying any code, aligning with the company's goal to first migrate without changes and later refactor. Relocate (A) involves moving the hypervisor, not the application itself. Refactor (B) involves rewriting or re-architecting the application, which is not desired initially. Replatform (C) involves making some cloud optimizations that could require minor code changes.

Answer

Relocate

Answer

Refactor

Answer

Replatform

Question 3

A company is migrating a web application to AWS and wants to use a containerized architecture. The application consists of multiple microservices that communicate via REST APIs. The company needs a solution that minimizes operational overhead for managing containers and orchestrating microservices. Which AWS service should the company use?

Accepted Answer

Amazon ECS with AWS Fargate launch type.. Amazon ECS with the Fargate launch type is the correct choice because it allows you to run containers without managing the underlying servers or cluster, thus minimizing operational overhead. Fargate is a serverless compute engine for containers, perfectly suited for microservices requiring minimal management. Option A (EKS with managed node groups) still requires management of worker nodes and is more complex. Option B (Lambda) is for functions, not containerized microservices. Option C (EC2 with Docker) involves significant operational overhead for managing instances and Docker.

Answer

Amazon EKS with managed node groups.

Answer

AWS Lambda functions for each microservice.

Answer

Amazon EC2 with Docker installed on each instance.

Question 4

A company is planning to migrate a large .NET application to AWS. The application uses IIS and SQL Server. Which TWO AWS services can be used to rehost the application with minimal changes?

Accepted Answer

Amazon EC2 with Windows Server. (Amazon EC2 with Windows Server) and Option D (Amazon RDS for SQL Server) are correct. EC2 allows rehosting the web server, and RDS for SQL Server provides a managed database. Option A (Amazon Aurora) is not SQL Server compatible. Option C (AWS Elastic Beanstalk) may require changes. Option E (AWS Lambda) is for serverless.

Answer

Amazon Aurora

Answer

AWS Elastic Beanstalk

Answer

AWS Lambda

Question 5

A company is migrating a large-scale data warehouse from on-premises to Amazon Redshift. The current on-premises solution uses a proprietary columnar storage format. The company needs to minimize data transformation effort. Which approach should the company take?

Accepted Answer

Use AWS Glue to convert the proprietary format to Apache Parquet and load into Amazon Redshift.. AWS Glue can crawl the proprietary columnar storage format and convert it to Apache Parquet, a columnar format efficiently loaded into Amazon Redshift via COPY from S3, minimizing data transformation effort. Option A is incorrect because the COPY command cannot directly load from on-premises storage; data must first be staged in Amazon S3 in a supported format. Option C is incorrect because AWS DMS is designed for migrating relational databases, not proprietary file formats. Option D is incorrect because Amazon Kinesis Data Firehose is for streaming real-time data, not batch migration of existing large-scale data.

Answer

Use the Amazon Redshift COPY command to load data directly from the on-premises storage.

Answer

Use AWS Database Migration Service (DMS) to migrate the data directly to Redshift.

Answer

Use Amazon Kinesis Data Firehose to stream the data to Redshift.

Question 6

A company is migrating a web application to AWS. They want to use the same domain name for both the development and production environments, but route traffic based on the source IP address. Which AWS service can accomplish this?

Accepted Answer

Amazon Route 53 with geolocation routing policy. Amazon Route 53 with geolocation routing policy allows you to route traffic based on the geographic location of the source IP address, which meets the requirement of using the same domain name for different environments based on client IP. ELB distributes traffic within a region and does not consider source IP for routing. AWS Global Accelerator uses anycast IPs and cannot route based on source IP. Amazon CloudFront is a CDN that can cache content but cannot route based on source IP at the DNS level.

Answer

Elastic Load Balancer (ELB)

Answer

AWS Global Accelerator

Answer

Amazon CloudFront

Question 7

A company is migrating a batch processing workload to AWS. The workload reads input files from an on-premises NFS server, processes them, and writes output files. The company wants to use AWS managed services and minimize operational overhead. Which TWO AWS services should the company use to replace the on-premises NFS server? (Choose TWO.)

