SAP-C02 Accelerate Workload Migration and Modernization Practice Test 2 — 15 Questions

Question 1

A company is migrating a legacy application that uses hard-coded IP addresses for database connections. The company wants to refactor the application to use a more resilient architecture in AWS. Which THREE steps should the company take to modernize the database connectivity? (Choose THREE.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use Amazon RDS read replicas to offload read traffic and improve resilience.. Option D is correct because migrating to Amazon RDS and using the RDS endpoint DNS name replaces hard-coded IP addresses with a managed DNS name that automatically resolves to the current primary instance, enabling failover without application changes. Option E is correct because externalizing the endpoint into an environment variable or configuration file decouples connection details from application code, so the endpoint can be updated without recompiling or redeploying the application. Option B is correct because RDS read replicas offload read traffic from the primary instance, improving performance and resilience for read-heavy legacy workloads. Option A is not selected because Multi-AZ failover, while valuable for availability, does not by itself modernize hard-coded IP-based connectivity. Option C is not selected because Elastic IP addresses are for EC2 instances, not RDS, and RDS endpoints already provide stable DNS-based connectivity.

Answer

Enable Multi-AZ deployment for the RDS instance to automatically failover.

Answer

Assign an Elastic IP address to the RDS instance for consistent connectivity.

Question 2

A company is migrating a batch processing workload to AWS. The workload reads input files from an on-premises NFS server, processes them, and writes output files. The company wants to use AWS managed services and minimize operational overhead. Which TWO AWS services should the company use to replace the on-premises NFS server? (Choose TWO.)

Accepted Answer

AWS DataSync to transfer files from on-premises to Amazon EFS.. Option B (AWS DataSync to transfer files from on-premises to Amazon EFS) is correct because DataSync is a managed data-transfer service that supports NFS/SMB sources and can move files directly into Amazon EFS, eliminating the need to maintain an on-premises NFS server while minimizing operational overhead. Option E (Amazon EFS) is correct because EFS is a fully managed, elastic NFSv4 file system that the batch workload can mount concurrently from multiple compute instances, providing the shared POSIX file access the workload requires. Together, DataSync handles the migration/ingestion of existing files and EFS serves as the managed NFS replacement for ongoing reads and writes. Option A is not marked correct because S3 File Gateway presents an SMB/NFS interface backed by Amazon S3 rather than a true managed NFS file system, and the question asks for services to replace the NFS server itself. Option C is not marked correct because AWS Storage Gateway File Gateway is a hybrid gateway that still requires a gateway appliance to be deployed and managed, which does not minimize operational overhead as fully as EFS. Option D is not marked correct because Amazon EBS volumes are block storage attached to a single EC2 instance (or Multi-Attach within one AZ) and shared snapshots do not provide a live shared NFS file system.

Answer

Amazon S3 with S3 File Gateway.

Answer

AWS Storage Gateway File Gateway.

Answer

Amazon EBS with a shared snapshot.

Question 3

Refer to the exhibit. A company has attached this IAM policy to an IAM role used by an application running on an EC2 instance in a VPC with CIDR 10.0.0.0/16. The application is unable to read objects from the S3 bucket. What is the most likely cause?

Accepted Answer

The condition key aws:SourceIp uses the private IP of the instance, but S3 sees the public IP.. The IAM policy uses the `aws:SourceIp` condition key with the private IP address of the EC2 instance (10.0.0.x). However, when the instance accesses S3, the request originates from the instance's public IP address (or the NAT gateway's public IP). Since the `aws:SourceIp` condition checks the source IP of the request, and it expects the private IP, the condition fails and denies access to the S3 bucket. Therefore, the most likely cause is that the condition key uses the private IP but S3 sees the public IP (option C). Option A is incorrect because the instance has an IAM role attached (implied by the policy being attached to the role). Option B is incorrect because the `s3:GetObject` action is allowed, and `s3:ListBucket` is not required to read objects if the bucket policy allows it. Option D is incorrect because the bucket policy is not mentioned and the issue lies with the IAM policy condition.

