SAP-C02 Mock Exam 75 — 25 Questions

Question 1

A company is migrating a legacy application that uses a third-party identity provider (IdP) for authentication. The application currently uses SAML 2.0. The company wants to use AWS IAM Identity Center for centralized access management. What is the best approach to integrate the IdP with AWS?

Accepted Answer

Configure IAM Identity Center to use the existing IdP as the identity source via SAML 2.0 federation. Option A is correct because AWS IAM Identity Center supports SAML 2.0 federation with external IdPs. Option B is wrong because creating IAM users duplicates identities. Option C is wrong because Cognito is for customer-facing apps, not corporate SSO. Option D is wrong because Directory Service is for Active Directory, not generic SAML.

Answer

Use AWS Directory Service for Microsoft Active Directory to synchronize with the IdP

Answer

Create IAM users for each employee and assign groups and permissions

Answer

Use Amazon Cognito user pools with the IdP as a SAML identity provider

Question 2

A company is modernizing a legacy application by breaking it into microservices. The application uses a shared MySQL database. The team wants to refactor the database to use Amazon DynamoDB for better scalability. Which migration strategy should be used?

Accepted Answer

Use the Strangler Fig pattern to incrementally migrate data to DynamoDB. Option A is correct because the Strangler Fig pattern allows gradual migration of data and logic. Option B (retire) is for decommissioning. Option C (rehost) does not change database. Option D (replatform) may still use relational.

Answer

Rehost the database to Amazon RDS

Answer

Replatform the database to Amazon Aurora

Answer

Retire the existing database and switch to DynamoDB

Question 3

A company is migrating a large number of files from on-premises to Amazon S3. The files are accessed frequently and require low latency. Which TWO AWS services can help accelerate the migration? (Choose TWO.)

Accepted Answer

AWS DataSync. AWS DataSync can transfer data over the network with optimization. AWS Snowball Edge is for large-scale offline data transfer. Option B is wrong because S3 Transfer Acceleration speeds up uploads but is not a migration service. Option D is wrong because AWS Storage Gateway is for hybrid storage. Option E is wrong because AWS CloudFormation is for infrastructure provisioning.

Answer

AWS Storage Gateway

Answer

AWS CloudFormation

Answer

Amazon S3 Transfer Acceleration

Question 4

A company is migrating its on-premises data center to AWS. The company has over 200 applications, each with varying dependencies. The migration team wants to use AWS Migration Hub to track the migration progress. Which approach should the team take to ensure successful tracking and minimize manual effort?

Accepted Answer

Use AWS Application Discovery Service to discover dependencies and then use AWS Migration Hub to track the migration of each application.. Option D is correct because using AWS Application Discovery Service to collect data about on-premises servers and their dependencies helps create a migration plan, and Migration Hub can then track progress across multiple tools. Option A is incorrect because manual tagging is error-prone and not automated. Option B is incorrect because CloudWatch is for monitoring, not tracking migration progress. Option C is incorrect because Systems Manager is for management, not specifically for migration tracking.

Answer

Use Amazon CloudWatch dashboards to monitor the health of on-premises servers.

Answer

Use AWS Systems Manager to automate the migration of each application.

Answer

Manually create a spreadsheet of all applications and their dependencies, and update it weekly.

Question 5

A company is migrating a large Oracle database to Amazon Aurora PostgreSQL. The migration must have minimal downtime and support ongoing replication. Which AWS service should the company use?

Accepted Answer

AWS Database Migration Service. Option A is correct because AWS Database Migration Service (DMS) supports ongoing replication from Oracle to Aurora PostgreSQL with minimal downtime. Option B is wrong because AWS Schema Conversion Tool is used for schema conversion, not data replication. Option C is wrong because AWS Server Migration Service is for server migration, not databases. Option D is wrong because AWS Application Discovery Service is for discovery, not migration.

Answer

AWS Application Discovery Service

Answer

AWS Server Migration Service

Answer

AWS Schema Conversion Tool

Question 6

A company is migrating a legacy on-premises .NET application to AWS. The application uses Windows Authentication and relies on Active Directory. The company wants to minimize code changes. Which solution should the architect recommend?

Accepted Answer

Deploy the application on Amazon EC2 instances joined to an AWS Managed Microsoft AD directory.. Option B is correct because it allows the application to use Windows Authentication with minimal code changes by joining EC2 instances to a Managed AD domain. Option A is wrong because Cognito is for external user pools, not Windows Auth. Option C is wrong because WorkDocs is for document sharing. Option D is wrong because SSM does not provide AD authentication.

Answer

Use AWS Systems Manager to store credentials and inject them at runtime.

Answer

Migrate the application to Amazon WorkDocs and configure single sign-on.

Answer

Use Amazon Cognito user pools for authentication.

Question 7

A company is modernizing a monolithic Java application to run on Amazon ECS with Fargate. The application uses a proprietary configuration management system. Which TWO AWS services can replace the configuration management system to store and retrieve configuration at runtime?

