SAP-C02 Mock Exam 83 — 25 Questions

Question 1

An IAM policy allows a user to start and stop EC2 instances but denies terminating instances under a specific condition. Which action will the policy deny?

Accepted Answer

Terminating an EC2 instance in the eu-west-1 region. The Deny statement applies when the condition "StringNotEquals" is true, meaning the requested region is NOT us-east-1. So terminating an instance in a region other than us-east-1 is denied. Terminating in us-east-1 is allowed (since the condition is not met). Starting and stopping are allowed by the first statement.

Answer

Starting an EC2 instance in the us-west-2 region

Answer

Stopping an EC2 instance in the eu-west-1 region

Answer

Terminating an EC2 instance in the us-east-1 region

Question 2

During an on-premises to AWS migration using AWS MGN (Application Migration Service), the replication is stuck at 99% for the last few GB. The source server is a Linux database server with a large InnoDB redo log. What is the most likely cause?

Accepted Answer

Continuous writes to the database redo logs preventing final sync. AWS MGN uses changed block tracking (CBT) to replicate changed blocks. Large InnoDB redo logs are continuously written, causing constant changes and preventing final sync. Option A (network bandwidth) would affect all stages. Option B (disk I/O) might slow down but not stall. Option D (source server reboot) might reset replication but not cause a stall at 99%.

Answer

High disk I/O on the source server

Answer

The source server needs reboot after MGN agent installation

Answer

Insufficient network bandwidth between source and AWS

Question 3

A company wants to migrate its on-premises virtualized workloads to AWS using the VMware Cloud on AWS service. The company currently uses VMware vSphere for virtualization. What is the primary benefit of using VMware Cloud on AWS for this migration?

Accepted Answer

It allows the company to continue using existing VMware management tools and processes. VMware Cloud on AWS allows organizations to use the same VMware tools and processes, minimizing the learning curve and operational changes. It does not automatically reduce costs, nor does it provide better performance or eliminate the need to refactor applications.

Answer

It provides better application performance compared to running on AWS native compute

Answer

It reduces the total cost of ownership by eliminating the need for any hardware maintenance

Answer

It eliminates the need to refactor applications for the cloud

Question 4

A company is migrating a monolithic e-commerce application to AWS. The application currently runs on a single on-premises server running Windows Server and SQL Server. The company wants to minimize re-architecting effort and time to migrate. Which migration strategy should the company use?

Accepted Answer

Rehost the application on Amazon EC2 Windows instances with SQL Server. Option C is correct: Rehost (lift-and-shift) involves moving the application as-is to AWS, minimizing changes and time. Option A (Refactor) requires significant re-architecting. Option B (Replatform) involves some optimization but still requires changes. Option D (Retire) is not applicable as the application is needed.

Answer

Retire the application and replace it with a SaaS solution

Answer

Refactor the application to use microservices on Amazon ECS

Answer

Replatform the application to use Amazon RDS for SQL Server

Question 5

A company is planning a hybrid cloud migration and needs to establish a dedicated network connection between its on-premises data center and AWS with consistent low latency. Which AWS service should be used?

Accepted Answer

AWS Direct Connect. AWS Direct Connect provides a dedicated private network connection from on-premises to AWS, offering consistent low latency. Option A is wrong because Site-to-Site VPN uses the public internet. Option B is wrong because Client VPN is for individual clients. Option D is wrong because Transit Gateway is a hub for connecting networks, not a direct connection method.

Answer

AWS Client VPN

Answer

AWS Transit Gateway

Answer

AWS Site-to-Site VPN

Question 6

A company is migrating its on-premises file server to Amazon FSx for Windows File Server. The company has 2 TB of data and a 100 Mbps internet connection. The migration must be completed within 5 days. What should the company do?

Accepted Answer

Use AWS Snowcone to physically ship the data.. Option B is correct because Snowcone is ideal for small data. Option A is wrong because 100 Mbps is too slow. Option C is wrong because Snowball Edge is oversized. Option D is wrong because Direct Connect takes too long to provision.

Answer

Order a new AWS Direct Connect connection.

