SAP-C02 Accelerate Workload Migration and Modernization Practice Test 23 — 15 Questions

Question 1

A company is migrating its on-premises VMware virtual machines to AWS. The company wants to use the same VM images and has a 10 Gbps direct connect link. Which service should be used to automate the migration of the VMs?

Accepted Answer

AWS VM Import/Export. AWS VM Import/Export allows importing VM images from on-premises to EC2, supporting VMware formats. Option B is wrong because Migration Hub is a tracking tool. Option C is wrong because Server Migration Service (SMS) is deprecated; AWS Application Migration Service (MGN) is the recommended replacement but VM Import/Export fits the requirement of using existing images. Option D is wrong because DataSync is for file/object storage.

Answer

AWS Migration Hub

Answer

AWS DataSync

Answer

AWS Server Migration Service

Question 2

A company is migrating a legacy application to AWS. The application requires a relational database with read replicas for reporting. The company wants to minimize operational overhead. Which TWO database services meet these requirements?

Accepted Answer

Amazon Aurora. Amazon Aurora is a MySQL- and PostgreSQL-compatible relational database built for the cloud, combining the performance and availability of high-end commercial databases with the simplicity and cost-effectiveness of open-source databases. It supports up to 15 low-latency read replicas, which can be used for reporting workloads, and it automates time-consuming tasks such as hardware provisioning, database setup, patching, and backups, thereby minimizing operational overhead.

Answer

Amazon DynamoDB

Answer

Amazon Redshift

Answer

Amazon ElastiCache

Question 3

A company is migrating a critical application to AWS and needs to ensure high availability across AWS Regions. The application uses a relational database. Which THREE components are necessary for this multi-region architecture?

Accepted Answer

Application Load Balancer in each region. For multi-region HA, an RDS cross-region read replica provides DR, Route 53 with failover routing directs traffic, and a global secondary index in DynamoDB is not relevant but actually for NoSQL. However, correct options: cross-region read replica, Route 53 failover, and an Application Load Balancer for regional distribution. Option D is wrong because VPC peering is within region. Option E is wrong because DynamoDB global tables are for NoSQL.

Answer

Amazon RDS Multi-AZ deployment

Answer

VPC peering between regions

Question 4

Which TWO AWS services can be used to migrate on-premises applications to AWS without modifying the application code?

Accepted Answer

AWS VM Import/Export. AWS VM Import/Export allows importing VM images as EC2 instances, preserving the OS and applications. AWS MGN automates lift-and-shift replication. AWS DMS requires some changes for database migration. AWS DataSync is for data transfer. AWS App2Container requires containerization.

Answer

AWS DataSync

Answer

AWS Database Migration Service (DMS)

Answer

AWS App2Container

Question 5

A company is modernizing a monolithic application into microservices on AWS. The application currently uses a single SQL database. Which THREE AWS services can help decouple the data layer and enable event-driven communication between microservices?

Accepted Answer

Amazon Simple Notification Service (SNS). Amazon SQS provides message queuing for async communication. Amazon SNS enables pub/sub messaging. Amazon EventBridge provides event bus for decoupled communication. Amazon RDS is a relational database, not for decoupling. Amazon ElastiCache is caching.

Answer

Amazon RDS

Answer

Amazon ElastiCache

Question 6

A company is migrating a legacy on-premises web application to AWS. The application consists of a stateless web tier and a stateful application tier that stores session data in memory. The company wants to achieve high availability and elasticity. The migration must minimize code changes. The solutions architect proposes using an Application Load Balancer (ALB) with sticky sessions and an Auto Scaling group for the web tier. For the application tier, they plan to use an ALB with sticky sessions and an Auto Scaling group. During testing, users report that they are unexpectedly logged out and lose session data. The application logs show that requests from the same user are being sent to different instances. Which change should the solutions architect make to resolve this issue?

Accepted Answer

Verify that the ALB stickiness configuration is enabled and the cookie duration is appropriate.. Sticky sessions rely on the ALB cookie. If the cookie is not set or is not being sent back, the load balancer cannot maintain session affinity. Checking the ALB stickiness configuration ensures that the duration and cookie settings are correct. Option A is wrong because moving sessions to ElastiCache requires code changes, which the company wants to minimize. Option B is wrong because cross-zone load balancing distributes traffic evenly but does not affect stickiness. Option D is wrong because disabling stickiness would worsen the problem.

