SAP-C02 Accelerate Workload Migration and Modernization Practice Test 12 — 15 Questions

Question 1

A company is planning to migrate 50 TB of data from an on-premises data center to Amazon S3. The on-premises network bandwidth is 100 Mbps. The migration must be completed within 30 days. What is the most cost-effective solution?

Accepted Answer

Use AWS Snowball Edge device.. At 100 Mbps, transferring 50 TB over the internet would take approximately 50 days (50*8*1024*1024 / (100*86400) ≈ 48.5 days), exceeding the 30-day window. AWS Snowball Edge is a physical device that can transfer data offline faster and is cost-effective for large data volumes. AWS DMS is for databases; Direct Connect requires setup time; S3 Transfer Acceleration improves speed but still limited by bandwidth.

Answer

Use AWS Direct Connect to increase bandwidth.

Answer

Use AWS DataSync over the internet.

Answer

Use AWS Database Migration Service (AWS DMS).

Question 2

A company is modernizing its infrastructure by moving from EC2 instances to a serverless architecture using AWS Lambda. The application processes images uploaded to Amazon S3. The current EC2-based solution uses a third-party image processing library that is not supported in Lambda's runtime environment. What is the best approach to migrate to serverless while using the same library?

Accepted Answer

Package the library as a Lambda layer and reference it in the function.. AWS Lambda supports custom runtime environments by bundling the library with the deployment package or using Lambda layers. The library can be included as a layer, allowing the Lambda function to use it. AWS Fargate runs containers but is not serverless in the same sense; it adds overhead. Using a different library would require code changes. App Runner is for containerized applications.

Answer

Use AWS Fargate to run the image processing library in a container.

Answer

Rewrite the image processing code to use AWS Rekognition.

Answer

Use AWS App Runner to deploy the existing application as-is.

Question 3

A company is migrating a legacy e-commerce platform to AWS. The platform includes a MySQL database that experiences heavy read traffic. The company wants to improve performance and reduce latency for read operations. Which TWO actions should the solutions architect take?

Accepted Answer

Add read replicas to the RDS MySQL database.. Adding read replicas offloads read traffic from the primary database, improving performance. Implementing Amazon ElastiCache for caching reduces database load for frequently accessed data. Multi-AZ is for high availability, not read performance. Provisioned IOPS improves write performance. Sharding adds complexity and may not be necessary.

Answer

Enable Multi-AZ on the RDS instance.

Answer

Shard the database across multiple RDS instances.

Answer

Upgrade to Provisioned IOPS for the database.

Question 4

A company is migrating a batch processing workload to AWS. The workload runs nightly and takes approximately 2 hours on a single on-premises server. The company wants to reduce the processing time to under 30 minutes. Which THREE steps should the solutions architect recommend?

Accepted Answer

Split the workload into smaller batches and run them in parallel on multiple EC2 instances.. Using a larger instance (compute optimized) can speed up processing. Parallel processing by splitting the workload across multiple EC2 instances reduces time. Using a distributed processing framework like AWS Batch with multiple compute environments enables parallel execution. EBS io2 volumes improve I/O but may not reduce time by 75%. Spot Instances can reduce cost but not processing time directly.

Answer

Use EBS io2 volumes with high IOPS for the instance.

Answer

Use EC2 Spot Instances to reduce cost.

Question 5

A company is migrating a web application to AWS and wants to use a microservices architecture. The application needs to communicate synchronously via REST APIs. Which TWO AWS services should the architect consider for implementing API communication?

Accepted Answer

Application Load Balancer. Amazon API Gateway is a fully managed service for creating RESTful APIs. AWS AppSync is for GraphQL. For internal microservice communication, API Gateway is suitable. Application Load Balancer can also route HTTP traffic to multiple services. NLB is for TCP/UDP. SQS is asynchronous. Step Functions orchestrate workflows.

Answer

AWS Step Functions

Answer

AWS AppSync

Answer

Amazon Simple Queue Service (Amazon SQS)

Question 6

A company is using AWS Migration Hub to track a server migration. The migration task has failed with the error shown in the exhibit. Which action should the solutions architect take to resolve the issue?