Accepted Answer

AWS AppConfig, a feature of AWS Systems Manager.. Options B and D are correct. Option B (Parameter Store) and Option D (AppConfig) are designed for configuration management. Option A is wrong because DynamoDB is a database, not a config store. Option C is wrong because S3 is object storage. Option E is wrong because Secrets Manager is for secrets.

Answer

Amazon S3 with versioning enabled.

Answer

AWS Secrets Manager.

Answer

Amazon DynamoDB with application-side caching.

Question 8

A company is migrating a multi-tier web application to AWS. The application uses a commercial database that requires a license. The company wants to reduce licensing costs. Which migration strategy should be considered?

Accepted Answer

Replatform the database to Amazon RDS for an open-source engine like PostgreSQL. Option C is correct because replatforming to Amazon RDS for an open-source engine eliminates commercial license costs. Option A is wrong because rehosting to EC2 still requires the same license. Option B is wrong because refactoring to use a different database may involve significant rework. Option D is wrong because repurchasing to SaaS may not be suitable.

Answer

Rehost the database to EC2 with the same database software

Answer

Repurchase a Software as a Service (SaaS) alternative

Answer

Refactor the application to use Amazon DynamoDB

Question 9

A company wants to migrate 500 TB of data from an on-premises data center to Amazon S3. The company has a 1 Gbps dedicated network connection to AWS. What is the most cost-effective and time-efficient migration method?

Accepted Answer

Use AWS Snowball Edge to physically ship the data to AWS.. Option D is correct because AWS Snowball Edge provides physical storage for large data transfers, avoiding long transfer times over a 1 Gbps link. Option A is wrong because S3 Transfer Acceleration improves speed but still uses the network. Option B is wrong because AWS DataSync is designed for smaller, ongoing transfers. Option C is wrong because Direct Connect alone does not transfer data; you still need to copy over the connection.

Answer

Use S3 Transfer Acceleration to upload data over the existing internet connection.

Answer

Use AWS DataSync to transfer data over the dedicated network.

Answer

Establish an AWS Direct Connect connection and use S3 multipart upload.

Question 10

An administrator attempts to start an EC2 instance that was previously stopped. The instance fails to start. The administrator runs the CLI command shown in the exhibit. What is the most likely cause of the failure?

Accepted Answer

The instance is in the 'stopped' state and needs to be started.. Option A is correct because the instance is in 'stopped' state (Code 80), not 'running'. Option B is wrong because the state is stopped, not pending. Option C is wrong because there is no error in the output. Option D is wrong because the output shows the instance exists.

Answer

The instance ID is incorrect.

Answer

The instance is in 'pending' state and will start automatically.

Answer

The instance has been terminated.

Question 11

A company is migrating a critical application to AWS and needs to ensure business continuity. The application must be able to fail over to a different AWS Region with a Recovery Time Objective (RTO) of 15 minutes and a Recovery Point Objective (RPO) of 1 minute. Which strategy should the company use?

Accepted Answer

Multi-Region active-active deployment with synchronous replication. Option B is correct because an active-active multi-Region architecture with data replication can achieve RPO of 1 minute and RTO of 15 minutes. Option A (backup restore) has higher RTO/RPO. Option C (pilot light) has longer RTO. Option D (warm standby) may have longer RTO.

Answer

Warm standby in another Region

Answer

Pilot light in another Region

Answer

Backup and restore to another Region

Question 12

Refer to the exhibit. A company has this IAM policy attached to a group. A user in the group tries to terminate an EC2 instance in us-east-1 with the tag 'Environment: staging'. What happens?

Accepted Answer

The termination is denied because the condition requires the 'Environment' tag to be 'production'.. The TerminateInstances action has a condition that requires the tag 'Environment: production'. Since the instance has 'staging', the condition is not met, so the action is denied. Options A, B, and D are incorrect because the condition explicitly requires 'production'.

Answer

The instance is terminated because the policy allows TerminateInstances.

Answer

The termination is denied because the Resource is not the instance's ARN.

Answer

The instance is terminated because the condition is not evaluated.

Question 13

A company is migrating a distributed application that uses a custom TCP protocol between components. The application is deployed on-premises across multiple servers. The company wants to use AWS without modifying the application code. Which approach should the company take to migrate the application while maintaining low latency between components?

Accepted Answer

Use Amazon EC2 instances in a Placement Group within a single VPC to ensure low latency.. Option D is correct because using Placement Groups with EC2 instances ensures low latency and high throughput between components, and the application can run unchanged. Option A is incorrect because VPC peering is for connectivity between VPCs, not for low latency within a VPC. Option B is incorrect because Direct Connect improves connectivity to on-premises but not within AWS. Option C is incorrect because a VPN is not needed for within AWS communication.

Answer

Use AWS Direct Connect to connect the on-premises servers to AWS and keep the application on-premises.

Answer

Use VPC Peering to connect the application components across different VPCs.

Answer

Use a VPN connection between the on-premises environment and AWS VPC.

