SAP-C02 Accelerate Workload Migration and Modernization Practice Test 9 — 15 Questions

Question 1

A company is migrating a legacy on-premises .NET application to AWS. The application uses a SQL Server database. The company wants to minimize code changes and reduce licensing costs. Which migration strategy should the company choose?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Rehost the application on Amazon EC2 with SQL Server or use Amazon RDS for SQL Server with license-included pricing.. Rehosting (lift-and-shift) the .NET application on EC2 with SQL Server, or using Amazon RDS for SQL Server with license-included pricing, minimizes code changes because the application continues to run on the same platform and database engine. RDS license-included pricing also reduces licensing overhead by bundling the SQL Server license into the instance cost, addressing the cost concern.

Answer

Rebuild the application using AWS Lambda and Amazon RDS for MySQL.

Answer

Replatform the application to use Amazon Aurora PostgreSQL.

Answer

Refactor the application to use Amazon DynamoDB.

Question 2

A company is planning to migrate 50 TB of data from on-premises to Amazon S3 over a 100 Mbps internet connection. The data is not time-sensitive and can tolerate some latency. Which migration method is MOST cost-effective and suitable?

Accepted Answer

Use AWS Snowball Edge devices to transfer the data.. AWS Snowball Edge is designed for large-scale data transfer when network bandwidth is limited, making it cost-effective for 50 TB over a 100 Mbps link. Option A is wrong because AWS DataSync over the internet would take very long (approximately 46 days) and is not optimal for such a large volume. Option B is wrong because S3 Transfer Acceleration improves speed via optimized routing but cannot overcome the 100 Mbps bandwidth cap; the transfer would still be slow. Option D is wrong because a 1 Gbps Direct Connect connection would be significantly more expensive than Snowball Edge, and since the data is not time-sensitive, physical shipment is more suitable.

Answer

Use AWS DataSync over the existing internet connection.

Answer

Enable S3 Transfer Acceleration on the destination bucket.

Answer

Provision a 1 Gbps AWS Direct Connect connection.

Question 3

A company is migrating a monolithic application to AWS. The application currently runs on a single on-premises server with a MySQL database. The company wants to reduce operational overhead and improve scalability. Which combination of AWS services should the company use?

Accepted Answer

Use AWS Elastic Beanstalk to deploy the application and Amazon RDS for MySQL as the database.. AWS Elastic Beanstalk provides a managed platform for deploying applications while automatically handling capacity provisioning, load balancing, and scaling, which reduces operational overhead. Amazon RDS for MySQL is a managed relational database service that offloads database administration tasks like patching, backups, and replication. Together, they offer a low-overhead migration path that improves scalability while preserving the MySQL relational model.

Answer

Containerize the application and run on Amazon ECS with AWS Fargate, and use Amazon Aurora Serverless for MySQL.

Answer

Migrate the database to Amazon DynamoDB and host the application on AWS Lambda.

Answer

Host the application on Amazon EC2 and use Amazon RDS for MySQL.

Question 4

A company is migrating a web application to AWS and wants to use a blue/green deployment strategy to minimize downtime. The application runs on EC2 instances behind an Application Load Balancer (ALB). Which approach should be used?

Accepted Answer

Create a new target group for the green environment, register the new instances, test, and then modify the ALB listener rule to forward traffic to the green target group.. Blue/green deployment involves creating a new target group for the green environment, registering the new instances, testing, and then modifying the ALB listener rule to forward traffic to the green target group. Option A is wrong because stopping old instances before starting new ones would cause downtime. Option B is wrong because an in-place update of the Auto Scaling group would cause downtime. Option D is wrong because using a different ALB and updating DNS is not a typical blue/green deployment with ALB; it adds unnecessary complexity and may cause delays.

Answer

Stop the old instances, start the new instances, and update the ALB target group.

Answer

Use an AWS CloudFormation stack update to replace the Auto Scaling group and instances in place.

Answer

Deploy the new instances behind a different ALB and update DNS to point to the new ALB.