Answer

Disable sticky sessions and use a Network Load Balancer instead.

Answer

Migrate session state to Amazon ElastiCache for Redis.

Answer

Disable cross-zone load balancing on the ALB.

Question 7

A company is migrating a large .NET application to AWS. The application uses Windows authentication and integrates with Active Directory. The company wants to minimize operational overhead for the directory service. The on-premises Active Directory is already synchronized to AWS using AWS Directory Service for Microsoft Active Directory. During migration, the application fails to authenticate users. The security team confirms that the on-premises AD and AWS Managed AD are in sync. The application is running on EC2 instances that are joined to the AWS Managed AD domain. The application logs show authentication errors. What is the most likely cause of the authentication failure?

Accepted Answer

The application is using a service account that is not in the AWS Managed AD.. When using AWS Managed AD, the EC2 instances need to be joined to the domain. However, the application's service account or configuration must be properly set up. The most common issue is that the application is using the wrong domain credentials or the service account does not have the necessary permissions. Option A is wrong because if instances are domain-joined, they can resolve DNS. Option B is wrong because the firewall rules are for network access, not authentication. Option D is wrong because NTLM is enabled by default.

Answer

The application requires NTLM authentication, which is disabled by default.

Answer

The security group does not allow traffic on port 389 (LDAP).

Answer

The EC2 instances cannot resolve the domain controller DNS name.

Question 8

A company is migrating its on-premises file server to AWS. The file server contains 50 TB of data stored on a Windows Server with NTFS permissions. The company needs to maintain the folder structure and permissions after migration. The migration must be completed within one week. The company has a 100 Mbps internet connection. Which approach should the solutions architect recommend?

Accepted Answer

Use AWS Snowball Edge to transfer data to an S3 bucket, then use AWS DataSync to copy to Amazon FSx for Windows File Server.. Given the data size and limited bandwidth, network transfer would take over 46 days. Using AWS Snowball Edge allows offline transfer of data to AWS, and then using AWS DataSync to copy to Amazon FSx for Windows File Server preserves permissions and structure. Option A is wrong because network transfer is too slow. Option B is wrong because Storage Gateway File Gateway requires network transfer for initial seeding. Option D is wrong because S3 does not support NTFS ACLs natively.

Answer

Use AWS Storage Gateway File Gateway to cache data on-premises and sync to S3.

Answer

Use AWS DataSync to transfer data directly to Amazon EFS over the internet.

Answer

Use AWS CLI to copy data directly to an S3 bucket, then mount S3 as a file system.

Question 9

A company is modernizing a legacy Java application to run on AWS. The application currently uses a monolithic architecture with a shared MySQL database. The company wants to adopt a microservices architecture using containers and wants to decouple the database. The solutions architect proposes using Amazon ECS with Fargate for compute and Amazon RDS for MySQL for the database. However, during the transition, the performance team notices that the database CPU utilization is consistently above 80% during peak hours. The application logs show many slow queries. The team suspects that the database is the bottleneck. The company wants to improve performance without rewriting the application. Which action should the solutions architect take first?

Accepted Answer

Enable Amazon RDS Performance Insights to identify the most resource-intensive queries.. Before making architectural changes, it's important to analyze the slow queries to identify root causes. Enabling RDS Performance Insights provides detailed query performance metrics. Option A is wrong because DynamoDB would require code changes. Option C is wrong because read replicas help with read traffic but not write-heavy or complex queries. Option D is wrong because scaling vertically may help but is not the first step; understanding the issue is better.

Answer

Add an RDS read replica and direct read traffic to it.

Answer

Scale up the RDS instance to a larger instance type.

Answer

Migrate the database to Amazon DynamoDB to eliminate relational bottlenecks.

Question 10

A company is planning to migrate its on-premises Oracle database to Amazon RDS for Oracle using AWS DMS. The database is 5 TB in size with continuous changes. Which TWO steps should the company take to minimize downtime during the migration?