Accepted Answer

AWS DataSync to transfer files from on-premises to Amazon EFS.. Options B and E are correct. AWS DataSync efficiently transfers data from the on-premises NFS server to Amazon EFS, and Amazon EFS provides a fully managed NFS file system that the batch processing workload can use directly. Option A (S3 with S3 File Gateway) is not ideal because S3 File Gateway presents S3 as a file share but adds complexity. Option C (Storage Gateway File Gateway) can provide an NFS mount, but DataSync is specifically for data transfer, and for ongoing access, EFS is better. Option D (EBS with shared snapshot) is wrong because EBS is block storage, not file, and shared snapshots do not provide a writable file system.

Answer

Amazon S3 with S3 File Gateway.

Answer

AWS Storage Gateway File Gateway.

Answer

Amazon EBS with a shared snapshot.

Question 8

A company is migrating a legacy .NET Framework 4.7 application to AWS. The application uses Windows Server 2012 R2, IIS, and SQL Server 2014. The company wants to modernize the application to reduce licensing costs and operational overhead. Which THREE actions should the company take? (Choose THREE.)

Accepted Answer

Rehost the application on Amazon EC2 Windows instances with SQL Server Web Edition. Rehosting the application on Amazon EC2 Windows instances with SQL Server Web Edition reduces licensing costs compared to the current Enterprise or Standard edition. Option C is correct because rebuilding the application on .NET Core allows deployment on Linux, reducing Windows licensing costs and enabling modernization. Option E is correct because migrating the database to Amazon RDS for SQL Server reduces operational overhead by automating backups, patching, and management. Option A is incorrect because upgrading to Standard Edition on-premises does not reduce licensing costs or operational overhead. Option D is incorrect because containerizing a legacy .NET Framework 4.7 application with Docker on ECS Fargate is not straightforward due to Windows container limitations and does not address the database licensing costs.

Answer

Upgrade SQL Server to the Standard Edition on the current on-premises server before migrating

Answer

Containerize the application using Docker and deploy on Amazon ECS with AWS Fargate

Question 9

A company is migrating a large-scale batch processing system from on-premises to AWS. The system runs millions of short-lived jobs each day. The company wants to minimize operational overhead and cost. Which AWS compute service should the company use?

Accepted Answer

AWS Batch. AWS Batch is specifically designed for batch computing workloads, handling millions of short-lived jobs efficiently by automatically provisioning compute resources and scaling based on job demand. It integrates with Spot Instances to reduce costs. Option A is wrong because EC2 with Spot Fleet requires manual management of instances and scaling, increasing operational overhead. Option B is wrong because ECS with Fargate is optimized for containerized applications, but AWS Batch provides more specialized features for batch job scheduling and cost optimization. Option C is wrong because Lambda has a maximum execution timeout of 15 minutes and is intended for short, event-driven functions, not suitable for batch processing.

Answer

Amazon EC2 with Spot Fleet

Answer

Amazon ECS with AWS Fargate

Answer

AWS Lambda

Question 10

A company is migrating a multi-tier application to AWS. The application has a web tier, application tier, and database tier. The company wants to use AWS services to improve scalability and reduce costs. Currently, the on-premises infrastructure is underutilized. What is the most cost-effective migration strategy?

Accepted Answer

Rehost (lift-and-shift) to Amazon EC2 using AWS Application Migration Service, then right-size instances and purchase Reserved Instances.. The most cost-effective strategy for a migration with underutilized on-premises infrastructure is to lift-and-shift to EC2, right-size the instances to match actual usage, and purchase Reserved Instances to save costs. This approach minimizes changes and leverages AWS discounts. Options A and B involve rearchitecting or replatforming which are more costly and time-consuming. Option D does not consider right-sizing and leads to overspending.

Answer

Refactor the application to run on containers using Amazon EKS with Fargate.

Answer

Replatform the web tier to AWS Elastic Beanstalk and the database to Amazon RDS.

Answer

Purchase compute-heavy EC2 instances to handle peak loads and use On-Demand pricing.

Question 11

A company is migrating a web application to AWS and wants to decouple the frontend and backend tiers to improve scalability. The frontend runs on Amazon EC2 behind an Application Load Balancer (ALB). The backend processes orders asynchronously. Which service should the company use to decouple the tiers?

Accepted Answer

Amazon Simple Queue Service (SQS). For decoupling frontend and backend asynchronously, Amazon Simple Queue Service (SQS) is the appropriate service. It allows the frontend to send order messages to a queue, and the backend components poll and process them independently. Option A (Amazon MQ) is a managed message broker for existing protocols like JMS, but SQS is simpler and more scalable for this use case. Option C (Amazon SNS) is a pub/sub service, not designed for point-to-point decoupling with pull-based consumers. Option D (Amazon Kinesis Data Streams) is for real-time streaming data, not for decoupling web tiers.

