SAP-C02 Accelerate Workload Migration and Modernization Practice Test 11 — 15 Questions

Question 1

A company is migrating a large number of on-premises virtual machines (VMs) to AWS using AWS Application Migration Service (AWS MGN). During the initial replication, some VMs fail with the error 'Replication agent cannot communicate with the AWS MGN endpoint'. Which TWO actions should the company take to resolve this issue? (Choose TWO.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Configure AWS PrivateLink VPC endpoints for AWS MGN in the target VPC. The error indicates the AWS Replication Agent on the source VMs cannot reach the AWS MGN endpoint, which is fundamentally a network connectivity problem. Option B is correct because in environments without direct internet access, AWS MGN requires connectivity to its service endpoints, and configuring AWS PrivateLink VPC endpoints (interface endpoints) for AWS MGN in the target VPC provides a private path for the replication agent to reach the service. Option D is correct because the AWS Replication Agent must be able to reach the AWS MGN endpoint over the network; verifying that source servers have outbound internet access (or equivalent connectivity to the MGN endpoint) directly addresses the reported communication failure. Option A is not appropriate because reinstalling the agent does not fix an underlying network path or endpoint reachability issue, and the agent is already installed and running enough to report the error. Option C is incorrect because the problem is outbound connectivity from the source servers to the AWS MGN endpoint, not inbound traffic to the replication servers' security group. Option E is irrelevant because CPU or memory capacity on the source servers has no bearing on whether the agent can reach the AWS MGN endpoint.

Answer

Reinstall the AWS Replication Agent on the source servers

Answer

Ensure that the security group of the replication servers allows inbound traffic from the source servers

Answer

Increase the instance type of the source servers to provide more CPU and memory

Question 2

A company is migrating a legacy .NET Framework 4.7 application to AWS. The application uses Windows Server 2012 R2, IIS, and SQL Server 2014. The company wants to modernize the application to reduce licensing costs and operational overhead. Which THREE actions should the company take? (Choose THREE.)

Accepted Answer

Rehost the application on Amazon EC2 Windows instances with SQL Server Web Edition. Rehosting the application on Amazon EC2 Windows instances with SQL Server Web Edition reduces licensing costs compared to the current Enterprise or Standard edition. Option C is correct because rebuilding the application on .NET Core allows deployment on Linux, reducing Windows licensing costs and enabling modernization. Option E is correct because migrating the database to Amazon RDS for SQL Server reduces operational overhead by automating backups, patching, and management. Option A is incorrect because upgrading to Standard Edition on-premises does not reduce licensing costs or operational overhead. Option D is incorrect because containerizing a legacy .NET Framework 4.7 application with Docker on ECS Fargate is not straightforward due to Windows container limitations and does not address the database licensing costs.

Answer

Upgrade SQL Server to the Standard Edition on the current on-premises server before migrating

Answer

Containerize the application using Docker and deploy on Amazon ECS with AWS Fargate

Question 3

A company is migrating a legacy application to AWS. The application has hardcoded IP addresses and uses non-HTTP protocols. The solutions architect needs to minimize changes to the application code. Which migration pattern should be used?

Accepted Answer

Rehost the application on EC2 instances with the same IP addresses using Elastic IPs.. Rehosting (lift-and-shift) with EC2 instances and Elastic IPs allows the application to retain its hardcoded IP addresses with minimal code changes. Option A is wrong because AWS Global Accelerator provides static IP addresses for front-end traffic, but the application's hardcoded IPs are internal; changing to use Global Accelerator still requires code modifications. Option B is wrong because containerization and service discovery require code changes to integrate with service discovery. Option D is wrong because refactoring to use DNS names requires modifying the application code.

Answer

Use AWS Global Accelerator to assign static IP addresses.

Answer

Containerize the application and use service discovery.

Answer

Refactor the application to use DNS names instead of IP addresses.

Question 4

A company is migrating a stateful application that maintains session state in memory on a single server. The migration target is a highly available architecture on AWS. Which design should be used to preserve session state without modifying the application?

Accepted Answer

Use an Application Load Balancer with sticky sessions.. An Application Load Balancer with sticky sessions (session affinity) preserves in-memory session state without modifying the application because the ALB can route all requests from a given client to the same backend instance for the duration of the session. This is the only option that keeps the application unmodified while providing high availability, since the ALB can still fail over if an instance becomes unhealthy (though the session would be lost on failover, the design meets the 'without modifying the application' constraint).

Answer

Use Amazon DynamoDB to store session state.

Answer

Use a Network Load Balancer with cross-zone load balancing.

Answer

Use Amazon ElastiCache to store session state externally.

Question 5

A company is migrating its on-premises VMware virtual machines to AWS. The company wants to use the same VM images and has a 10 Gbps direct connect link. Which service should be used to automate the migration of the VMs?