Answer

Use AWS DataSync over the internet to transfer data.

Answer

Use AWS Snowball Edge to transfer data.

Question 7

A company is planning to migrate a large-scale Hadoop cluster to Amazon EMR. The cluster currently processes batch jobs using a mix of MapReduce and Spark. The company wants to minimize changes to the existing code and operational processes. Which migration approach should the architect recommend?

Accepted Answer

Rehost the cluster on Amazon EMR using the same MapReduce and Spark configurations. Rehosting the Hadoop cluster on Amazon EMR with the same configuration allows the existing MapReduce and Spark code to run with minimal changes. Refactoring to use only Spark would require code changes. Replatforming to Amazon Redshift would change the architecture. Retiring and using Athena would require significant changes to data storage and queries.

Answer

Refactor all jobs to use only Apache Spark on Amazon EMR

Answer

Retire the cluster and use Amazon Athena for ad-hoc queries

Answer

Replatform the data processing to use Amazon Redshift Spectrum

Question 8

A CloudFormation stack creation command is run with a parameter. The template.yaml includes a parameter declared as follows:
Parameters:
  InstanceTypeParameter:
    Type: String
    Default: t2.micro
    AllowedValues:
      - t2.micro
      - t2.small
      - t2.medium
The stack creation fails with the error: "Value (t2.nano) for parameter InstanceTypeParameter is invalid. Must be one of: t2.micro, t2.small, t2.medium". What is the most likely cause?

Accepted Answer

The parameter was overridden by a previous stack operation or a different parameter file. The error indicates that the value passed is 't2.nano', but the command shows 't2.micro'. This suggests that the parameter value was overridden elsewhere, perhaps in a different command or a previous stack operation. The command itself is correct. The template defines allowed values. The issue is not a typo in the command, but an override. The most likely cause is that the parameter was passed incorrectly in a prior run or the CLI used a different value.

Answer

The AWS CLI is using a deprecated version

Answer

The template.yaml file was modified after the command was run

Answer

The CLI command had a typo in the parameter value

Question 9

A company is migrating a stateful application that uses local storage on EC2. They want to modernize to a stateless architecture using Amazon EFS for shared storage. What is the best approach to migrate the existing data?

Accepted Answer

Copy data from local storage to EFS using AWS DataSync during a maintenance window. The recommended approach is to copy data from local storage to EFS using AWS DataSync or rsync during a maintenance window, then reconfigure the application to use EFS. Option A (attach the local volume to the new instance) is not stateless. Option B (use S3 with Fsx) is overcomplicated. Option D (use EBS snapshots) retains statefulness.

Answer

Use AWS Fsx for Lustre with S3 as data repository

Answer

Detach the EBS volume and attach it to the new EC2 instance

Answer

Create an EBS snapshot and restore it on the new instance

Question 10

A company is migrating a large .NET application from Windows Server on-premises to AWS. The application uses a SQL Server database. The company wants to reduce licensing costs by using open-source alternatives where possible. However, the application code heavily uses SQL Server-specific features like CLR integration, linked servers, and T-SQL stored procedures. What is the most cost-effective migration strategy?

Accepted Answer

Rehost the application on Amazon EC2 Windows Server and use Amazon RDS for SQL Server with a license-included option. Replatforming the database to Amazon RDS for SQL Server retains the SQL Server-specific features while reducing operational overhead. Moving to Aurora PostgreSQL or MySQL would require significant code changes. Rehosting on EC2 SQL Server does not reduce licensing costs.

Answer

Rehost both application and database on Amazon EC2 with SQL Server licenses brought to AWS

Answer

Refactor the application to use a microservices architecture with separate databases

Answer

Replatform the database to Amazon Aurora PostgreSQL and rewrite the database code to be compatible

Question 11

A company is migrating workloads to AWS using AWS Application Migration Service (AWS MGN). The source servers are running on VMware vSphere. After installing the AWS Replication Agent on the source servers, the migration waves are set up. However, during a test cutover, the test instance fails to launch with an error 'Insufficient IP address space in the target VPC'. What is the most likely cause?

