SAP-C02 Accelerate Workload Migration and Modernization Practice Test 18 — 15 Questions

Question 1

A company is migrating a multi-tier web application to AWS. The application uses sticky sessions (session affinity). The company wants to use an Application Load Balancer (ALB). How should the architect configure the ALB to support sticky sessions?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Enable stickiness on the target group and set a cookie expiration duration.. For an Application Load Balancer (ALB) to support sticky sessions, you enable stickiness at the target group level and configure a cookie expiration duration. ALB uses a load balancer-generated cookie (AWSALB) to track session affinity, and the duration determines how long the cookie remains valid. This is the standard, supported method for session affinity on ALB.

Answer

Configure the ALB listener to use a custom header for session affinity.

Answer

Use a Network Load Balancer (NLB) and enable proxy protocol.

Answer

Place an Amazon ElastiCache cluster in front of the ALB to store session data.

Question 2

A company is migrating a large-scale Apache Kafka cluster to Amazon MSK. The cluster has 100 topics with high throughput. The team wants to minimize operational overhead and ensure high availability. Which configuration should be used?

Accepted Answer

Provision an Amazon MSK cluster with 3 brokers per AZ across 3 AZs.. Amazon MSK is the managed Kafka service that minimizes operational overhead while providing high availability when brokers are spread across multiple Availability Zones. Provisioning 3 brokers per AZ across 3 AZs gives replication factor and rack-awareness that survive an AZ failure, and MSK handles patching, broker replacement, and monitoring. This directly matches the requirement to migrate a large Kafka cluster with minimal ops overhead and HA.

Answer

Use Amazon Kinesis Data Streams with enhanced fan-out.

Answer

Use Amazon SQS FIFO queues with message deduplication.

Answer

Deploy Apache Kafka on Amazon EC2 with Spot Instances and EBS volumes.

Question 3

A company is migrating a legacy application that uses a proprietary binary protocol over TCP. The application must be migrated with minimal changes and requires high throughput. Which AWS service should the architect recommend for load balancing?

Accepted Answer

Network Load Balancer (NLB). Network Load Balancer (NLB) is designed for TCP traffic at high throughput with minimal latency, making it ideal for migrating legacy applications using proprietary binary protocols over TCP. Option B (AWS Global Accelerator) improves application performance by directing traffic over the AWS global network but is not a load balancer. Option C (Application Load Balancer) operates at Layer 7 and is best for HTTP/HTTPS traffic, not TCP. Option D (Classic Load Balancer) is a legacy option that lacks the performance and features of NLB.

Answer

AWS Global Accelerator

Answer

Application Load Balancer (ALB)

Answer

Classic Load Balancer (CLB)

Question 4

A company is modernizing a monolithic Java application to run on Amazon ECS with Fargate. The application uses a proprietary configuration management system. Which TWO AWS services can replace the configuration management system to store and retrieve configuration at runtime?

Accepted Answer

AWS AppConfig, a feature of AWS Systems Manager.. AWS AppConfig (option D) is a feature of AWS Systems Manager designed specifically for application configuration management, allowing you to store, validate, and deploy configuration data with runtime retrieval via the AppConfig API or Lambda extension, making it a direct replacement for a proprietary configuration management system. AWS Systems Manager Parameter Store (option E) provides hierarchical, versioned storage for configuration data and secrets, with runtime retrieval through the SSM API, and is a standard AWS-native configuration store for ECS/Fargate workloads. Option A (Amazon S3 with versioning) is object storage, not a configuration management service, and lacks native runtime configuration retrieval semantics. Option B (AWS Secrets Manager) is purpose-built for secrets such as credentials and API keys, not general application configuration. Option C (Amazon DynamoDB with application-side caching) is a database, not a configuration management service, and would require custom application logic to serve as a configuration store.

Answer

Amazon S3 with versioning enabled.

Answer

AWS Secrets Manager.

Answer

Amazon DynamoDB with application-side caching.

Question 5

A company is migrating a monolithic application to AWS. They want to minimize refactoring effort while gaining some benefits of the cloud. Which migration strategy is most appropriate?

Accepted Answer

Rehost (lift-and-shift). Rehost (lift-and-shift) involves moving the application as-is to AWS with minimal changes, aligning with the goal of minimizing refactoring effort. Option A is wrong because Refactor/Re-architect requires significant code changes. Option B is wrong because Repurchase involves switching to a different product, often a SaaS solution. Option D is wrong because Replatform (lift-tinker-and-shift) involves some modifications to the application to take advantage of cloud capabilities, which requires more effort than pure rehost.