Answer

Amazon MQ

Answer

Amazon Simple Notification Service (SNS)

Answer

Amazon Kinesis Data Streams

Question 12

A company is migrating a batch processing workload to AWS. The workload runs a Java application that processes files from an S3 bucket. The company wants to minimize operational overhead. Which AWS service should the company use to run the Java application?

Accepted Answer

AWS Lambda. (AWS Lambda) is correct because it allows running Java code in response to S3 events with no server management, minimizing operational overhead. AWS Lambda supports Java runtime, can be triggered by S3 object creation events, and automatically scales. Options A (Amazon EC2) and B (Amazon ECS with EC2 launch type) require managing EC2 instances or cluster, increasing overhead. Option C (AWS Batch) is designed for batch jobs but still requires compute environments (EC2 or Fargate) and is more complex than Lambda for simple file processing.

Answer

Amazon EC2

Answer

Amazon ECS with EC2 launch type

Answer

AWS Batch

Question 13

A company is migrating a legacy on-premises application to AWS. The application uses a proprietary database that is not supported by Amazon RDS. The migration must minimize downtime and require minimal changes to the application. Which migration strategy should the company use?

Accepted Answer

Rehost the application on Amazon EC2 instances and migrate the database using AWS Database Migration Service (DMS) with ongoing replication.. Rehosting (lift-and-shift) the application on Amazon EC2 allows the proprietary database to run without modification. Using AWS Database Migration Service (DMS) with ongoing replication minimizes downtime by keeping the database synchronized until cutover. Option A is incorrect because the proprietary database is not supported by Amazon RDS, so migrating to RDS is not feasible without changing the database engine. Option C is incorrect because refactoring to Amazon Aurora would require modifying the application code to use Aurora's query interface, resulting in significant changes. Option D is incorrect because replacing the database with Amazon DynamoDB would necessitate rewriting the entire database access layer, which is not minimal change.

Answer

Migrate the database to Amazon RDS with a compatible engine and modify connection strings.

Answer

Refactor the application to use Amazon Aurora and modify the code to use the Aurora query interface.

Answer

Replace the database with Amazon DynamoDB and rewrite database access layer.

Question 14

A company is migrating a legacy application to AWS and needs to decouple the application components. The application currently uses a monolithic architecture with direct calls between components. Which AWS services can help decouple the components? (Choose THREE.)

Accepted Answer

Amazon Simple Queue Service (SQS). Amazon SQS (Option A), Amazon SNS (Option B), and Amazon EventBridge (Option E) are correct because they all enable asynchronous messaging and event-driven decoupling between application components. SQS provides message queues for decoupling producers and consumers, SNS supports pub/sub messaging, and EventBridge routes events from various sources. AWS Step Functions (Option C) is designed for orchestrating workflows, not primarily for decoupling. Amazon Kinesis Data Streams (Option D) is used for real-time streaming analytics, not general decoupling.

Answer

AWS Step Functions

Answer

Amazon Kinesis Data Streams

Question 15

Refer to the exhibit. A company has attached this IAM policy to an IAM role used by an application running on an EC2 instance in a VPC with CIDR 10.0.0.0/16. The application is unable to read objects from the S3 bucket. What is the most likely cause?

Accepted Answer

The condition key aws:SourceIp uses the private IP of the instance, but S3 sees the public IP.. The IAM policy uses the `aws:SourceIp` condition key with the private IP address of the EC2 instance (10.0.0.x). However, when the instance accesses S3, the request originates from the instance's public IP address (or the NAT gateway's public IP). Since the `aws:SourceIp` condition checks the source IP of the request, and it expects the private IP, the condition fails and denies access to the S3 bucket. Therefore, the most likely cause is that the condition key uses the private IP but S3 sees the public IP (option C). Option A is incorrect because the instance has an IAM role attached (implied by the policy being attached to the role). Option B is incorrect because the `s3:GetObject` action is allowed, and `s3:ListBucket` is not required to read objects if the bucket policy allows it. Option D is incorrect because the bucket policy is not mentioned and the issue lies with the IAM policy condition.

Answer

The EC2 instance does not have an IAM instance profile.

Answer

The policy does not allow the s3:ListBucket action.

Answer

The S3 bucket policy denies access.