Accepted Answer

The target VPC subnet does not have enough available IP addresses. Option B is correct: AWS MGN creates instances with IPs from the target VPC subnet; insufficient IPs cause launch failure. Option A (replication settings) affect data replication, not launch. Option C (IAM permissions) typically cause access denied, not IP error. Option D (license agreement) would show different errors.

Answer

The replication settings specify a subnet with an incorrect CIDR block

Answer

The IAM role for AWS MGN does not have permissions to create network interfaces

Answer

The AWS MGN service is not enabled in the target AWS Region

Question 12

A company is migrating a legacy application to AWS. The application has hardcoded IP addresses and uses non-HTTP protocols. The solutions architect needs to minimize changes to the application code. Which migration pattern should be used?

Accepted Answer

Rehost the application on EC2 instances with the same IP addresses using Elastic IPs.. Rehosting (lift-and-shift) with private IP addresses on EC2 and security groups allows the application to retain its IP configurations with minimal changes. Option A is wrong because refactoring to use DNS requires code changes. Option B is wrong because containerization requires code modifications. Option D is wrong because AWS Global Accelerator is for traffic management, not for replacing hardcoded IPs without code changes.

Answer

Use AWS Global Accelerator to assign static IP addresses.

Answer

Containerize the application and use service discovery.

Answer

Refactor the application to use DNS names instead of IP addresses.

Question 13

A company is migrating its on-premises file server to AWS. The file server contains 5 TB of data and is accessed by hundreds of users. The company wants a fully managed file storage solution that supports SMB protocol. Which TWO AWS services should the architect consider?

Accepted Answer

Amazon FSx for Windows File Server. Amazon FSx for Windows File Server provides fully managed Windows file shares with SMB support. Amazon EFS supports NFS, not SMB. Amazon S3 is object storage, not file storage. AWS Storage Gateway File Gateway provides SMB file shares but is not fully managed (requires gateway appliance). Amazon FSx for Lustre is for high-performance computing, not SMB.

Answer

Amazon FSx for Lustre

Answer

Amazon S3

Answer

Amazon Elastic File System (Amazon EFS)

Question 14

A company wants to modernize a batch processing application that runs on EC2 instances using a cron job. The job processes files from an S3 bucket and takes about 2 hours. They want to reduce operational overhead. Which service should they use?

Accepted Answer

AWS Batch. AWS Batch is designed for batch computing and can automatically provision EC2 instances, run the job, and terminate them, reducing overhead. Option A (Lambda) has a 15-minute timeout. Option B (Step Functions) orchestrates but does not run the compute. Option D (ECS with Fargate) is possible but requires more configuration than AWS Batch for batch jobs.

Answer

Amazon ECS with Fargate

Answer

AWS Lambda

Answer

AWS Step Functions

Question 15

A company is modernizing a monolithic application by decomposing it into microservices. The application currently uses a single MySQL database. The company wants to use a polyglot persistence approach, with different microservices using the most appropriate database type. The team has limited experience with NoSQL databases. Which strategy should the team use to minimize risk during the migration?

Accepted Answer

Use the strangler fig pattern to incrementally replace parts of the monolith with microservices, starting with a non-critical function. Using the strangler fig pattern allows incremental migration, replacing parts of the monolith with microservices one at a time. This reduces risk because each microservice can be tested independently. Starting with a non-critical service provides learning opportunity without high impact.

Answer

Rewrite the entire application as microservices using a new database for each service from the start

Answer

Migrate the entire monolith to a containerized application on Amazon ECS in one go

Answer

Use AWS DMS to replicate the monolith's database to multiple target databases simultaneously

Question 16

A company is migrating a large-scale Oracle data warehouse to Amazon Redshift. The migration must minimize downtime. The source database is 10 TB and runs on a single on-premises server with 1 Gbps network. Which approach should be used for the initial data load?

Accepted Answer

Use AWS Snowball Edge to transfer data to S3, then copy to Redshift.. Using AWS Snowball Edge devices for offline transfer avoids network bandwidth limitations and provides fast, secure transfer of large data volumes. Option A is wrong because 1 Gbps network would take over 22 hours and may cause congestion. Option B is wrong because DMS works for ongoing replication but initial load over network is slow. Option D is wrong because S3 Transfer Acceleration only speeds up S3 uploads, not the full pipeline.

