SAP-C02 Accelerate Workload Migration and Modernization — 15 Questions

Question 1

A company is migrating a large-scale, stateful application to AWS. The application maintains session state in memory on the current on-premises servers. The company needs a solution that preserves session state during migration and minimizes latency for users worldwide. Which strategy should the company use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use AWS Global Accelerator to gradually shift traffic, and use Amazon ElastiCache for Redis to centralize session state. AWS Global Accelerator allows you to gradually shift traffic from on-premises to AWS using endpoint weights, minimizing disruption during migration. Amazon ElastiCache for Redis provides a centralized, in-memory session store that preserves session state across the migration, ensuring low-latency access for users worldwide by leveraging Global Accelerator's anycast IP and AWS edge locations.

Answer

Use Amazon Route 53 weighted routing to shift traffic to new EC2 instances, and store session state in Amazon S3

Answer

Use AWS CloudFront to cache static content, and use Amazon DynamoDB for session state

Answer

Use AWS Global Accelerator to shift traffic, and deploy AWS WAF to protect the application

Question 2

A company is using AWS Migration Hub to track a large-scale migration to AWS. The company wants to automate the replatforming of multiple Windows web servers to Amazon EC2 instances running Amazon Linux 2. The migration must be repeatable and minimize manual intervention. Which AWS service should the company use to achieve this?

Accepted Answer

AWS Application Migration Service (MGN). AWS Application Migration Service (MGN) is the correct choice because it automates the replatforming of Windows web servers to Amazon Linux 2 by continuously replicating source servers, performing automated conversion of the OS and applications, and enabling cutover to target EC2 instances with minimal manual intervention. It supports heterogeneous OS migrations (e.g., Windows to Linux) and provides a repeatable, automated workflow that aligns with the company's requirement for a large-scale, repeatable migration.

Answer

AWS OpsWorks for Chef Automate

Answer

AWS Server Migration Service (SMS)

Answer

AWS CloudFormation templates to provision new EC2 instances and migrate data manually

Question 3

A company is migrating a monolithic .NET application to AWS. The application uses a SQL Server database with complex stored procedures and tightly coupled components. The migration team wants to minimize refactoring and reduce licensing costs. Which migration strategy should the team use?

Accepted Answer

Rehost the application on Amazon EC2 and the database on EC2 with SQL Server using Bring Your Own License (BYOL).. Rehosting (lift-and-shift) the monolithic .NET application on Amazon EC2 and the SQL Server database on EC2 with BYOL minimizes refactoring effort and reduces licensing costs by leveraging existing SQL Server licenses. This strategy avoids the complexity of rewriting stored procedures or decoupling tightly coupled components, which is critical for a migration focused on speed and cost reduction.

Answer

Refactor the application to .NET Core and use Amazon RDS for MySQL to eliminate Windows licensing.

Answer

Rearchitect the application to microservices and use Amazon DynamoDB for the database.

Answer

Replatform the database to Amazon Aurora with PostgreSQL compatibility to reduce licensing costs.

Question 4

A company is migrating a 2 TB Oracle database to Amazon Aurora PostgreSQL. The database has frequent write operations and the migration must have minimal downtime. The team uses AWS DMS for ongoing replication. After the initial full load, the target Aurora instance becomes unresponsive during ongoing replication. What is the MOST likely cause?

Accepted Answer

The number of logical replication slots on the Aurora PostgreSQL instance exceeds the maximum supported.. The most likely cause is that the number of logical replication slots on the Aurora PostgreSQL instance exceeds the maximum supported. While AWS DMS itself does not create replication slots on the target Aurora instance, multiple DMS tasks or other replication processes can create slots on the target. Aurora PostgreSQL has a default limit of 1 slot for Aurora Serverless v1 or a configurable limit for provisioned instances. Exceeding this limit can cause resource contention and make the instance unresponsive during ongoing replication.

Answer

The DMS task is configured to replicate DDL changes, which are not supported for Oracle to Aurora PostgreSQL.

Answer

The DMS task is using full LOB mode, which is not supported with ongoing replication.

Answer

The target Aurora instance's storage is full and cannot accept new writes.

Question 5

A company is migrating a 5 TB Microsoft SQL Server database to Amazon RDS for SQL Server. The migration must have minimal downtime. The team uses AWS DMS with ongoing replication. During the full load, the task fails with an error indicating that the source server's transaction log is full. What should the team do to resolve this issue?

Accepted Answer

Increase the source server's transaction log size and set the log retention to a higher value.. The error indicates the source transaction log is full during the full load phase of AWS DMS. Increasing the transaction log size and setting a higher log retention value prevents the log from filling up while DMS reads it for ongoing replication. This allows the full load to complete without interruption, addressing the root cause directly.

