SAP-C02 Accelerate Workload Migration and Modernization Practice Test 4 — 15 Questions

Question 1

A company is migrating a legacy CRM application to AWS. The application uses a proprietary database that is not supported by Amazon RDS. The company wants to minimize licensing costs. The current on-premises deployment uses a single server. Which migration strategy should the company use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Rehost the application on Amazon EC2 and install the same proprietary database on an EC2 instance.. Rehosting (lift-and-shift) the application on EC2 with the same proprietary database minimizes licensing costs by using existing licenses, and avoids the need to refactor or replace the database. Option B is wrong because replacing the database with a SaaS alternative may increase costs and complexity. Option C is wrong because refactoring to use a different database engine would require significant application changes and may incur new licensing costs. Option D is wrong because DMS cannot migrate to a proprietary database unsupported by RDS, and RDS does not support the proprietary database.

Answer

Rehost the application, but replace the database with a SaaS alternative.

Answer

Refactor the application to use a different database engine that is supported by Amazon RDS.

Answer

Use AWS Database Migration Service (DMS) to migrate the database to Amazon RDS.

Question 2

A company is migrating a batch processing workload to AWS. The workload runs on a schedule and processes large files stored on a network file system. The company wants to use a serverless architecture to reduce costs. Which combination of AWS services should the company use?

Accepted Answer

AWS Step Functions, AWS Lambda, and Amazon S3.. AWS Step Functions can orchestrate the workflow, AWS Lambda can process files in a serverless manner, and Amazon S3 can store the large files. Option A is wrong because Amazon EMR is not a serverless service and EFS is a network file system, not ideal for serverless batch processing. Option B is wrong because Amazon Kinesis Data Firehose is designed for streaming data, not batch processing of large files. Option D is wrong because Amazon EC2 and EBS are not serverless.

Answer

AWS Step Functions, Amazon EMR, and Amazon EFS.

Answer

Amazon CloudWatch Events, AWS Lambda, and Amazon Kinesis Data Firehose.

Answer

Amazon CloudWatch Events, Amazon EC2, and Amazon EBS.

Question 3

A company is migrating a legacy application to AWS and needs to ensure that the application can access on-premises resources securely. The company has established an AWS Direct Connect connection. Which AWS service should the company use to route traffic between the VPC and the on-premises network?

Accepted Answer

Virtual Private Gateway (VGW).. Virtual Private Gateway (VGW). A VGW is required to terminate the AWS Direct Connect connection and route traffic between the VPC and the on-premises network. Option B (VPC Peering) only connects VPCs, not on-premises networks. Option C (Internet Gateway) is for internet access, not private connectivity via Direct Connect. Option D (AWS Transit Gateway) can be used to interconnect multiple VPCs and on-premises networks, but for a single VPC connected via Direct Connect, a VGW is the direct and appropriate service.

Answer

VPC Peering.

Answer

Internet Gateway (IGW).

Answer

AWS Transit Gateway.

Question 4

A company is migrating a stateful firewall appliance to AWS. The appliance currently inspects traffic between multiple on-premises segments. In AWS, the company wants to deploy the appliance in a VPC to inspect traffic between subnets. Which architecture should the company use to ensure that the appliance can inspect all traffic?

Accepted Answer

Deploy the appliance behind a Gateway Load Balancer in an inspection VPC and use a Transit Gateway to route traffic through it.. A Gateway Load Balancer (GWLB) can be deployed in an inspection VPC and used with a Transit Gateway to route traffic from subnets through the appliance for inspection. Option A is wrong because an Application Load Balancer cannot inspect traffic and is designed for HTTP/HTTPS. Option C is wrong because a Network Load Balancer does not inspect traffic; it forwards traffic without inspection. Option D is wrong because VPC Gateway Endpoints are used to access AWS services privately, not for traffic inspection.

Answer

Deploy the appliance behind an Application Load Balancer and configure the VPC route tables.

Answer

Deploy the appliance behind a Network Load Balancer and configure the VPC route tables to send traffic to the NLB.

Answer

Use VPC Gateway Endpoints to route traffic through the appliance.

Question 5

A company is migrating a web application to AWS and wants to use a multi-tier architecture with an Auto Scaling group of EC2 instances behind an Application Load Balancer. The company needs to store session state for the application. Which TWO approaches should the company use to store session state in a scalable and highly available manner? (Choose TWO.)

Accepted Answer

Use Amazon DynamoDB with on-demand capacity.. Options A and D are correct because ElastiCache for Redis and DynamoDB are both highly available and scalable solutions for session state. Option B is wrong because instance store is ephemeral and data is lost if the instance stops or terminates. Option C is wrong because EBS snapshots are point-in-time backups and cannot be used for real-time session state sharing. Option E is wrong because RDS is a relational database not optimized for session state storage.