Accepted Answer

Ensure the source server's SSL certificate is signed by a trusted Certificate Authority (CA).. The error indicates that the SSL certificate of the source server is not trusted by the AWS Migration Hub or the migration tool (e.g., AWS MGN, CloudEndure). The solution is to ensure the source server has a valid SSL certificate from a trusted CA, or configure the migration tool to ignore certificate validation if appropriate. Increasing timeout or retrying will not fix the certificate issue. Changing port is not relevant. Using a different tool may bypass but does not address the root cause.

Answer

Change the migration port from 443 to 80.

Answer

Retry the migration using AWS CloudEndure instead of AWS MGN.

Answer

Increase the timeout value for the migration task.

Question 7

An IAM policy is attached to a role used by AWS DMS for a database migration from an RDS MySQL instance to an S3 bucket. The migration fails with an access denied error when writing to S3. Which missing permission is the most likely cause?

Accepted Answer

s3:PutObject. The policy allows s3:GetObject and s3:ListBucket, but not s3:PutObject, which is required for writing data to S3. The error is about writing, not reading. dms:StartReplicationTask is already allowed. rds:DescribeDBInstances is for reading RDS metadata. kms:Decrypt is only needed for encrypted buckets.

Answer

kms:Decrypt

Answer

rds:DescribeDBInstances

Answer

dms:StartReplicationTask

Question 8

A company is migrating a critical application to AWS using a lift-and-shift approach. The application runs on two on-premises servers: a web server and a database server running SQL Server. The company has deployed the web server on an EC2 instance behind an Application Load Balancer, and the database on an RDS for SQL Server Multi-AZ instance. After migration, users report that the application is noticeably slower compared to on-premises. The application uses a large number of database transactions, and latency between the web server and database has increased. The web server is in us-east-1a, and the RDS primary instance is in us-east-1b. The solutions architect verifies that the application is using the RDS endpoint, not the IP address. What should the architect do to reduce latency?

Accepted Answer

Move the web server EC2 instance to the same Availability Zone as the RDS primary instance.. Colocating the web server and RDS primary in the same Availability Zone minimizes network latency. RDS Multi-AZ automatically manages failover, and the web server should be in the same AZ as the primary to avoid cross-AZ latency. Enabling Multi-AZ on the web server does not help. Using a larger instance does not reduce latency. CloudFront is for content delivery, not database latency.

Answer

Enable Multi-AZ on the web server EC2 instance.

Answer

Upgrade the web server EC2 instance to a larger instance type with enhanced networking.

Answer

Deploy Amazon CloudFront in front of the web server to cache responses.

Question 9

A company is modernizing its application by migrating from a monolithic architecture to microservices on Amazon ECS Fargate. The application uses an on-premises Oracle database, which is being migrated to Amazon Aurora PostgreSQL as part of the modernization. The team has refactored the application into several microservices, each with its own database schema in the same Aurora cluster. During load testing, the team notices that one microservice's heavy write operations cause increased latency for other microservices' read queries. The Aurora cluster uses a single writer and multiple readers. The team needs to isolate the write-heavy microservice without changing the application code. What should the solutions architect do?

Accepted Answer

Create a separate Aurora cluster for the write-heavy microservice and point the microservice to that cluster.. Using a separate Aurora cluster for the write-heavy microservice physically isolates the workload, preventing impact on other microservices. The application code points to different cluster endpoints. Using a larger instance might help but does not isolate; read replicas do not help with write contention; RDS Proxy is for connection pooling, not isolation.

Answer

Use Amazon RDS Proxy to manage database connections.

Answer

Configure Aurora read replicas to offload read queries from the writer.

Answer

Increase the instance size of the Aurora writer to handle the write load.