Answer

Stop the DMS task, take a native backup of the source, restore it to RDS, and then start DMS with ongoing replication.

Answer

Pause the DMS task, create a larger source instance, and restart the task.

Answer

Switch the DMS task to use batch-optimized apply mode.

Question 6

A company is planning to migrate a legacy application to AWS. The application runs on a single server with a monolithic architecture and uses an Oracle database. The migration team wants to reduce licensing costs and improve scalability. Which TWO strategies should the team consider?

Accepted Answer

Replatform the application to use AWS Elastic Beanstalk and Amazon RDS for PostgreSQL.. Replatforming the application to AWS Elastic Beanstalk reduces operational overhead by automating capacity provisioning, load balancing, and scaling, while migrating from Oracle to Amazon RDS for PostgreSQL eliminates Oracle licensing costs and provides a managed database service with built-in high availability and scalability. This approach directly addresses the company's goals of reducing licensing costs and improving scalability without requiring a full application rewrite.

Answer

Refactor the application into microservices and use Amazon DynamoDB for data storage.

Answer

Rehost the application on Amazon EC2 and use Amazon RDS for Oracle with license-included.

Answer

Rehost the application on Amazon EC2 and use Amazon RDS for Oracle with BYOL.

Question 7

A company is migrating a legacy .NET Framework 4.7 web application to AWS. The application currently runs on Windows Server 2012 R2 with IIS and uses SQL Server Express for local storage. The company wants to minimize re-architecture and reduce operational overhead. Which migration strategy should the company use?

Accepted Answer

Rehost the application on Amazon EC2 Windows instances using an AWS Migration Acceleration Program (MAP) partner tool.. Rehosting (lift-and-shift) the .NET Framework 4.7 application to Amazon EC2 Windows instances minimizes re-architecture and reduces operational overhead. The application is tightly coupled to Windows Server and IIS, and SQL Server Express is a local database; rehosting preserves the existing architecture without code changes. Using an AWS MAP partner tool streamlines the migration process, aligning with the goal of minimizing changes.

Answer

Retire the application and replace it with a SaaS-based solution.

Answer

Refactor the application to use .NET Core and deploy on Linux containers with Amazon ECS.

Answer

Replatform the application to use AWS Elastic Beanstalk with a SQL Server Express Multi-AZ RDS instance.

Question 8

A retail company is migrating its on-premises e-commerce platform to AWS. The platform consists of a load-balanced web tier, an application tier, and a MySQL database. The company wants to modernize the database by migrating to Amazon Aurora MySQL. The migration must have minimal downtime and support rollback. The database is 2 TB in size and has high write activity. The company has set up an AWS Direct Connect connection. Which approach should the company take to migrate the database with minimal downtime?

Accepted Answer

Use AWS SCT to convert the schema, then use AWS DMS with a full load and ongoing replication (CDC) task to keep the target in sync until cutover.. AWS DMS with a full load and ongoing change data capture (CDC) task enables continuous replication of high-write activity from the on-premises MySQL database to Amazon Aurora MySQL, minimizing downtime by keeping the target synchronized until cutover. The CDC component captures incremental changes after the full load, allowing a near-zero downtime migration with the ability to roll back by stopping replication and reverting to the source.

Answer

Use AWS SCT to convert the schema, then use AWS DMS with a full load task to migrate the data.

Answer

Use mysqldump to export the database, transfer the dump via AWS Direct Connect, and import into Aurora MySQL.

Answer

Use the AWS Schema Conversion Tool (SCT) to convert the schema, then set up an Aurora Replica from the on-premises source using native MySQL replication.

Question 9

Match each AWS compute service to its use case.

Accepted Answer

Amazon EC2: Full control over virtual servers in the cloud, including OS and software.. The correct matches are: EC2 for full control over virtual servers, Lambda for serverless event-driven code, and ECS for Docker containers. Common confusions include mixing up serverless features with EC2.

Answer

Amazon EC2: Run code without provisioning or managing servers, event-driven execution.

Question 10

Match each AWS networking concept to its definition.

Accepted Answer

VPC: A virtual network dedicated to your AWS account.. A VPC is a logically isolated virtual network. Subnets are subdivisions of the VPC. An Internet Gateway provides internet access to public subnets, while a NAT Gateway provides outbound internet access to private subnets. Security Groups control instance-level traffic.

Answer

VPC: A service that provides a dedicated physical network for your account.

Answer

Internet Gateway: Allows instances in a private subnet to access the internet.

Question 11

A company is migrating a critical workload to AWS and needs to ensure business continuity. The workload runs on a single EC2 instance with a 500 GB EBS volume. The company requires a Recovery Time Objective (RTO) of 2 hours and a Recovery Point Objective (RPO) of 15 minutes. Which solution meets these requirements with the least operational overhead?

