SAP-C02 Accelerate Workload Migration and Modernization Practice Test 3 — 15 Questions

Question 1

A company is migrating a batch processing workload to AWS. The workload runs on a schedule and processes large files stored on a network file system. The company wants to use a serverless architecture to reduce costs. Which combination of AWS services should the company use?

Accepted Answer

AWS Step Functions, AWS Lambda, and Amazon S3.. Option A is correct because AWS Step Functions can orchestrate the workflow, Lambda can process files, and S3 can store the files. Option B is wrong because EMR is not serverless. Option C is wrong because EC2 is not serverless. Option D is wrong because Kinesis is for streaming.

Answer

AWS Step Functions, Amazon EMR, and Amazon EFS.

Answer

Amazon CloudWatch Events, AWS Lambda, and Amazon Kinesis Data Firehose.

Answer

Amazon CloudWatch Events, Amazon EC2, and Amazon EBS.

Question 2

A company is migrating a legacy application to AWS and needs to ensure that the application can access on-premises resources securely. The company has established an AWS Direct Connect connection. Which AWS service should the company use to route traffic between the VPC and the on-premises network?

Accepted Answer

Virtual Private Gateway (VGW).. Option C is correct because a virtual private gateway (VGW) is required to terminate the Direct Connect connection and route traffic. Option A is wrong because Transit Gateway is used for multiple VPCs. Option B is wrong because VPC Peering is for VPC-to-VPC. Option D is wrong because Internet Gateway is for internet access.

Answer

VPC Peering.

Answer

Internet Gateway (IGW).

Answer

AWS Transit Gateway.

Question 3

A company is migrating a stateful firewall appliance to AWS. The appliance currently inspects traffic between multiple on-premises segments. In AWS, the company wants to deploy the appliance in a VPC to inspect traffic between subnets. Which architecture should the company use to ensure that the appliance can inspect all traffic?

Accepted Answer

Deploy the appliance behind a Gateway Load Balancer in an inspection VPC and use a Transit Gateway to route traffic through it.. Option A is correct because a Gateway Load Balancer (GWLB) can be deployed in the inspection VPC and route traffic from the transit gateway to the appliance for inspection. Option B is wrong because NLB cannot inspect traffic. Option C is wrong because ALB is for HTTP/HTTPS. Option D is wrong because VPC endpoints are for accessing services.

Answer

Deploy the appliance behind an Application Load Balancer and configure the VPC route tables.

Answer

Deploy the appliance behind a Network Load Balancer and configure the VPC route tables to send traffic to the NLB.

Answer

Use VPC Gateway Endpoints to route traffic through the appliance.

Question 4

A company is migrating a web application to AWS and wants to use a multi-tier architecture with an Auto Scaling group of EC2 instances behind an Application Load Balancer. The company needs to store session state for the application. Which TWO approaches should the company use to store session state in a scalable and highly available manner? (Choose TWO.)

Accepted Answer

Use Amazon DynamoDB with on-demand capacity.. Options A and D are correct because ElastiCache for Redis and DynamoDB are both highly available and scalable solutions for session state. Option B is wrong because EBS is tied to a single instance. Option C is wrong because instance store is ephemeral. Option E is wrong because RDS is not optimized for session state.

Answer

Use an EC2 instance store for each instance.

Answer

Use Amazon EBS snapshots shared across instances.

Answer

Use Amazon RDS for MySQL with Multi-AZ.

Question 5

A company is migrating a legacy application that uses hard-coded IP addresses for database connections. The company wants to refactor the application to use a more resilient architecture in AWS. Which THREE steps should the company take to modernize the database connectivity? (Choose THREE.)

Accepted Answer

Use Amazon RDS read replicas to offload read traffic and improve resilience.. Options B, C, and D are correct because using an RDS endpoint (DNS name) allows failover, modifying the application to use the DNS name removes hard-coded IPs, and using a read replica offloads read traffic. Option A is wrong because an Elastic IP is not recommended for RDS. Option E is wrong because Multi-AZ is for high availability, not for removing hard-coded IPs.

Answer

Enable Multi-AZ deployment for the RDS instance to automatically failover.

Answer

Assign an Elastic IP address to the RDS instance for consistent connectivity.

Question 6

A company is migrating a batch processing workload to AWS. The workload reads input files from an on-premises NFS server, processes them, and writes output files. The company wants to use AWS managed services and minimize operational overhead. Which TWO AWS services should the company use to replace the on-premises NFS server? (Choose TWO.)

Accepted Answer

AWS DataSync to transfer files from on-premises to Amazon EFS.. Options B and D are correct because Amazon EFS provides a scalable NFS file system, and AWS DataSync can migrate data from on-premises to EFS. Option A is wrong because S3 is object storage, not file. Option C is wrong because Storage Gateway File Gateway also provides NFS, but DataSync is more efficient for initial migration. Option E is wrong because EBS is block storage and not shared.

Answer

Amazon S3 with S3 File Gateway.

Answer

AWS Storage Gateway File Gateway.

Answer

Amazon EBS with a shared snapshot.

Question 7

Refer to the exhibit. A company has attached this IAM policy to an IAM role used by an application running on an EC2 instance in a VPC with CIDR 10.0.0.0/16. The application is unable to read objects from the S3 bucket. What is the most likely cause?

Accepted Answer

The condition key aws:SourceIp uses the private IP of the instance, but S3 sees the public IP.. Option D is correct because the condition checks the source IP of the request, but EC2 instances use public IPs when accessing S3, so the private IP condition fails. Option A is wrong because the policy allows GetObject. Option B is wrong because S3 does not require a role for bucket access. Option C is wrong because the bucket policy is not shown.

Answer

The EC2 instance does not have an IAM instance profile.