Answer

Refactor / Re-architect

Answer

Repurchase

Answer

Replatform (lift-tinker-and-shift)

Question 6

A company is migrating a legacy database to Amazon RDS. The database currently runs on a single server with a 2 TB volume. The migration must have less than 30 minutes of downtime. Which approach should be used for the initial data load?

Accepted Answer

Use AWS Database Migration Service (DMS) with ongoing replication. AWS Database Migration Service (DMS) with ongoing replication is the best approach because it allows for continuous data replication from the source to RDS, minimizing downtime to a brief cutover. The initial load can be done while the source remains active, and ongoing replication keeps the target in sync until cutover. This meets the less than 30 minutes downtime requirement.

Answer

Use a native database dump and restore during a maintenance window

Answer

Export the database to Amazon S3 and import into RDS using native tools

Answer

Create a read replica from the source database to RDS

Question 7

A company is migrating a legacy application that uses a third-party identity provider (IdP) for authentication. The application currently uses SAML 2.0. The company wants to use AWS IAM Identity Center for centralized access management. What is the best approach to integrate the IdP with AWS?

Accepted Answer

Configure IAM Identity Center to use the existing IdP as the identity source via SAML 2.0 federation. AWS IAM Identity Center supports SAML 2.0 federation with external identity providers (IdPs). This allows centralized access management without duplicating identities. Option A is incorrect because AWS Directory Service for Microsoft AD is for Active Directory synchronization, not generic SAML federation. Option B is incorrect because creating IAM users for every employee would duplicate identities and increase administrative overhead. Option D is incorrect because Amazon Cognito user pools are designed for customer-facing applications, not for enterprise SSO with existing IdPs.

Answer

Use AWS Directory Service for Microsoft Active Directory to synchronize with the IdP

Answer

Create IAM users for each employee and assign groups and permissions

Answer

Use Amazon Cognito user pools with the IdP as a SAML identity provider

Question 8

A company is migrating a stateful application to AWS. The application maintains session state in memory on the application server. Which AWS service should be used to store session state for high availability?

Accepted Answer

Amazon ElastiCache. Amazon ElastiCache is an in-memory caching service that supports Redis or Memcached, making it ideal for storing session state with low latency and high availability. It provides sub-millisecond response times and can be configured with Multi-AZ and automatic failover to ensure session data persists even if a node fails. This is the standard AWS solution for externalizing session state in stateless application architectures.

Answer

Amazon RDS

Answer

Amazon S3

Answer

Amazon EBS

Question 9

A company is migrating a multi-tier web application to AWS. The application uses sticky sessions (session affinity). The company wants to use an Application Load Balancer (ALB). How should the architect configure the ALB to support sticky sessions?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Replatform the database to Amazon RDS for an open-source engine like PostgreSQL. Replatforming to Amazon RDS for an open-source engine like PostgreSQL eliminates the commercial database license cost because PostgreSQL is open-source and RDS is a managed service. This aligns with the goal of reducing licensing costs while minimizing application changes. The company can still use a relational database with similar capabilities, avoiding the need for a full refactor or repurchase.

Answer

Rehost the database to EC2 with the same database software

Answer

Repurchase a Software as a Service (SaaS) alternative

Answer

Refactor the application to use Amazon DynamoDB

Question 10

A company is migrating a large number of on-premises VMs to AWS. They need to assess the current environment and track migration progress. Which THREE AWS services should be used together?

Accepted Answer

AWS Application Migration Service (MGN). AWS Application Discovery Service (E) is correct because it performs the assessment phase by collecting on-premises server inventory, configuration, and utilization data (via the Discovery Agent or agentless VMware collector) to build the baseline needed for migration planning. AWS Application Migration Service (B) is correct because it is the recommended lift-and-shift service that replicates on-premises VMs (block-level replication using the AWS Replication Agent) and launches them on AWS as EC2 instances, handling the actual migration of the large VM fleet. AWS Migration Hub (C) is correct because it provides a single console to track migration status and progress across services such as MGN and DMS, giving the centralized progress-tracking capability the company requires. AWS Server Migration Service (A) is not appropriate because it is a legacy service being deprecated in favor of MGN for VM migrations. AWS Database Migration Service (D) is not appropriate because it targets database migrations specifically, not the general VM migration and assessment scenario described.