Question 5

A company is migrating a batch processing workload to AWS. The workload runs on a scheduled basis and processes large files from an on-premises NFS share. The company wants to use AWS services to replace the on-premises server and minimize operational overhead. Which solution is MOST suitable?

Accepted Answer

Mount the on-premises NFS share to Amazon EFS using AWS Direct Connect, and use AWS Batch with AWS Fargate to process the files.. AWS Batch with AWS Fargate is a serverless compute service that integrates with Amazon EFS. By mounting the on-premises NFS share to EFS via AWS Direct Connect, files are accessible in AWS without copying. AWS Batch can then process the files on a scheduled basis, minimizing operational overhead. Option A is wrong because AWS Lambda has execution time and file size limits, and directly reading from NFS over VPN may be unreliable. Option C is wrong because Snowball Edge is a one-time transfer tool, not suitable for ongoing scheduled processing. Option D is wrong because while DataSync can copy files to S3, triggering Lambda has similar limitations, and using EC2 adds management overhead.

Answer

Use AWS Lambda to directly read from the NFS share over VPN and process the files.

Answer

Use AWS Snowball Edge to transfer files to Amazon S3 and then process with EC2 instances.

Answer

Use AWS DataSync to copy files to Amazon S3 and trigger an AWS Lambda function to process.

Question 6

A company is migrating a large-scale application to AWS. The application uses a message queue for decoupling components. The current on-premises solution uses RabbitMQ. The company wants a managed service that supports message durability and at-least-once delivery. Which THREE AWS services meet these requirements? (Choose THREE.)

Accepted Answer

Amazon MQ (managed RabbitMQ broker).. Amazon MQ (B) is correct because it provides a managed RabbitMQ broker, so the existing RabbitMQ-based application can migrate with minimal code changes while retaining durable queues and at-least-once delivery semantics. Amazon SQS FIFO (C) is correct because FIFO queues persist messages across multiple Availability Zones, support message durability, and guarantee at-least-once delivery (with deduplication and strict ordering). Amazon SQS standard queue (E) is correct because standard queues are also durable, storing messages redundantly across multiple AZs, and provide at-least-once delivery, though without ordering guarantees. Amazon SNS (A) is not correct because it is a pub/sub notification service that does not itself store messages for pull-based consumers with at-least-once delivery as a queue does. Amazon Kinesis Data Streams (D) is not correct because it is a streaming service with at-least-once processing options but is not a message queue with the durability and delivery semantics matching the RabbitMQ replacement scenario.

Answer

Amazon Simple Notification Service (SNS) topic.

Answer

Amazon Kinesis Data Streams.

Question 7

A company is migrating an on-premises application to AWS. The application stores files on a Windows file server. The company wants to replace the file server with a managed AWS service that supports SMB protocol and integrates with Active Directory. Which TWO AWS services should the company consider? (Choose TWO.)

Accepted Answer

Amazon FSx for Windows File Server.. Option D, Amazon FSx for Windows File Server, is correct because it is a fully managed AWS service that natively supports the SMB protocol and integrates with Microsoft Active Directory (both AWS Managed Microsoft AD and self-managed AD), making it a direct drop-in replacement for an on-premises Windows file server. Option E, AWS Storage Gateway File Gateway, is correct because it presents SMB (and NFS) file shares to on-premises or in-cloud clients while storing files as objects in Amazon S3, and it can join an Active Directory domain for SMB access authentication, which fits the requirement to replace a Windows file server with a managed service. Option A, Amazon EBS, is not correct because it provides block-level storage volumes attached to EC2 instances and does not offer an SMB file share or Active Directory integration. Option B, Amazon EFS, is not correct because it is a managed NFS file system for Linux workloads and does not support the SMB protocol or native Active Directory integration. Option C, Amazon S3 with S3 File Gateway, is not correct because S3 File Gateway is the same underlying Storage Gateway file interface already represented by option E, and S3 itself is object storage that does not natively serve SMB or join Active Directory.