Accepted Answer

AWS VM Import/Export. AWS VM Import/Export enables the import of existing VM images (including VMware) from on-premises into EC2, making it the correct choice for migrating existing VM images. Option A (AWS Migration Hub) is a tracking and management service, not a migration tool. Option B (AWS DataSync) is used for transferring file and object storage, not VM images. Option D (AWS Server Migration Service) is deprecated and is not the recommended service for this use case; AWS Application Migration Service (MGN) is the modern replacement, but VM Import/Export directly supports importing images without agent installation.

Answer

AWS Migration Hub

Answer

AWS DataSync

Answer

AWS Server Migration Service

Question 6

A company is migrating a critical application to AWS and needs to ensure high availability across AWS Regions. The application uses a relational database. Which THREE components are necessary for this multi-region architecture?

Accepted Answer

Application Load Balancer in each region. For a multi-region architecture ensuring high availability, three key components are required: an Application Load Balancer in each region to distribute traffic locally, Amazon Route 53 with failover routing policy to direct traffic to the healthy region, and an Amazon RDS cross-Region read replica to provide database disaster recovery and read scalability. Option A (RDS Multi-AZ) is incorrect because it only provides high availability within a single region, not across regions. Option E (VPC peering) is incorrect because VPC peering does not provide high availability; it is a networking feature for connecting VPCs, typically within the same region or across regions for private communication, but it is not a component for multi-region HA architecture.

Answer

Amazon RDS Multi-AZ deployment

Answer

VPC peering between regions

Question 7

Which TWO AWS services can be used to migrate on-premises applications to AWS without modifying the application code?

Accepted Answer

AWS VM Import/Export. AWS VM Import/Export allows importing VM images as EC2 instances, preserving the OS and applications. AWS MGN automates lift-and-shift replication. AWS DMS requires some changes for database migration. AWS DataSync is for data transfer. AWS App2Container requires containerization.

Answer

AWS DataSync

Answer

AWS Database Migration Service (DMS)

Answer

AWS App2Container

Question 8

A company is migrating a legacy on-premises web application to AWS. The application consists of a stateless web tier and a stateful application tier that stores session data in memory. The company wants to achieve high availability and elasticity. The migration must minimize code changes. The solutions architect proposes using an Application Load Balancer (ALB) with sticky sessions and an Auto Scaling group for the web tier. For the application tier, they plan to use an ALB with sticky sessions and an Auto Scaling group. During testing, users report that they are unexpectedly logged out and lose session data. The application logs show that requests from the same user are being sent to different instances. Which change should the solutions architect make to resolve this issue?

Accepted Answer

Verify that the ALB stickiness configuration is enabled and the cookie duration is appropriate.. The issue is that session data is stored in memory on individual instances, and despite sticky sessions being configured, requests from the same user are hitting different instances. This indicates that the ALB stickiness configuration may not be properly enabled or the cookie duration is too short, causing the load balancer to route requests to different targets. Verifying and correcting the stickiness settings ensures that all requests from a user go to the same instance, preserving session state.

Answer

Disable sticky sessions and use a Network Load Balancer instead.

Answer

Migrate session state to Amazon ElastiCache for Redis.

Answer

Disable cross-zone load balancing on the ALB.

Question 9

A company is migrating a large .NET application to AWS. The application uses Windows authentication and integrates with Active Directory. The company wants to minimize operational overhead for the directory service. The on-premises Active Directory is already synchronized to AWS using AWS Directory Service for Microsoft Active Directory. During migration, the application fails to authenticate users. The security team confirms that the on-premises AD and AWS Managed AD are in sync. The application is running on EC2 instances that are joined to the AWS Managed AD domain. The application logs show authentication errors. What is the most likely cause of the authentication failure?

Accepted Answer

The application is using a service account that is not in the AWS Managed AD.. The most likely cause is that the application is using a service account that is not present in AWS Managed AD. While the on-premises AD is synchronized, the specific service account may not have been replicated or may have been excluded from synchronization. Without the correct service account, Windows authentication will fail. NTLM is enabled by default in AWS Managed AD, so option A is incorrect. The security group must allow LDAP traffic (port 389) for domain-joined instances; if instances are joined, this is already configured, making option B unlikely. EC2 instances must resolve the domain controller DNS to join the domain; since they are joined, DNS resolution is working, so option C is incorrect.

Answer

The application requires NTLM authentication, which is disabled by default.

Answer

The security group does not allow traffic on port 389 (LDAP).

Answer

The EC2 instances cannot resolve the domain controller DNS name.

Question 10

A company is planning to migrate its on-premises Oracle database to Amazon RDS for Oracle using AWS DMS. The database is 5 TB in size with continuous changes. Which TWO steps should the company take to minimize downtime during the migration?