Answer

Use an EC2 instance store for each instance.

Answer

Use Amazon EBS snapshots shared across instances.

Answer

Use Amazon RDS for MySQL with Multi-AZ.

Question 6

A company is migrating a legacy application that uses hard-coded IP addresses for database connections. The company wants to refactor the application to use a more resilient architecture in AWS. Which THREE steps should the company take to modernize the database connectivity? (Choose THREE.)

Accepted Answer

Use Amazon RDS read replicas to offload read traffic and improve resilience.. Read replicas can offload read traffic and enhance resilience, but note that read replicas are primarily for read scaling, not automatic failover. Option D is correct because using the RDS endpoint (DNS name) in the connection string allows the application to automatically reconnect to a new primary instance during failover, removing the hard-coded IP address. Option E is correct because storing the database endpoint in an environment variable or configuration file decouples the application from the infrastructure, enabling easier updates and failover handling. Option A is incorrect because Multi-AZ deployment provides high availability with automatic failover, but it does not directly address the issue of hard-coded IP addresses; the application still needs to use the DNS endpoint. Option C is incorrect because Elastic IP addresses are not suitable for RDS; RDS uses DNS endpoints for connectivity, and Elastic IPs are associated with EC2 instances, not RDS.

Answer

Enable Multi-AZ deployment for the RDS instance to automatically failover.

Answer

Assign an Elastic IP address to the RDS instance for consistent connectivity.

Question 7

A company is migrating a batch processing workload to AWS. The workload reads input files from an on-premises NFS server, processes them, and writes output files. The company wants to use AWS managed services and minimize operational overhead. Which TWO AWS services should the company use to replace the on-premises NFS server? (Choose TWO.)

Accepted Answer

AWS DataSync to transfer files from on-premises to Amazon EFS.. Options B and E are correct. AWS DataSync efficiently transfers data from the on-premises NFS server to Amazon EFS, and Amazon EFS provides a fully managed NFS file system that the batch processing workload can use directly. Option A (S3 with S3 File Gateway) is not ideal because S3 File Gateway presents S3 as a file share but adds complexity. Option C (Storage Gateway File Gateway) can provide an NFS mount, but DataSync is specifically for data transfer, and for ongoing access, EFS is better. Option D (EBS with shared snapshot) is wrong because EBS is block storage, not file, and shared snapshots do not provide a writable file system.

Answer

Amazon S3 with S3 File Gateway.

Answer

AWS Storage Gateway File Gateway.

Answer

Amazon EBS with a shared snapshot.

Question 8

Refer to the exhibit. A company has attached this IAM policy to an IAM role used by an application running on an EC2 instance in a VPC with CIDR 10.0.0.0/16. The application is unable to read objects from the S3 bucket. What is the most likely cause?

Accepted Answer

The condition key aws:SourceIp uses the private IP of the instance, but S3 sees the public IP.. The IAM policy uses the `aws:SourceIp` condition key with the private IP address of the EC2 instance (10.0.0.x). However, when the instance accesses S3, the request originates from the instance's public IP address (or the NAT gateway's public IP). Since the `aws:SourceIp` condition checks the source IP of the request, and it expects the private IP, the condition fails and denies access to the S3 bucket. Therefore, the most likely cause is that the condition key uses the private IP but S3 sees the public IP (option C). Option A is incorrect because the instance has an IAM role attached (implied by the policy being attached to the role). Option B is incorrect because the `s3:GetObject` action is allowed, and `s3:ListBucket` is not required to read objects if the bucket policy allows it. Option D is incorrect because the bucket policy is not mentioned and the issue lies with the IAM policy condition.

Answer

The EC2 instance does not have an IAM instance profile.

Answer

The policy does not allow the s3:ListBucket action.

Answer

The S3 bucket policy denies access.

Question 9

Refer to the exhibit. A company is using AWS CloudFormation to migrate a serverless application. The stack creation failed. Based on the stack events, what is the root cause of the failure?

Accepted Answer

The AWS Lambda runtime specified in the template is not supported in the us-east-1 region.. The stack event error message indicates that the Lambda runtime 'nodejs18.x' is not supported in the us-east-1 region. This is a specific runtime issue, not a syntax error (A), permission issue (C), or code size limit (D).

Answer

The CloudFormation template has a syntax error.

Answer

The IAM role for the Lambda function does not have sufficient permissions.

Answer

The Lambda function code exceeds the maximum size limit.

Question 10

Refer to the exhibit. A company is using an S3 bucket to store migration logs. The company has set a lifecycle policy to transition objects to Glacier after 30 days and expire them after 365 days. After 45 days, the company notices that the objects are still in S3 Standard. What is the most likely reason?