Answer

Use AWS DMS to migrate data directly to Redshift over the network.

Answer

Use AWS DMS with ongoing replication after initial load via network.

Answer

Use S3 Transfer Acceleration to upload data to S3, then COPY to Redshift.

Question 17

A company is migrating a legacy PHP application running on a single on-premises server to AWS. The application stores session data locally on the server's filesystem. The company wants to achieve high availability and elasticity for the application on AWS. What should the company do to handle session state in the new architecture?

Accepted Answer

Store session data in Amazon ElastiCache for Redis. Using ElastiCache for session storage decouples session state from individual servers, allowing the application to scale horizontally. Sticky sessions with an ALB ties a user to a specific instance, which reduces availability if that instance fails. Storing sessions on EFS is possible but slower than ElastiCache. Re-architecting to use Cognito is unnecessary for session state.

Answer

Configure an Application Load Balancer with sticky sessions enabled

Answer

Use Amazon EFS to share the session files across multiple EC2 instances

Answer

Refactor the application to use Amazon Cognito for session management

Question 18

A company is migrating a legacy .NET Framework 4.8 application to AWS. The application uses Windows authentication integrated with Active Directory and relies on a shared file system for configuration files. The company wants to minimize operational overhead and use managed services. Which combination of AWS services should the company use to modernize the application?

Accepted Answer

AWS Managed Microsoft AD, Amazon FSx for Windows File Server, and AWS Elastic Beanstalk for .NET on Windows. Option C is correct: AWS Managed Microsoft AD provides Windows authentication, FSx for Windows File Server provides a managed shared file system, and App Runner is not suitable for .NET; Elastic Beanstalk with Windows platform supports .NET and reduces overhead. Option A uses EFS which does not support Windows authentication natively. Option B uses RDS for SQL Server which is not needed. Option D uses S3 which cannot replace a shared file system for Windows apps.

Answer

AWS Managed Microsoft AD, Amazon EFS, and AWS Elastic Beanstalk for .NET on Windows

Answer

Amazon Cognito, Amazon RDS for SQL Server, and AWS Lambda

Answer

AWS Directory Service for Microsoft AD, Amazon S3, and AWS App Runner

Question 19

A company is migrating a stateful application that maintains session state in memory on a single server. The migration target is a highly available architecture on AWS. Which design should be used to preserve session state without modifying the application?

Accepted Answer

Use an Application Load Balancer with sticky sessions.. Using an Application Load Balancer with sticky sessions (session affinity) ensures that requests from a user are sent to the same target, preserving in-memory session state without code changes. Option A is wrong because ElastiCache would require application code to store/retrieve sessions. Option B is wrong because DynamoDB similarly requires code changes. Option D is wrong because Network Load Balancer does not support sticky sessions.

Answer

Use Amazon DynamoDB to store session state.

Answer

Use a Network Load Balancer with cross-zone load balancing.

Answer

Use Amazon ElastiCache to store session state externally.

Question 20

A company is planning to migrate its on-premises Oracle database to Amazon RDS for Oracle using AWS DMS. The database is 5 TB in size with continuous changes. Which TWO steps should the company take to minimize downtime during the migration?

Accepted Answer

Set up ongoing replication using change data capture (CDC) from the start.. Option A is correct because using a large instance type for DMS improves performance. Option C is correct because setting up ongoing replication reduces downtime. Option B is wrong because the full load should be done before CDC. Option D is wrong because direct connect is not required. Option E is wrong because Multi-AZ is for high availability, not migration speed.

Answer

Enable Multi-AZ on the target RDS instance during migration.

Answer

Use AWS Direct Connect to establish a dedicated network connection.

Answer

Perform a full load migration first, then apply CDC after the cutover window.

SAP-C02 Mock Exam 83 — 25 Questions

Exhibit

SAP-C02 Mock Exam 83 — 25 Questions

Exhibit