SAP-C02 Mock Exam 80 — 25 Questions

Question 1

A company is migrating a legacy on-premises application to AWS. The application uses a shared file system for user home directories. Which AWS service should the company use to minimize changes to the application while providing scalable, highly available file storage?

Accepted Answer

Amazon EFS. Option B (Amazon EFS) is correct because it provides a scalable, fully managed NFS file system that can be mounted by multiple EC2 instances, minimizing application changes. Option A (S3) is object storage, not a file system. Option C (EBS) is block storage attached to a single instance. Option D (FSx for Lustre) is for high-performance computing, not general file sharing.

Answer

Amazon FSx for Lustre

Answer

Amazon EBS

Answer

Amazon S3

Question 2

A company is migrating a .NET application from Windows Server to AWS. The application uses Microsoft SQL Server. The company wants to reduce licensing costs and minimize operational overhead. Which migration strategy should be recommended?

Accepted Answer

Replatform to Amazon RDS for PostgreSQL. Option A (Replatform to Amazon RDS for SQL Server) reduces operational overhead but not licensing costs. Option D (Replatform to Amazon RDS for PostgreSQL) reduces licensing costs because PostgreSQL is open-source, and minimizes overhead. Option B (rehost) keeps high licensing. Option C (refactor to .NET Core on Linux) may require significant changes.

Answer

Replatform to Amazon RDS for SQL Server

Answer

Refactor the application to .NET Core on Amazon Linux

Answer

Rehost to Amazon EC2 with SQL Server on Windows

Question 3

An organization wants to migrate 50 TB of data from an on-premises NAS to Amazon S3 over a slow internet connection. The migration must be completed within two weeks. Which approach is most appropriate?

Accepted Answer

Use AWS Snowball Edge. Option C (AWS Snowball Edge) is correct because it can handle large data volumes over slow networks. Option A (AWS DataSync) may be too slow. Option B (S3 Transfer Acceleration) still uses internet. Option D (AWS Direct Connect) may take time to set up.

Answer

Use AWS DataSync over the internet

Answer

Use Amazon S3 Transfer Acceleration

Answer

Set up AWS Direct Connect

Question 4

A company is migrating a stateful application that uses local disks for caching to AWS. The application requires high-performance, low-latency storage that can be attached to a single EC2 instance. Which THREE AWS services or features should the company consider for the cache storage?

Accepted Answer

Amazon EBS io2 Block Express. Option A (Instance store), Option C (EBS io2 Block Express), and Option E (Local NVMe instance store) are correct. Instance store provides high-performance local storage but ephemeral. EBS io2 Block Express provides high-performance persistent block storage. Local NVMe instance store is high-performance and local. Option B (EFS) is shared file system. Option D (S3) is object storage.

Answer

Amazon EFS

Answer

Amazon S3

Question 5

A company is migrating a multi-tier web application to AWS. The application includes an Apache web server and a MySQL database. The operations team needs to scale the web tier based on CPU utilization while maintaining a static IP for the database. Which combination of AWS services should the solutions architect use?

Accepted Answer

Auto Scaling group for web tier with an Application Load Balancer; Amazon EC2 instance for MySQL database with an Elastic IP. An Auto Scaling group with an Application Load Balancer provides scaling for web servers. An Elastic IP on an EC2 instance provides a static IP for the database. RDS does not support Elastic IP directly.

Answer

Auto Scaling group for web tier with a Network Load Balancer; Amazon RDS for MySQL database with a static Elastic IP

Answer

Auto Scaling group for web tier with an Application Load Balancer; Amazon RDS for MySQL database with a static Elastic IP

Answer

Auto Scaling group for web tier with a Classic Load Balancer; Amazon EC2 instance for MySQL database with an Elastic IP

Question 6

A company plans to migrate 50 on-premises virtual machines (VMs) to AWS. The migration must be completed within 2 weeks. The VMs run various operating systems and have a total data size of 10 TB. The company has a low-bandwidth internet connection (50 Mbps). Which migration approach minimizes the time to transfer the data?

Accepted Answer

Use AWS Snowball Edge to transfer the VM images physically. AWS Snowball Edge is a physical device that can handle large data transfers over low-bandwidth connections. AWS Application Migration Service relies on network replication, which would be too slow. Direct Connect would require longer setup time. VPN is also network-based and slow.

Answer

Set up an AWS Direct Connect connection to increase bandwidth

Answer

Create a VPN tunnel to AWS and use rsync to copy the data

Answer

Use AWS Application Migration Service to replicate the VMs continuously

Question 7

A company is migrating data to Amazon S3 and requires that all objects uploaded to the bucket 'my-bucket' are encrypted with SSE-S3. The above IAM policy is attached to an IAM user. An application using the user's credentials attempts to upload an object without specifying the x-amz-server-side-encryption header. What will happen?

Accepted Answer

The upload fails because the Deny statement denies the request when encryption is not AES256.. Option D is correct. The Allow statement grants permission only if encryption is AES256. The Deny statement denies if encryption is not AES256. Since no encryption header is specified, the condition in the Deny statement evaluates to true (StringNotEquals), and the request is denied. Option A is wrong because the Deny statement explicitly denies. Option B is wrong because AES256 is required. Option C is wrong because the bucket policy does not override the IAM policy; both are evaluated.