Answer

The EC2 instance does not have an IAM instance profile.

Answer

The policy does not allow the s3:ListBucket action.

Answer

The S3 bucket policy denies access.

Question 4

Refer to the exhibit. A company is using AWS CloudFormation to migrate a serverless application. The stack creation failed. Based on the stack events, what is the root cause of the failure?

Accepted Answer

The AWS Lambda runtime specified in the template is not supported in the us-east-1 region.. The stack events show that the AWS::Lambda::Function resource failed with the error 'Runtime python3.13 is not supported in us-east-1'. This indicates that the specified Lambda runtime version is not available in the region where the stack is being deployed. CloudFormation validates the runtime against the region's supported list, and since python3.13 is not yet available in us-east-1, the resource creation fails. The correct answer is B because it directly matches the error message and the root cause.

Answer

The CloudFormation template has a syntax error.

Answer

The IAM role for the Lambda function does not have sufficient permissions.

Answer

The Lambda function code exceeds the maximum size limit.

Question 5

Refer to the exhibit. A company is using an S3 bucket to store migration logs. The company has set a lifecycle policy to transition objects to Glacier after 30 days and expire them after 365 days. After 45 days, the company notices that the objects are still in S3 Standard. What is the most likely reason?

Accepted Answer

The objects were created after the lifecycle policy was applied, so they have not reached 30 days of age yet.. The most likely reason is that the objects were created after the lifecycle policy was applied, so they have not reached 30 days of age yet. S3 Lifecycle policies transition objects based on their creation date. If the objects were uploaded after the policy was created, the 30-day clock starts from their creation date, not from when the policy was applied. Therefore, after 45 days from policy application, if the objects were created, say, 20 days after the policy, they would only be 25 days old and not yet transitioned.

Answer

The lifecycle policy has a filter that excludes these objects.

Answer

The lifecycle policy is not enabled for the bucket.

Answer

The S3 bucket versioning is disabled, so lifecycle rules do not apply.

Question 6

A company is migrating a monolithic application to AWS. They want to minimize changes to the application code while taking advantage of AWS managed services. Which migration strategy should they use?

Accepted Answer

Rehost / Lift-and-Shift. (Rehost / Lift-and-Shift) is correct because it involves moving the application as-is to AWS, typically using services like EC2, without requiring any code changes. This minimizes changes while leveraging AWS managed services. Option B (Repurchase) replaces the application with a SaaS solution, which is not what the company wants. Option C (Replatform) involves some optimization but still requires changes. Option D (Refactor) requires significant code changes to re-architect the application.

Answer

Repurchase / Drop and Shop

Answer

Replatform / Lift, Tinker, and Shift

Answer

Refactor / Re-architect

Question 7

A company is planning to migrate a legacy application to AWS. The application requires a fixed IP address that clients whitelist. The company wants to achieve high availability across two Availability Zones. Which architecture should they use?

Accepted Answer

Network Load Balancer (NLB) with Elastic IPs attached to each subnet. (NLB with Elastic IPs) is correct because NLB supports static IP addresses via Elastic IPs attached per subnet, enabling fixed IP whitelisting across AZs. Option A (AWS Global Accelerator with ALB) provides two static IPs from Global Accelerator but adds complexity and cost; the ALB itself uses a DNS name. Option C (Classic Load Balancer) does not support Elastic IPs per AZ effectively, using a DNS name instead. Option D (ALB) provides only a DNS name, not fixed IPs.

Answer

AWS Global Accelerator with Application Load Balancer

Answer

Classic Load Balancer with Elastic IPs

Answer

Application Load Balancer (ALB) with EC2 instances

Question 8

A company is migrating a stateful application to AWS and needs to preserve the client IP addresses at the application layer. The application runs on EC2 instances behind a load balancer. Which load balancer type should they use?