Answer

Amazon Elastic Block Store (EBS).

Answer

Amazon Elastic File System (EFS).

Answer

Amazon S3 with S3 File Gateway.

Question 8

A company is migrating a monolithic application to Amazon ECS. The application currently stores session data in local memory. Which migration strategy should the company adopt to ensure scalability and fault tolerance?

Accepted Answer

Store session data in Amazon ElastiCache for Redis.. Amazon ElastiCache for Redis provides a fast, in-memory data store that can be shared across multiple containers, enabling horizontal scaling and fault tolerance. Option C (sticky sessions) ties a client to a specific container, preventing true statelessness and causing uneven load distribution. Option B (Amazon S3) has high latency unsuitable for session data. Option D (Amazon DynamoDB) is a NoSQL database that can store sessions but is slower and more costly than a dedicated caching layer like Redis for session management.

Answer

Use Amazon S3 to store session data.

Answer

Use sticky sessions (session affinity) on the Application Load Balancer.

Answer

Migrate session data to Amazon DynamoDB.

Question 9

A company is refactoring a legacy .NET application to run on AWS Lambda. The application currently uses Windows authentication and Active Directory. Which approach should the company use to support authentication in the new architecture?

Accepted Answer

Use AWS Directory Service for Microsoft Active Directory and connect Lambda to the directory via VPC.. AWS Directory Service for Microsoft Active Directory (AWS Managed Microsoft AD) provides an actual Active Directory domain in AWS, enabling Lambda functions to join the domain and use Windows authentication protocols like Kerberos. By placing the Lambda function in a VPC and connecting it to the directory, the function can authenticate against AD using the same credentials and protocols as the legacy application. This preserves the existing authentication mechanism without code changes, which is critical for a refactoring effort that aims to minimize modifications.

Answer

Use Amazon Cognito user pools for authentication.

Answer

Use AWS Identity and Access Management (IAM) roles to authenticate users.

Answer

Use AWS Security Token Service (STS) to issue tokens for authentication.

Question 10

A company is migrating a legacy application from an on-premises data center to AWS. The application uses a proprietary network protocol that is not supported by AWS Application Migration Service. What should the company do to migrate this application?

Accepted Answer

Perform a manual rehost migration using Amazon EC2 and custom AMIs.. AWS Application Migration Service (MGN) replicates source servers at the block level and launches them on EC2, but it requires the source server's OS and network stack to function in AWS. A proprietary network protocol unsupported by MGN means the automated replication and cutover cannot handle the application's networking requirements, so a manual rehost using EC2 and custom AMIs is the correct fallback. This gives the company full control to install protocol handlers, configure custom networking, or use EC2 features like enhanced networking and custom route tables to support the proprietary protocol.

Answer

Refactor the application to use standard protocols before migration.

Answer

Use the 7 Rs migration strategy to evaluate other options.

Answer

Use AWS Application Migration Service with a network bridge appliance.

Question 11

A company is migrating a large number of on-premises virtual machines to AWS. The company wants to automate the migration process and reduce manual effort. Which TWO AWS services can be used together to achieve this goal? (Choose TWO.)

Accepted Answer

AWS CloudFormation. AWS Application Migration Service (MGN) (option C) is the primary AWS service for lift-and-shift migration of on-premises virtual machines (physical or virtual servers) to AWS; it continuously replicates source servers into a staging area and automates the launch of test or cutover instances, which directly reduces manual migration effort. AWS CloudFormation (option B) complements MGN by allowing the target infrastructure (VPCs, subnets, security groups, IAM roles, and other resources) to be defined as code in templates, so the environment into which MGN launches the migrated instances can be provisioned automatically and repeatably. Together, MGN handles the server replication and conversion while CloudFormation handles infrastructure provisioning, achieving an automated migration workflow. Option A (AWS DMS) is for migrating databases, not general-purpose VM workloads, so it does not fit this scenario. Option D (AWS DataSync) is for moving file or object data between storage systems, not for migrating running VMs. Option E (AWS SCT) only converts database schemas and code for heterogeneous database migrations and is not a VM migration service.