Question 10

A company is migrating a legacy application to AWS and needs to ensure compliance with data residency requirements. The application stores personally identifiable information (PII) in an on-premises MySQL database. The company wants to encrypt the data at rest and in transit during the migration. The database will be migrated to Amazon RDS for MySQL. The solutions architect must ensure that all data is encrypted end-to-end. Which combination of steps will meet these requirements?

Accepted Answer

Enable RDS encryption at launch, enforce TLS for connections, and configure the application to use SSL/TLS.. To encrypt data at rest on RDS, enable encryption at launch (RDS encryption). To encrypt data in transit, enforce TLS connections from the application to RDS. The application must be configured to use TLS. SSL certificate verification ensures trust. AWS DMS can encrypt data in transit during migration by using SSL endpoints. Enabling encryption after launch is not possible; you must create a new encrypted instance. Using a VPN adds overhead but does not encrypt the database at rest.

Answer

Use a custom AMI with encrypted EBS volumes, enforce TLS, and use AWS DMS with SSL.

Answer

Enable RDS encryption at launch, use AWS DMS with SSL, and require SSL certificate verification on the RDS endpoint.

Answer

Enable RDS encryption after migration, use AWS DMS with SSL, and set up a VPN connection.

Question 11

A company is migrating a legacy .NET Framework 4.7 application to AWS. The application currently uses Windows Authentication and stores session state in-process. The company wants to minimize code changes and use AWS managed services. Which TWO strategies should the company adopt?

Accepted Answer

Migrate the application to run on Amazon EC2 instances joined to AWS Managed Microsoft AD.. Option A is correct because AWS Managed Microsoft AD supports Windows Authentication and can integrate with EC2 or Elastic Beanstalk without code changes. Option D is correct because ElastiCache for Redis can be used as a distributed session store, replacing in-process session state with minimal code changes (using Redis Session State Provider). Option B is wrong because .NET Core is not compatible with .NET Framework 4.7 without significant rewrite. Option C is wrong because Cognito is for external identity providers, not Windows Authentication. Option E is wrong because DynamoDB is not a drop-in replacement for in-process sessions; it requires custom code.

Answer

Rewrite the application to .NET Core and deploy on AWS Elastic Beanstalk with Amazon RDS for SQL Server.

Answer

Use Amazon Cognito with an Active Directory connector for authentication.

Answer

Use Amazon DynamoDB to persist session state.

Question 12

A company is migrating a large Oracle database to Amazon Aurora PostgreSQL. The migration must have minimal downtime and support ongoing replication. Which THREE steps should the company take?

Accepted Answer

Use AWS Database Migration Service (DMS) with change data capture (CDC) to replicate ongoing changes.. Option A is correct because AWS DMS can migrate data from Oracle to Aurora PostgreSQL with minimal downtime using change data capture (CDC). Option C is correct because increasing the DB instance size during migration can improve performance and reduce migration time. Option E is correct because AWS Schema Conversion Tool (SCT) can convert the Oracle schema to PostgreSQL-compatible schema, which is necessary before migration. Option B is wrong because SCT is for schema conversion, not data migration. Option D is wrong because AWS DMS can convert data types on the fly; a homogeneous migration is not required. Option F is wrong because AWS DMS supports full load plus CDC, so you don't need to stop the source database.

Answer

Use AWS Schema Conversion Tool (SCT) to perform the data migration.

Answer

Convert the Oracle database to PostgreSQL first, then use AWS DMS for a homogeneous migration.

Answer

Take the source Oracle database offline to ensure data consistency during the migration.

Question 13

A company is migrating a 3-tier web application from on-premises to AWS. The application consists of a Linux Apache HTTP server, a Java application server (Tomcat), and a MySQL database. The company wants to use AWS managed services to reduce operational overhead. The migration plan includes using AWS Elastic Beanstalk for the web and application tiers, and Amazon RDS for MySQL for the database. During a test migration, the team notices that the application is experiencing intermittent connection timeouts when the web tier attempts to connect to the application tier. The web and application tiers are deployed in separate Elastic Beanstalk environments, both in the same VPC, same region, and same Availability Zone. The security groups allow traffic from the web tier to the application tier on port 8080. What is the MOST likely cause of the connection timeouts?