Accepted Answer

Network Load Balancer (NLB). Network Load Balancer (NLB) operates at Layer 4 and preserves the client's source IP address by default, which is required for the application to see the original client IP. It is ideal for stateful applications that need to maintain client IP affinity.

Answer

Application Load Balancer (ALB)

Answer

Classic Load Balancer (CLB)

Answer

Gateway Load Balancer (GWLB)

Question 9

A company is migrating a critical application to AWS and must ensure high availability across multiple Availability Zones. Which TWO AWS services can be used to distribute traffic across instances in multiple AZs?

Accepted Answer

Application Load Balancer (ALB). The Application Load Balancer (ALB) (option C) is correct because it is a regional, layer 7 load balancer that supports cross-zone load balancing and can register targets in multiple Availability Zones, distributing traffic across them for high availability. The Network Load Balancer (NLB) (option E) is also correct because it is a regional, layer 4 load balancer that natively supports targets in multiple AZs and can enable cross-zone load balancing to spread traffic across those AZs. Amazon CloudFront (option A) is a content delivery network that caches content at edge locations and is not designed to distribute traffic directly across instances in multiple AZs. AWS Global Accelerator (option B) directs traffic to optimal endpoints using anycast IPs but is aimed at global performance rather than balancing across instances within multiple AZs. Amazon Route 53 (option D) is a DNS service that can route traffic to multiple AZs via health checks and routing policies, but it does not itself distribute traffic across instances in multiple AZs as a load balancer does.

Answer

Amazon CloudFront

Answer

AWS Global Accelerator

Answer

Amazon Route 53

Question 10

A company is migrating a large on-premises data lake to Amazon S3. They need to transfer petabytes of data over the network securely and efficiently. Which TWO AWS services should they use?

Accepted Answer

AWS DataSync. AWS DataSync (D) is correct because it is a purpose-built data transfer service that automates and accelerates moving large datasets over the network to Amazon S3, handling scheduling, integrity verification, and incremental transfers efficiently. Amazon S3 Transfer Acceleration (E) is correct because it speeds up network transfers into S3 by routing data through AWS edge locations and the AWS global backbone, which is valuable for large over-the-network migrations. AWS Direct Connect (A) is not marked correct because it is a dedicated network connection rather than a data transfer service, and the scenario asks for services to perform the transfer. Amazon Kinesis Data Firehose (B) is not marked correct because it is a streaming ingestion service for real-time data, not bulk petabyte migration. AWS Snowball Edge (C) is not marked correct because it is an offline physical device for shipping data, whereas the scenario specifies transferring over the network.

Answer

AWS Direct Connect

Answer

Amazon Kinesis Data Firehose

Answer

AWS Snowball Edge

Question 11

A company is migrating a three-tier web application to AWS and wants to decouple the layers for scalability. Which THREE AWS services should they use?

Accepted Answer

Application Load Balancer (ALB). Application Load Balancer (ALB) is correct because it operates at Layer 7 and distributes HTTP/HTTPS traffic across the web tier, enabling horizontal scaling and health checks for the presentation layer. Amazon SQS is correct because it provides a fully managed message queue that decouples the web, application, and database tiers, allowing each tier to scale independently and absorb traffic spikes asynchronously. Amazon RDS is correct because it supplies a managed relational database for the data tier, supporting Multi-AZ and read replicas to scale reads and maintain durability for the persistent layer. Amazon CloudFront is not correct here because it is a CDN for caching static and dynamic content at edge locations, which improves latency but does not decouple application tiers. Amazon ElastiCache is not correct because it is an in-memory caching service that accelerates data access but does not provide the tier decoupling or relational persistence required by this architecture.

Answer

Amazon CloudFront

Answer

Amazon ElastiCache

Question 12

A company is migrating a large-scale Hadoop cluster to Amazon EMR. They want to optimize costs by using transient clusters and storing data in Amazon S3. Which feature should they enable on the EMR cluster to improve performance?