Answer

The policy does not allow the s3:ListBucket action.

Answer

The S3 bucket policy denies access.

Question 8

Refer to the exhibit. A company is using AWS CloudFormation to migrate a serverless application. The stack creation failed. Based on the stack events, what is the root cause of the failure?

Accepted Answer

The AWS Lambda runtime specified in the template is not supported in the us-east-1 region.. Option C is correct because the error message explicitly states 'The runtime parameter of nodejs18.x is not supported'. Option A is wrong because the error is specifically about the runtime. Option B is wrong because the error is not about permissions. Option D is wrong because it is a Lambda runtime issue, not a CloudFormation template issue.

Answer

The CloudFormation template has a syntax error.

Answer

The IAM role for the Lambda function does not have sufficient permissions.

Answer

The Lambda function code exceeds the maximum size limit.

Question 9

Refer to the exhibit. A company is using an S3 bucket to store migration logs. The company has set a lifecycle policy to transition objects to Glacier after 30 days and expire them after 365 days. After 45 days, the company notices that the objects are still in S3 Standard. What is the most likely reason?

Accepted Answer

The objects were created after the lifecycle policy was applied, so they have not reached 30 days of age yet.. Option A is correct because lifecycle policies transition objects based on the object's age, not the creation date of the policy. The objects are less than 30 days old if they were created after the policy was applied. Option B is wrong because the policy is enabled. Option C is wrong because the filter is empty (applies to all). Option D is wrong because the policy defines a transition.

Answer

The lifecycle policy has a filter that excludes these objects.

Answer

The lifecycle policy is not enabled for the bucket.

Answer

The S3 bucket versioning is disabled, so lifecycle rules do not apply.

Question 10

A company is migrating a monolithic application to AWS. They want to minimize changes to the application code while taking advantage of AWS managed services. Which migration strategy should they use?

Accepted Answer

Rehost / Lift-and-Shift. Option B (Rehost) is correct because it involves moving the application as-is to AWS, often using services like EC2, without code changes. Option A (Refactor) requires code changes. Option C (Replatform) involves some optimizations but still requires changes. Option D (Repurchase) replaces the application with a SaaS solution.

Answer

Repurchase / Drop and Shop

Answer

Replatform / Lift, Tinker, and Shift

Answer

Refactor / Re-architect

Question 11

A company is migrating an on-premises Microsoft SQL Server database to Amazon RDS for SQL Server. They need to minimize downtime and ensure data consistency. Which AWS service should they use for the migration?

Accepted Answer

AWS Database Migration Service (DMS). Option C (AWS DMS) is correct because it supports heterogeneous migrations with minimal downtime using continuous replication. Option A (SCT) only provides schema conversion. Option B (DataSync) is for file-based data. Option D (Glue) is for ETL jobs.

Answer

AWS DataSync

Answer

AWS Schema Conversion Tool (SCT)

Answer

AWS Glue

Question 12

A company is planning to migrate a legacy application to AWS. The application requires a fixed IP address that clients whitelist. The company wants to achieve high availability across two Availability Zones. Which architecture should they use?

Accepted Answer

Network Load Balancer (NLB) with Elastic IPs attached to each subnet. Option B (NLB with Elastic IPs) is correct because NLB supports static IP addresses and can be associated with Elastic IPs for each AZ. Option A (ALB) provides a DNS name, not fixed IP. Option C (Global Accelerator) provides two static IPs but is more complex and costly. Option D (Classic Load Balancer) does not support Elastic IPs per AZ effectively.

Answer

AWS Global Accelerator with Application Load Balancer

Answer

Classic Load Balancer with Elastic IPs

Answer

Application Load Balancer (ALB) with EC2 instances

Question 13

A company is moving its application from on-premises to AWS. They want to use the same third-party software licenses on AWS. Which AWS purchasing option allows them to bring their own licenses?

Accepted Answer

Dedicated Hosts. Option D (Dedicated Hosts) is correct because it provides visibility and control over physical servers, allowing you to use your own licenses per socket/core. Option A (Reserved Instances) is just a billing discount. Option B (Savings Plans) also a discount. Option C (Spot Instances) are interruptible.

Answer

Savings Plans

Answer

Spot Instances

Answer

Reserved Instances

Question 14

A company is migrating a web application to AWS and wants to automatically scale the application based on CPU utilization. The application runs on a set of EC2 instances behind an Application Load Balancer. Which combination of AWS services should they use?

Accepted Answer

Auto Scaling group with a simple scaling policy based on CloudWatch CPU alarm. Option A (Auto Scaling group with a scaling policy based on CPU) is correct because it directly scales EC2 instances. Option B (Lambda scheduled scaling) is not dynamic. Option C (Elastic Beanstalk) is a PaaS, but the question asks for services: Auto Scaling group is the service. Option D (CloudFront) is a CDN.

Answer

AWS Lambda with scheduled scaling

Answer

Amazon CloudFront with origin scaling

Answer

AWS Elastic Beanstalk with environment scaling

Question 15

A company is migrating a large-scale .NET application to AWS. The application uses Windows authentication and requires Active Directory integration. The company wants to reduce operational overhead. Which migration approach should they use?

Accepted Answer

Rehost on EC2 with AWS Managed Microsoft AD. Option C (Deploy on EC2 with Managed Microsoft AD) is correct because it provides Active Directory without managing domain controllers. Option A (Lift-and-shift to on-premises AD) doesn't reduce overhead. Option B (Use Cognito) is for web identity, not AD. Option D (Deploy on Lightsail) has limited AD support.

Answer

Rehost on EC2 with on-premises AD via VPN

Answer

Replatform to use Amazon Cognito for authentication

Answer

Replatform to AWS Elastic Beanstalk with Amazon Lightsail