Accepted Answer

The objects were created after the lifecycle policy was applied, so they have not reached 30 days of age yet.. The lifecycle policy transitions objects based on their creation date (age), not the policy creation date. If the objects were created after the policy was applied, they have not yet reached 30 days of age even though 45 days have passed since policy creation. For example, objects created 20 days ago are only 20 days old and will not transition until they are 30 days old. Option A is incorrect because while a filter could exclude objects, it is not the most likely reason given no evidence of a filter. Option C is incorrect because the policy is enabled (implied by the exhibit). Option D is incorrect because lifecycle rules apply regardless of versioning state; versioning is not required for transitions.

Answer

The lifecycle policy has a filter that excludes these objects.

Answer

The lifecycle policy is not enabled for the bucket.

Answer

The S3 bucket versioning is disabled, so lifecycle rules do not apply.

Question 11

A company is migrating a monolithic application to AWS. They want to minimize changes to the application code while taking advantage of AWS managed services. Which migration strategy should they use?

Accepted Answer

Rehost / Lift-and-Shift. (Rehost / Lift-and-Shift) is correct because it involves moving the application as-is to AWS, typically using services like EC2, without requiring any code changes. This minimizes changes while leveraging AWS managed services. Option B (Repurchase) replaces the application with a SaaS solution, which is not what the company wants. Option C (Replatform) involves some optimization but still requires changes. Option D (Refactor) requires significant code changes to re-architect the application.

Answer

Repurchase / Drop and Shop

Answer

Replatform / Lift, Tinker, and Shift

Answer

Refactor / Re-architect

Question 12

A company is migrating an on-premises Microsoft SQL Server database to Amazon RDS for SQL Server. They need to minimize downtime and ensure data consistency. Which AWS service should they use for the migration?

Accepted Answer

AWS Database Migration Service (DMS). (AWS DMS) is correct because it supports homogeneous migrations with minimal downtime using continuous replication. Option A (DataSync) is for file-based data. Option B (SCT) only provides schema conversion. Option D (Glue) is for ETL jobs.

Answer

AWS DataSync

Answer

AWS Schema Conversion Tool (SCT)

Answer

AWS Glue

Question 13

A company is moving its application from on-premises to AWS. They want to use the same third-party software licenses on AWS. Which AWS purchasing option allows them to bring their own licenses?

Accepted Answer

Dedicated Hosts. (Dedicated Hosts) is correct because it provides visibility and control over physical servers, allowing you to use your own licenses per socket/core. Option A (Savings Plans) is just a billing discount. Option C (Spot Instances) are interruptible. Option D (Reserved Instances) is also a billing discount and does not provide the license flexibility of Dedicated Hosts.

Answer

Savings Plans

Answer

Spot Instances

Answer

Reserved Instances

Question 14

A company is migrating a web application to AWS and wants to automatically scale the application based on CPU utilization. The application runs on a set of EC2 instances behind an Application Load Balancer. Which combination of AWS services should they use?

Accepted Answer

Auto Scaling group with a simple scaling policy based on CloudWatch CPU alarm. Auto Scaling group with a simple scaling policy based on a CloudWatch CPU alarm. This directly scales EC2 instances in response to CPU utilization, providing automatic scaling. Option A is incorrect because AWS Lambda with scheduled scaling does not dynamically respond to CPU utilization; it's time-based. Option B (Amazon CloudFront) is a content delivery network, not a scaling mechanism. Option C (Elastic Beanstalk) manages environments but the underlying scaling relies on Auto Scaling groups; the question asks for the combination of services, and the core scaling service is the Auto Scaling group. Therefore, D is the correct choice.

Answer

AWS Lambda with scheduled scaling

Answer

Amazon CloudFront with origin scaling

Answer

AWS Elastic Beanstalk with environment scaling

Question 15

A company is migrating a large-scale .NET application to AWS. The application uses Windows authentication and requires Active Directory integration. The company wants to reduce operational overhead. Which migration approach should they use?

Accepted Answer

Rehost on EC2 with AWS Managed Microsoft AD. (Rehost on EC2 with AWS Managed Microsoft AD) is correct because it provides Active Directory integration without the need to manage domain controllers, reducing operational overhead. Option A (Rehost on EC2 with on-premises AD via VPN) still requires managing on-premises resources and doesn't fully reduce overhead. Option C (Replatform to use Amazon Cognito) is aimed at web identity federation, not traditional Windows AD authentication. Option D (Replatform to AWS Elastic Beanstalk with Amazon Lightsail) does not support Windows authentication or AD integration effectively.

Answer

Rehost on EC2 with on-premises AD via VPN

Answer

Replatform to use Amazon Cognito for authentication

Answer

Replatform to AWS Elastic Beanstalk with Amazon Lightsail