Answer

AWS Server Migration Service (SMS)

Answer

AWS Database Migration Service (DMS)

Question 11

Refer to the exhibit. An IAM policy is attached to an IAM user. The user tries to upload an object to `s3://my-bucket/secret/data.txt` from an IP address in the 10.0.0.0/8 range. What will happen?

Accepted Answer

The upload fails because the Deny statement explicitly denies s3:PutObject for the prefix secret/ from the specified IP range.. In IAM policy evaluation, an explicit Deny always overrides any Allow. The Deny statement in the policy explicitly denies s3:PutObject for objects under the secret/ prefix when the request originates from the 10.0.0.0/8 range. Since the user is uploading to s3://my-bucket/secret/data.txt from an IP in that range, the Deny matches and the upload fails regardless of the Allow statement.

Answer

The upload succeeds because the Allow statement grants s3:PutObject.

Answer

The upload succeeds because the Deny statement only applies to GetObject, not PutObject.

Answer

The upload fails because the Deny statement denies all s3 actions unconditionally.

Question 12

A company is migrating a legacy on-premises application to AWS. The application requires a relational database with Oracle compatibility and the ability to run read replicas across multiple Availability Zones. Which AWS service should the company use to minimize migration effort?

Accepted Answer

Amazon RDS for Oracle. Amazon RDS for Oracle provides a managed Oracle database with Oracle compatibility and supports read replicas across multiple Availability Zones, minimizing migration effort. Option A is wrong because Amazon RDS for MySQL does not offer Oracle compatibility. Option B is wrong because Amazon EC2 with self-managed Oracle requires more operational overhead. Option C is wrong because Amazon DynamoDB is a NoSQL database, not relational.

Answer

Amazon RDS for MySQL

Answer

Amazon EC2 with self-managed Oracle

Answer

Amazon DynamoDB

Question 13

A company is migrating a monolithic application to microservices on AWS. The application uses a shared MySQL database. The team wants to decouple the database per microservice. Which strategy should the team use to minimize downtime during migration?

Accepted Answer

Use the strangler fig pattern to gradually migrate functionality to microservices, each with its own database.. The strangler fig pattern allows incremental migration of functionality from a monolith to microservices, each with its own database, while the monolith continues to operate. This minimizes downtime because changes are gradual and can be rolled back. By decoupling databases per microservice over time, the team avoids a big-bang rewrite and can manage data migration carefully.

Answer

Rehost the application on EC2 and use a single RDS MySQL instance for all microservices.

Answer

Use AWS Database Migration Service (DMS) to replicate the shared database to multiple target databases in real time.

Answer

Rewrite the entire application as microservices in a single release, using a shared database initially.

Question 14

A company is modernizing a legacy application by refactoring it into microservices. The application uses a monolithic Oracle database. The team wants to use Amazon RDS for Oracle as the migration target. Which migration approach minimizes risk and downtime?

Accepted Answer

Use the strangler fig pattern to incrementally migrate functionality to new microservices, each with its own database.. The strangler fig pattern allows incremental migration of functionality from a monolith to microservices, reducing risk and downtime because each service can be migrated and tested independently while the monolith continues to operate. This approach aligns with modernizing a legacy application by refactoring into microservices, each with its own database, which avoids a big-bang cutover. It minimizes risk by allowing rollback and gradual validation, and minimizes downtime because the legacy system remains available during the transition.

Answer

Create a new RDS instance and use AWS SCT to convert the schema, then cutover after testing.

Answer

Migrate the entire database at once using AWS DMS with ongoing replication.

Answer

Rewrite the application as microservices on AWS and then migrate the database.

Question 15

A company plans to migrate its on-premises VMware VMs to AWS. The company wants to automate the migration of VM images and minimize manual effort. Which AWS service should the company use?

Accepted Answer

AWS Application Migration Service (MGN). AWS Application Migration Service (MGN) is the correct choice because it automates the migration of on-premises server volumes (including VMware VMs) to AWS with minimal manual effort. It provides continuous, block-level replication and simplifies large-scale migrations. MGN is the modern successor to AWS Server Migration Service (SMS). AWS VM Import/Export (Option A) is a one-time import tool requiring manual steps. AWS DataSync (Option B) is for file and object transfers, not VM images. AWS DMS (Option D) is for databases. Therefore, MGN (Option C) is the service that best meets the requirement.

Answer

AWS VM Import/Export

Answer

AWS DataSync

Answer

AWS Database Migration Service (DMS)