Answer

AWS Database Migration Service (DMS)

Answer

AWS DataSync

Answer

AWS Schema Conversion Tool (SCT)

Question 12

A company is migrating a legacy Windows-based .NET application to AWS. The application uses a SQL Server database and a proprietary authentication mechanism that relies on Active Directory. The company wants to reduce operational overhead and licensing costs. Which combination of AWS services should the architect recommend for the migration?

Accepted Answer

Migrate the application to Amazon EC2 Windows instances and the database to Amazon RDS for SQL Server. Migrating the application to Amazon EC2 Windows instances preserves compatibility with the .NET application and the proprietary Active Directory-based authentication, while moving the database to Amazon RDS for SQL Server reduces operational overhead by offloading database management (patching, backups, high availability) to AWS. This combination also allows the use of existing SQL Server licenses (BYOL) or license-included options, potentially reducing licensing costs compared to self-managed SQL Server on EC2.

Answer

Migrate the application to Amazon EC2 Linux instances and use Amazon Aurora with PostgreSQL compatibility

Answer

Containerize the application on Amazon ECS with Windows containers and use Amazon RDS for SQL Server

Answer

Migrate the application to AWS Elastic Beanstalk for Windows and the database to Amazon RDS for MySQL

Question 13

A company is migrating its on-premises data warehouse to Amazon Redshift. The data warehouse is currently running on a single large server with 10 TB of data. The company wants to minimize downtime and ensure data consistency. Which AWS service should the architect use to perform the migration?

Accepted Answer

AWS Database Migration Service (AWS DMS). AWS DMS is designed for migrating databases and data warehouses to AWS with minimal downtime, supporting continuous replication (CDC) to keep source and target consistent during cutover. For a 10 TB on-premises data warehouse moving to Redshift, DMS handles schema conversion (with SCT) and ongoing replication, which directly addresses the 'minimize downtime and ensure data consistency' requirement.

Answer

Amazon S3 Transfer Acceleration

Answer

AWS Glue

Answer

AWS Snowball Edge

Question 14

An IAM policy allows a user to start and stop EC2 instances but denies terminating instances under a specific condition. Which action will the policy deny?

Accepted Answer

Terminating an EC2 instance in the eu-west-1 region. The policy allows starting and stopping EC2 instances but denies terminating instances under a specific condition. Since the condition is not specified in the question, the correct answer must be the action that is denied: terminating an EC2 instance in the eu-west-1 region. The other options are either allowed actions (start/stop) or terminating in a different region that may not be covered by the deny condition.

Answer

Starting an EC2 instance in the us-west-2 region

Answer

Stopping an EC2 instance in the eu-west-1 region

Answer

Terminating an EC2 instance in the us-east-1 region

Question 15

A CloudFormation stack creation command is run with a parameter. The template.yaml includes a parameter declared as follows:
Parameters:
  InstanceTypeParameter:
    Type: String
    Default: t2.micro
    AllowedValues:
      - t2.micro
      - t2.small
      - t2.medium
The stack creation fails with the error: "Value (t2.nano) for parameter InstanceTypeParameter is invalid. Must be one of: t2.micro, t2.small, t2.medium". What is the most likely cause?

Accepted Answer

The CLI command had a typo in the parameter value. The error message shows that the value 't2.nano' was passed for the parameter. This value is not in the AllowedValues list. The most direct explanation is that the user made a typo in the CLI command or parameter file, supplying 't2.nano' instead of a valid value like 't2.micro'. While CloudFormation can inherit parameters from previous operations, the specific invalid value 't2.nano' in the error indicates it was provided in the current command, not from an override. Therefore, option D is correct.

Answer

The AWS CLI is using a deprecated version

Answer

The template.yaml file was modified after the command was run

Answer

The parameter was overridden by a previous stack operation or a different parameter file