Answer

The upload succeeds because the Allow statement grants permission.

Answer

The upload fails because the bucket policy overrides the IAM policy.

Answer

The upload succeeds because the object is encrypted with the default SSE-S3.

Question 8

A company wants to assess its on-premises environment for migration to AWS. The assessment should include server utilization, dependencies, and recommendations. Which AWS service provides this capability?

Accepted Answer

AWS Application Discovery Service. Option B (AWS Migration Hub) provides a central location to track migrations, but not the discovery. Option C (AWS Application Discovery Service) is correct as it discovers on-premises servers, dependencies, and provides utilization data. Option A (AWS Systems Manager) is for management, not discovery. Option D (AWS CloudFormation) is for provisioning.

Answer

AWS CloudFormation

Answer

AWS Migration Hub

Answer

AWS Systems Manager

Question 9

A company has a legacy application that runs on Windows Server 2008 R2 on-premises. The application is no longer supported by the vendor, but the company still needs to run it for compliance reasons. They are migrating to AWS and want to minimize changes. What should the solutions architect recommend?

Accepted Answer

Use an Amazon EC2 instance with a Windows Server 2008 R2 BYOL AMI. Using a Windows Server 2008 R2 BYOL AMI allows the company to run the legacy OS without changes. AWS does not provide mainstream support for 2008 R2, but BYOL allows it. Refactoring or replacing the application would require changes. Upgrading the OS might break the application.

Answer

Refactor the application to run on a supported Windows Server version

Answer

Upgrade to Windows Server 2019 and use AWS License Manager

Answer

Replace the application with a SaaS alternative

Question 10

A company is migrating a monolithic application to AWS. The application currently runs on a single on-premises server and uses a local MySQL database. To reduce migration risk, the company wants to minimize application code changes. Which AWS service should the company use to migrate the database with minimal application modification?

Accepted Answer

AWS Database Migration Service (AWS DMS). Option A is correct because AWS Database Migration Service (DMS) supports homogeneous migrations with minimal changes. Option B is wrong because RDS requires schema changes. Option C is wrong because S3 is for object storage. Option D is wrong because Snowball is for large data transfers, not live migrations.

Answer

Amazon RDS for MySQL

Answer

AWS Snowball

Answer

Amazon S3

Question 11

A company is migrating a web application to AWS. The application consists of a stateless web tier, a stateful application tier, and a MySQL database. The company wants to use AWS managed services to improve scalability and reduce operational overhead. Which THREE services should the company use? (Choose THREE.)

Accepted Answer

Application Load Balancer. Options A, C, and E are correct. Option A: ALB for load balancing. Option C: ElastiCache for session state. Option E: RDS for MySQL. Option B is wrong because EC2 is not managed. Option D is wrong because S3 is not for stateful data.

Answer

Amazon EC2 Auto Scaling

Answer

Amazon S3

Question 12

A company is migrating a legacy application to AWS using the rehost (lift-and-shift) strategy. The application uses a proprietary database that is not supported by Amazon RDS. The company wants to automate the migration of multiple servers and minimize downtime. Which AWS service should be used to automate the server migration?

Accepted Answer

AWS Application Migration Service (AWS MGN).. Option B is correct because AWS Application Migration Service (MGN) automates lift-and-shift with minimal downtime. Option A is wrong because AWS CloudFormation is for infrastructure provisioning, not migration. Option C is wrong because AWS DMS is for databases, not servers. Option D is wrong because AWS Server Migration Service (SMS) is older and less automated compared to MGN.

Answer

AWS CloudFormation to recreate the server configuration.

Answer

AWS Server Migration Service (SMS).

Answer

AWS Database Migration Service (AWS DMS) for the database and manual server migration.

Question 13

A company is refactoring a legacy .NET application to run on AWS Lambda. The application currently uses Windows authentication and Active Directory. Which approach should the company use to support authentication in the new architecture?

Accepted Answer

Use AWS Directory Service for Microsoft Active Directory and connect Lambda to the directory via VPC.. C is correct because AWS Managed Microsoft AD provides Active Directory integration for Lambda via VPC and AD Connector. A is wrong because Cognito is for external identities. B is wrong because IAM is for AWS service access, not Windows auth. D is wrong because Security Token Service generates temporary credentials, not authentication.

Answer

Use Amazon Cognito user pools for authentication.

Answer

Use AWS Identity and Access Management (IAM) roles to authenticate users.

Answer

Use AWS Security Token Service (STS) to issue tokens for authentication.

Question 14

A company is migrating a legacy Windows-based .NET application to AWS. The application uses a SQL Server database and a proprietary authentication mechanism that relies on Active Directory. The company wants to reduce operational overhead and licensing costs. Which combination of AWS services should the architect recommend for the migration?

Accepted Answer

Migrate the application to Amazon EC2 Windows instances and the database to Amazon RDS for SQL Server. Using EC2 for the application (lift-and-shift) and RDS for SQL Server reduces overhead from database management and licensing. Moving to RDS for MySQL would require code changes for compatibility. Moving to Windows containers would require containerization effort. Moving to Aurora would not support SQL Server.