Question 14

A company is migrating a web application to AWS and wants to use Amazon ECS with Fargate. The application needs to store session state. Which AWS service should the company use for session state management?

Accepted Answer

Amazon ElastiCache for Redis. Option B is correct because Amazon ElastiCache for Redis is commonly used for session state management in containerized applications. Option A is wrong because Amazon DynamoDB can also be used, but ElastiCache is more commonly recommended for session state. Option C is wrong because Amazon S3 is not suitable for low-latency session state. Option D is wrong because Amazon RDS is for relational databases, not session state.

Answer

Amazon S3

Answer

Amazon DynamoDB

Answer

Amazon RDS

Question 15

A company is migrating a multi-tier web application to AWS. The application uses sticky sessions (session affinity). The company wants to use an Application Load Balancer (ALB). How should the architect configure the ALB to support sticky sessions?

Accepted Answer

Enable stickiness on the target group and set a cookie expiration duration.. Option D is correct because ALB supports sticky sessions by enabling stickiness on the target group and setting a duration. Option A is wrong because NLB does not support cookies for stickiness. Option B is wrong because stickiness is set on target group, not listener. Option C is wrong because stickiness is a feature of the load balancer, not an external service.

Answer

Configure the ALB listener to use a custom header for session affinity.

Answer

Use a Network Load Balancer (NLB) and enable proxy protocol.

Answer

Place an Amazon ElastiCache cluster in front of the ALB to store session data.

Question 16

A company is migrating a legacy database to Amazon RDS. The database currently runs on a single server with a 2 TB volume. The migration must have less than 30 minutes of downtime. Which approach should be used for the initial data load?

Accepted Answer

Use AWS Database Migration Service (DMS) with ongoing replication. Option A is correct because AWS DMS can perform a full load and then ongoing replication to minimize downtime. Option B is wrong because exporting to S3 and importing takes longer and doesn't support continuous replication. Option C is wrong because creating a read replica requires a compatible source. Option D is wrong because a native dump/restore requires significant downtime for a 2 TB database.

Answer

Use a native database dump and restore during a maintenance window

Answer

Export the database to Amazon S3 and import into RDS using native tools

Answer

Create a read replica from the source database to RDS

Question 17

A company plans to migrate its on-premises VMware VMs to AWS. The company wants to automate the migration of VM images and minimize manual effort. Which AWS service should the company use?

Accepted Answer

AWS VM Import/Export. Option C is correct because AWS VM Import/Export allows importing VM images. Option A is wrong because AWS Server Migration Service (SMS) is now part of Application Migration Service. Option B is wrong because AWS DMS is for databases. Option D is wrong because AWS DataSync is for file data.

Answer

AWS DataSync

Answer

AWS Server Migration Service (SMS)

Answer

AWS Database Migration Service (DMS)

Question 18

A company is migrating a legacy Windows application to AWS. The application requires a shared file system accessible from multiple EC2 instances in the same VPC. Which AWS service should the company use to meet this requirement with minimal application changes?

Accepted Answer

Amazon FSx for Windows File Server. Option A is correct because Amazon EFS provides a scalable, shared file system for Linux instances; for Windows, Amazon FSx for Windows File Server is the appropriate managed share. Option B (Amazon S3) is object storage and not a file system. Option C (Amazon EBS) is block storage and can be attached to only one instance. Option D (AWS Storage Gateway) is for hybrid storage, not native file sharing.

Answer

Amazon EBS

Answer

Amazon S3

Answer

AWS Storage Gateway

Question 19

A company is performing a server migration to AWS using AWS Server Migration Service (SMS). The company needs to automate the replication of servers and track the migration status. Which THREE components are required for this solution? (Choose three.)

Accepted Answer

AWS SMS connector installed on the on-premises hypervisor. Options A, C, and D are correct. SMS connector is installed on-premises. AWS Migration Hub tracks status. AWS CloudFormation can automate infrastructure. Option B (AWS DMS) is for databases. Option E (AWS SCT) is for schema conversion.

Answer

AWS Schema Conversion Tool

Answer

AWS Database Migration Service

Question 20

A company is migrating a critical application to AWS and needs to ensure that the migration has minimal downtime. The application uses a SQL Server database. The company wants to use AWS Database Migration Service (DMS) for the migration. What should the company do to minimize downtime during the database migration?

Accepted Answer

Use DMS with ongoing replication (change data capture) to keep the target database synchronized, then perform a brief cutover.. Option B is correct because using change data capture (CDC) with DMS allows ongoing replication from the source to the target, so when you cut over, only a brief pause is needed. Option A is incorrect because full load only captures a snapshot, requiring downtime for the final sync. Option C is incorrect as it describes a full load. Option D is incorrect because validation does not help minimize downtime.

Answer

Use DMS with validation enabled and then truncate the target before cutover.

Answer

Use DMS with full load only and schedule the migration during a maintenance window.

Answer

Perform a full load migration using DMS and then manually copy any remaining data.