Accepted Answer

Set up ongoing replication using change data capture (CDC) from the start.. Setting up ongoing replication using change data capture (CDC) from the start allows continuous synchronization of changes, minimizing the final cutover downtime. Option D is correct because using a large DMS replication instance improves throughput and speeds up the data transfer, reducing the overall migration time. Option B is incorrect because Multi-AZ is a high-availability feature for the target RDS instance, not a factor in migration speed or downtime reduction. Option C is incorrect because while AWS Direct Connect can provide a reliable network connection, it is not a specific step to minimize downtime during migration; the primary focus should be on replication strategy and instance size. Option E is incorrect because performing a full load first and then applying CDC after the cutover window would result in a longer downtime compared to having CDC running from the start.

Answer

Enable Multi-AZ on the target RDS instance during migration.

Answer

Use AWS Direct Connect to establish a dedicated network connection.

Answer

Perform a full load migration first, then apply CDC after the cutover window.

Question 11

A company is migrating a monolithic application to a microservices architecture on Amazon ECS. The application uses a shared MySQL database. Which THREE strategies should the company use to modernize the data layer?

Accepted Answer

Use database per service pattern.. (database per service pattern) is correct because it aligns with microservices principles by giving each service its own database, enabling independent scaling and deployment. Option D (read replicas) is correct for offloading read queries from the primary database, improving performance for read-heavy workloads. Option E (CQRS and event sourcing) is correct for separating read and write operations and maintaining an event log, which helps in decomposing the monolith and ensuring eventual consistency. Option A is wrong because Amazon DynamoDB may not be suitable for all relational data and migrating all data to NoSQL is not always appropriate. Option C is wrong because keeping a single RDS instance with multiple schemas does not fully decouple the data layer and still creates a single point of failure and coupling.

Answer

Migrate all data to Amazon DynamoDB.

Answer

Keep a single RDS instance with multiple schemas.

Question 12

A company is migrating its on-premises data warehouse to Amazon Redshift. The existing system uses PostgreSQL and has 10 TB of data. The migration must be completed within a 4-hour downtime window. The company has a 1 Gbps AWS Direct Connect connection. After starting the migration using AWS DMS with a full load and CDC, the full load takes 6 hours. What should the company do to meet the downtime window?

Accepted Answer

Configure multiple DMS tasks to load different tables in parallel.. Configuring multiple DMS tasks to load different tables in parallel can significantly reduce the full load time by utilizing the available bandwidth and resources more efficiently. This approach can help complete the full load within the 4-hour downtime window.

Answer

Use AWS Snowball Edge to transfer the data physically.

Answer

Reduce the amount of data by archiving older records.

Answer

Use AWS VPN instead of Direct Connect for higher bandwidth.

Question 13

A company is modernizing a legacy .NET application by containerizing it on Amazon ECS. The application currently uses Windows authentication against on-premises Active Directory. After migrating, the application needs to authenticate users against AWS Managed Microsoft AD. The security team requires that credentials never leave the corporate network. Which solution should the company implement?

Accepted Answer

Set up AWS Managed Microsoft AD with a two-way trust to on-premises AD over Direct Connect.. AWS Managed Microsoft AD with a two-way trust to on-premises AD over Direct Connect allows the application to authenticate against AWS Managed Microsoft AD while credentials remain on-premises. The two-way trust enables users in the on-premises domain to access resources in the AWS domain, and authentication requests are proxied to on-premises AD, so credentials never leave the corporate network. This meets the security requirement.

Answer

Store user passwords in AWS Secrets Manager and authenticate against it.

Answer

Use AWS AD Connector to proxy authentication to on-premises AD.

Answer

Use AWS Directory Service Simple AD with password sync.

Question 14

A company is migrating its on-premises NoSQL database (MongoDB) to Amazon DocumentDB. The migration must have minimal downtime. The company uses AWS DMS with ongoing replication. After starting the replication, the target DocumentDB cluster shows a lag of several minutes. The source MongoDB has high write throughput. What should the company do to reduce replication lag?

Accepted Answer

Increase the DMS replication instance size.. Replication lag in AWS DMS is often caused by insufficient resources on the replication instance, especially under high write throughput. Increasing the DMS replication instance size provides more CPU, memory, and network bandwidth to process change data capture (CDC) events faster, reducing lag. This directly addresses the bottleneck.

Answer

Increase the DocumentDB cluster instance size.

Answer

Disable CDC and perform a full load only.

Answer

Enable Parallel Apply in DMS task settings.

Question 15

A company is migrating its application stack from on-premises to AWS using a rehost strategy. The stack includes a web server, an application server, and a MySQL database. The company wants to automate the migration using AWS Application Migration Service (MGN). After configuring MGN, the web server test instance fails to start because the boot volume is missing the boot sector. What is the most likely cause?

Accepted Answer

The source volume was not shut down cleanly before replication.. AWS MGN requires the source volume to be shut down cleanly before replication so that the boot sector and file system metadata are consistent; an unclean shutdown can leave the boot volume without a valid boot sector, causing the test instance to fail to start. This is a documented prerequisite for MGN replication.

Answer

The EBS volume size is smaller than the source volume.

Answer

The source web server uses an unsupported instance type.

Answer

The source OS is not supported by MGN.