Accepted Answer

Use Amazon EBS snapshots with a 15-minute frequency and automate recovery with AWS Backup.. AWS Backup with EBS snapshots taken every 15 minutes meets the 15-minute RPO, and restoring the volume plus relaunching the instance can be completed well within the 2-hour RTO. AWS Backup provides a managed, policy-driven snapshot schedule with vaulting and lifecycle rules, which minimizes operational overhead compared to custom scripting. This is the least-overhead solution that satisfies both RPO and RTO.

Answer

Create an AMI of the instance every 15 minutes and launch a new instance from the latest AMI in case of failure.

Answer

Deploy the workload on Amazon RDS Multi-AZ and enable automatic failover.

Answer

Use AWS Elastic Disaster Recovery to continuously replicate the EC2 instance to another Region.

Question 12

A company is migrating a legacy .NET application to AWS. The application uses Windows authentication and integrates with on-premises Active Directory. The company wants to use AWS Managed Microsoft AD to reduce administrative overhead. However, after migration, the application fails to authenticate users. What is the most likely cause?

Accepted Answer

The application is using NTLM authentication, which is not supported by AWS Managed Microsoft AD without a trust relationship.. AWS Managed Microsoft AD is a true Microsoft AD running on AWS-managed Windows Server domain controllers, but it does not natively support NTLM authentication for resources outside its own domain unless a trust relationship (forest or external) is established with the on-premises AD. The legacy .NET application likely relies on NTLM (common in older Windows authentication stacks), and without a trust, the managed AD cannot validate NTLM credentials from the on-premises domain. Therefore, the most likely cause is the missing trust relationship required for NTLM authentication.

Answer

The security group for the application servers does not allow inbound traffic on port 389.

Answer

AWS Managed Microsoft AD does not support LDAP queries.

Answer

The application is not configured to use the correct DNS servers for the AWS Managed Microsoft AD domain.

Question 13

A company is migrating a large-scale data warehouse from on-premises to Amazon Redshift. The current on-premises solution uses a proprietary columnar storage format. The company needs to minimize data transformation effort. Which approach should the company take?

Accepted Answer

Use AWS Glue to convert the proprietary format to Apache Parquet and load into Amazon Redshift.. AWS Glue can crawl the proprietary columnar storage format and convert it to Apache Parquet, a columnar format efficiently loaded into Amazon Redshift via COPY from S3, minimizing data transformation effort. Option A is incorrect because the COPY command cannot directly load from on-premises storage; data must first be staged in Amazon S3 in a supported format. Option C is incorrect because AWS DMS is designed for migrating relational databases, not proprietary file formats. Option D is incorrect because Amazon Kinesis Data Firehose is for streaming real-time data, not batch migration of existing large-scale data.

Answer

Use the Amazon Redshift COPY command to load data directly from the on-premises storage.

Answer

Use AWS Database Migration Service (DMS) to migrate the data directly to Redshift.

Answer

Use Amazon Kinesis Data Firehose to stream the data to Redshift.

Question 14

A company is migrating a legacy CRM application to AWS. The application uses a proprietary database that is not supported by Amazon RDS. The company wants to minimize licensing costs. The current on-premises deployment uses a single server. Which migration strategy should the company use?

Accepted Answer

Rehost the application on Amazon EC2 and install the same proprietary database on an EC2 instance.. Rehosting (lift-and-shift) the application on EC2 with the same proprietary database minimizes licensing costs by using existing licenses, and avoids the need to refactor or replace the database. Option B is wrong because replacing the database with a SaaS alternative may increase costs and complexity. Option C is wrong because refactoring to use a different database engine would require significant application changes and may incur new licensing costs. Option D is wrong because DMS cannot migrate to a proprietary database unsupported by RDS, and RDS does not support the proprietary database.

Answer

Rehost the application, but replace the database with a SaaS alternative.

Answer

Refactor the application to use a different database engine that is supported by Amazon RDS.

Answer

Use AWS Database Migration Service (DMS) to migrate the database to Amazon RDS.

Question 15

A company is migrating a legacy application to AWS and needs to ensure that the application can access on-premises resources securely. The company has established an AWS Direct Connect connection. Which AWS service should the company use to route traffic between the VPC and the on-premises network?

Accepted Answer

Virtual Private Gateway (VGW).. A Virtual Private Gateway (VGW) is the AWS-side anchor for a Site-to-Site VPN or Direct Connect (via a Virtual Interface) that terminates into a VPC, enabling private routing between the VPC and on-premises networks. When Direct Connect is used with a private VIF, traffic is routed through the VGW attached to the VPC. This is the canonical AWS answer for connecting a single VPC to on-premises over dedicated connectivity.

Answer

VPC Peering.

Answer

Internet Gateway (IGW).

Answer

AWS Transit Gateway.