Answer

Migrate the application to Amazon EC2 Linux instances and use Amazon Aurora with PostgreSQL compatibility

Answer

Containerize the application on Amazon ECS with Windows containers and use Amazon RDS for SQL Server

Answer

Migrate the application to AWS Elastic Beanstalk for Windows and the database to Amazon RDS for MySQL

Question 15

A company is migrating an on-premises Oracle database to Amazon RDS for Oracle. The database is 2 TB in size and the company has a 1 Gbps AWS Direct Connect connection. They need to minimize downtime. Which approach should the solutions architect recommend?

Accepted Answer

Use AWS DMS with full load followed by ongoing replication using change data capture (CDC). AWS Database Migration Service (DMS) with change data capture (CDC) allows continuous replication and minimal downtime. Export/import would cause downtime. AWS Schema Conversion Tool (SCT) is for schema conversion, not data migration. Snowball is for offline data transfer and would delay the process.

Answer

Export the database using Oracle Data Pump and import into RDS

Answer

Use AWS Snowball Edge to transfer the database files and then restore to RDS

Answer

Use AWS Schema Conversion Tool to convert the schema and AWS DMS for data migration without CDC

Question 16

Refer to the exhibit. A company is deploying a CloudFormation stack for a web application. The stack creation fails with the error 'The parameter DBPassword is not defined'. What is the most likely cause?

Accepted Answer

The DBPassword parameter is not defined in the Parameters section. The template uses !Ref DBPassword, but DBPassword is not defined in the Parameters section of the template. CloudFormation requires parameters to be declared before they can be referenced. The other options are not indicated by the error message.

Answer

The DBPassword parameter is misspelled in the template

Answer

The DBPassword parameter is defined but used in a condition

Answer

The DBPassword parameter is defined but the value is too short

Question 17

A company is migrating a legacy application to AWS. The application uses a proprietary database that is not supported by Amazon RDS. The company wants to minimize changes and use a managed service. Which TWO options should the company consider? (Choose TWO.)

Accepted Answer

Run the database on Amazon EC2 with Amazon EBS volumes.. Options A and C are correct. Option A: Run the database on EC2 with EBS, which is a common approach for unsupported databases. Option C: Use a partner solution from AWS Marketplace that supports the database. Option B is wrong because RDS is not supported. Option D is wrong because S3 is not a database. Option E is wrong because DynamoDB is NoSQL and would require significant changes.

Answer

Use Amazon RDS with a custom engine.

Answer

Migrate the database to Amazon S3 and use S3 Select for queries.

Answer

Convert the database to Amazon DynamoDB.

Question 18

A company is migrating a monolithic application to AWS. The application currently runs on a single on-premises server with a MySQL database. The company wants to reduce operational overhead and improve scalability. Which combination of AWS services should the company use?

Accepted Answer

Use AWS Elastic Beanstalk to deploy the application and Amazon RDS for MySQL as the database.. Option D is correct because using Elastic Beanstalk for the application and RDS for MySQL reduces overhead and provides scalability. Option A is wrong because EC2 and RDS still require manual management of EC2. Option B is wrong because DynamoDB is NoSQL and not compatible with MySQL. Option C is wrong because Aurora Serverless is not MySQL-compatible without changes, and Fargate requires containerization.

Answer

Containerize the application and run on Amazon ECS with AWS Fargate, and use Amazon Aurora Serverless for MySQL.

Answer

Migrate the database to Amazon DynamoDB and host the application on AWS Lambda.

Answer

Host the application on Amazon EC2 and use Amazon RDS for MySQL.

Question 19

A company is using AWS Application Migration Service (MGN) to migrate hundreds of on-premises servers to AWS. After the migration, some servers fail a health check. What is the most efficient way to remediate the failed servers?

Accepted Answer

Launch test instances from MGN, diagnose the issues, then update the source servers and perform a final cutover.. D is correct because MGN's test and cutover instances allow iterative testing and remediation. A is wrong because rehydrating from backup is time-consuming. B is wrong because it restarts the process from scratch. C is wrong because CloudEndure is a different service (now part of MGN).

Answer

Rerun the MGN replication and perform a new cutover.

Answer

Restore the servers from the latest AMI and re-run the health check.

Answer

Use AWS CloudEndure Migration to re-migrate the servers.

Question 20

A company is migrating a monolithic application to AWS. The application consists of a web server, an application server, and a MySQL database. The web server and application server run on the same EC2 instance. The company wants to minimize changes during migration. Which migration strategy should the architect recommend?

Accepted Answer

Rehost using AWS Application Migration Service (AWS MGN). Rehosting (lift-and-shift) moves the application as-is to EC2, requiring minimal changes. Replatforming would involve changes like using RDS. Refactoring would require code changes. Retiring is not applicable as the application is still needed.

Answer

Refactor the application into microservices on Amazon ECS

Answer

Replatform by migrating the database to Amazon RDS

Answer

Retire the application and replace it with a SaaS solution