Accepted Answer

Set up ongoing replication using change data capture (CDC) from the start.. Option A is correct because using a large instance type for DMS improves performance. Option C is correct because setting up ongoing replication reduces downtime. Option B is wrong because the full load should be done before CDC. Option D is wrong because direct connect is not required. Option E is wrong because Multi-AZ is for high availability, not migration speed.

Answer

Enable Multi-AZ on the target RDS instance during migration.

Answer

Use AWS Direct Connect to establish a dedicated network connection.

Answer

Perform a full load migration first, then apply CDC after the cutover window.

Question 11

A company is migrating a monolithic application to a microservices architecture on Amazon ECS. The application uses a shared MySQL database. Which THREE strategies should the company use to modernize the data layer?

Accepted Answer

Use database per service pattern.. Option A is correct for splitting the database. Option C is correct for implementing CQRS. Option E is correct for using read replicas to offload reads. Option B is wrong because a single RDS instance doesn't decompose the monolith. Option D is wrong because DynamoDB may not suit all workloads.

Answer

Migrate all data to Amazon DynamoDB.

Answer

Keep a single RDS instance with multiple schemas.

Question 12

A company is migrating its on-premises VMware VMs to AWS using AWS MGN. After the test cutover, the migrated EC2 instance fails the health check. The source VM runs Windows Server 2016 with a static IP. What is the most likely cause?

Accepted Answer

The source VM's static IP configuration was not changed to DHCP.. Option B is correct because static IP conflicts with AWS DHCP. Option A is wrong because instance type does not affect health checks. Option C is wrong because the volume type is not a factor. Option D is wrong because security groups are not related to DHCP.

Answer

The security group does not allow inbound RDP.

Answer

The EBS volume type is not gp3.

Answer

The instance type is not compatible with Windows Server 2016.

Question 13

A company is migrating its on-premises data warehouse to Amazon Redshift. The existing system uses PostgreSQL and has 10 TB of data. The migration must be completed within a 4-hour downtime window. The company has a 1 Gbps AWS Direct Connect connection. After starting the migration using AWS DMS with a full load and CDC, the full load takes 6 hours. What should the company do to meet the downtime window?

Accepted Answer

Configure multiple DMS tasks to load different tables in parallel.. Option C is correct because parallel loading increases throughput. Option A is wrong because reducing data is not feasible. Option B is wrong because VPN is slower. Option D is wrong because Snowball adds latency and manual steps.

Answer

Use AWS Snowball Edge to transfer the data physically.

Answer

Reduce the amount of data by archiving older records.

Answer

Use AWS VPN instead of Direct Connect for higher bandwidth.

Question 14

A company is modernizing a legacy .NET application by containerizing it on Amazon ECS. The application currently uses Windows authentication against on-premises Active Directory. After migrating, the application needs to authenticate users against AWS Managed Microsoft AD. The security team requires that credentials never leave the corporate network. Which solution should the company implement?

Accepted Answer

Set up AWS Managed Microsoft AD with a two-way trust to on-premises AD over Direct Connect.. Option A is correct because AWS Managed Microsoft AD connects via Direct Connect. Option B is wrong because AD Connector proxies but does not keep credentials on-premises. Option C is wrong because Simple AD lacks features. Option D is wrong because on-premises AD is not integrated.

Answer

Store user passwords in AWS Secrets Manager and authenticate against it.

Answer

Use AWS AD Connector to proxy authentication to on-premises AD.

Answer

Use AWS Directory Service Simple AD with password sync.

Question 15

A company is migrating its on-premises NoSQL database (MongoDB) to Amazon DocumentDB. The migration must have minimal downtime. The company uses AWS DMS with ongoing replication. After starting the replication, the target DocumentDB cluster shows a lag of several minutes. The source MongoDB has high write throughput. What should the company do to reduce replication lag?

Accepted Answer

Increase the DMS replication instance size.. Option A is correct because larger DMS instances handle higher throughput. Option B is wrong because increasing DocumentDB size doesn't help DMS. Option C is wrong because CDC captures changes. Option D is wrong because Parallel Apply is not a DMS setting.

Answer

Increase the DocumentDB cluster instance size.

Answer

Disable CDC and perform a full load only.

Answer

Enable Parallel Apply in DMS task settings.