Accepted Answer

The web tier is trying to connect directly to the application tier instances, but the application tier's security group does not allow inbound traffic from the web tier's security group.. Option B is correct because Elastic Beanstalk environments are deployed in separate Auto Scaling groups, and the security group that allows traffic from the web tier should reference the web tier's security group, not its instance IDs or IP addresses. However, the most common issue is that the application tier's Elastic Beanstalk environment uses a load balancer, and the web tier should connect to the load balancer, not directly to the instances. The load balancer's security group must allow traffic from the web tier. Option A is wrong because both environments are in the same AZ; cross-AZ traffic is not the issue. Option C is not the primary cause; health checks are separate. Option D is wrong because the application tier uses Elastic Beanstalk's integrated load balancer, not a standalone ALB.

Answer

The application tier is configured with an internal Application Load Balancer, but the web tier is unable to resolve the DNS name of the load balancer.

Answer

The web tier and application tier are in different Availability Zones, causing increased latency and timeouts.

Answer

The Elastic Beanstalk environment's health check URL is misconfigured, causing the instances to be marked as unhealthy and removed from the load balancer.

Question 14

A company is migrating a legacy monolithic application to AWS. The application currently runs on a single Windows Server with IIS and SQL Server. The company wants to adopt a microservices architecture on AWS using containers. The development team has containerized the application into several Docker containers. The company needs a solution that minimizes operational overhead for managing the container orchestration and scaling, and also integrates with AWS services like IAM, CloudWatch, and VPC. Which AWS service should the company use to run the containers?

Accepted Answer

Amazon ECS with the Fargate launch type.. Option C is correct because Amazon ECS with Fargate launch type provides serverless container orchestration, integrates with AWS services, and minimizes operational overhead. Option A is wrong because running containers on EC2 requires managing the underlying instances. Option B is wrong because AWS Elastic Beanstalk supports Docker but is more suited for single-container deployments and provides less control for microservices. Option D is wrong because Amazon EKS requires managing the Kubernetes control plane, which has operational overhead.

Answer

Amazon EKS with managed node groups.

Answer

AWS Elastic Beanstalk with a Docker platform.

Answer

Amazon EC2 instances with Docker installed, managed by an Auto Scaling group.

Question 15

A company is migrating a large-scale batch processing system from on-premises to AWS. The system processes hundreds of thousands of files daily, each file being a few MB in size. The files are received via SFTP and need to be processed within 4 hours. The company wants to use AWS services to build a fully managed, scalable, and cost-effective solution. The current on-premises system uses a single server with a scheduled task that processes files sequentially. The migration should improve throughput and reduce processing time. Which architecture should the company implement?

Accepted Answer

Use AWS Transfer Family for SFTP, store files in Amazon S3, configure an S3 event notification to publish messages to an Amazon SQS queue, and use an Auto Scaling group of EC2 instances to process messages from the queue.. Option B is correct because AWS Transfer Family provides managed SFTP, and an S3 event notification can trigger a Lambda function that submits jobs to an SQS queue. The SQS queue acts as a buffer, and an Auto Scaling group of EC2 instances (or a Spot Fleet) processes the messages, scaling based on queue depth. This provides high throughput and cost optimization. Option A is wrong because a single EC2 instance does not improve throughput over on-premises. Option C is wrong because AWS Batch with Fargate launch type is limited by concurrent job count and may not be cost-effective for long-running jobs. Option D is wrong because Lambda has a 15-minute timeout and is not suitable for processing files that may take longer.

Answer

Use AWS Transfer Family for SFTP, store files in Amazon S3, and use AWS Batch with Fargate launch type to process files in parallel.

Answer

Use AWS Transfer Family for SFTP, store files in Amazon S3, and use AWS Lambda functions triggered by S3 events to process each file.

Answer

Use AWS Transfer Family for SFTP, store files in Amazon S3, and configure a single EC2 instance to poll S3 for new files and process them sequentially.