Accepted Answer

EMRFS consistent view. Amazon EMRFS with consistent view improves performance when using transient clusters and storing data in Amazon S3 by providing consistent metadata and read-after-write consistency. Option A (Auto Scaling) adjusts cluster size for compute needs, not storage performance. Option B (Kerberos authentication) is a security feature. Option D (EBS-optimized instances) ensures dedicated network bandwidth for EBS volumes, which does not directly enhance S3 I/O performance.

Answer

Auto Scaling

Answer

Kerberos authentication

Answer

EBS-optimized instances

Question 13

A company is migrating a large number of files from on-premises to Amazon S3. The files are accessed frequently and require low latency. Which TWO AWS services can help accelerate the migration? (Choose TWO.)

Accepted Answer

AWS DataSync. AWS DataSync (C) is correct because it is a purpose-built online data transfer service that automates and accelerates moving large volumes of files from on-premises storage (NFS, SMB, HDFS, or object storage) to Amazon S3 over the network, using parallel multi-threaded transfers and integrity verification. AWS Snowball Edge (E) is correct because it is a petabyte-scale physical edge device used to transfer large datasets offline, which is ideal when network bandwidth is insufficient for a bulk migration of many files. AWS Storage Gateway (A) is not correct here because it primarily provides ongoing hybrid access and caching to S3 for on-premises applications rather than being a bulk migration accelerator. AWS CloudFormation (B) is not correct because it is an infrastructure-as-code provisioning service and does not move data. Amazon S3 Transfer Acceleration (D) is not correct because, while it speeds up uploads to S3 via edge locations, it is a feature of S3 rather than a standalone AWS service and is not the intended answer for this scenario.

Answer

AWS Storage Gateway

Answer

AWS CloudFormation

Answer

Amazon S3 Transfer Acceleration

Question 14

A company is replatforming a legacy application to use AWS managed services. The application consists of a web server, an application server, and a MySQL database. Which THREE AWS services should the company use to modernize the architecture? (Choose THREE.)

Accepted Answer

Amazon ElastiCache. Amazon RDS for MySQL (option F) is correct because it replaces the self-managed MySQL database with a fully managed relational database service that handles provisioning, patching, backups, and Multi-AZ replication, directly matching the replatforming goal. Elastic Load Balancing (option C) is correct because it distributes incoming traffic across the web/application tier, providing managed high availability and health checks that a legacy single web server lacked. Amazon ElastiCache (option A) is correct because it adds a managed in-memory caching layer (Redis or Memcached) that offloads read pressure from the MySQL database and improves application latency, a common modernization step. Amazon EBS (option B) is not appropriate as a standalone modernization service since it is just block storage attached to EC2, which is the legacy model being moved away from. Amazon Route 53 (option D) is a DNS service that, while useful, is not one of the three core compute/database/caching managed services being asked for. Amazon EC2 (option E) is excluded because it represents the same self-managed server model the company is trying to replace with managed services.

Answer

Amazon EBS

Answer

Amazon Route 53

Answer

Amazon EC2

Question 15

A company is migrating a batch processing workload to AWS. The workload runs daily and processes large files. Which TWO AWS services are most suitable for this workload? (Choose TWO.)

Accepted Answer

AWS Step Functions. AWS Step Functions (A) is correct because it provides a serverless orchestration service with a state machine that can coordinate multi-step batch workflows, including retries, parallel branches, and error handling, which fits a daily large-file processing pipeline. AWS Batch (D) is correct because it is purpose-built for running batch computing workloads at scale, dynamically provisioning compute resources (EC2 or Fargate) and queuing jobs based on resource requirements, making it ideal for daily large-file processing. Amazon ECS (B) is a container orchestration service but lacks native batch job scheduling and queue management, so it is not the most suitable choice on its own. Amazon SQS (C) is a message queuing service for decoupling components, not a compute or batch orchestration service. AWS Lambda (E) has a 15-minute execution limit and limited ephemeral storage, making it unsuitable for processing large files in long-running batch jobs.

Answer

Amazon ECS

Answer

Amazon SQS

Answer

AWS Lambda