SAP-C02 Accelerate Workload Migration and Modernization Practice Test 9 — 15 Questions

Question 1

A company is migrating a large-scale batch processing workload to AWS. The workload runs on a schedule and processes terabytes of data. The migration must be cost-effective. Which AWS service is best suited for this workload?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

AWS Batch. AWS Batch is designed for batch computing and can automatically provision the optimal quantity and type of compute resources. Option A is wrong because Amazon EMR is optimized for big data frameworks like Spark, not general batch processing. Option B is wrong because AWS Lambda has a 15-minute timeout and limited memory, making it unsuitable for large-scale batch processing. Option D is wrong because Amazon EC2 with Auto Scaling requires more manual management of instances compared to AWS Batch.

Answer

Amazon EMR

Answer

AWS Lambda

Answer

Amazon EC2 with Auto Scaling

Question 2

A company is migrating a legacy application that uses a third-party identity provider (IdP) for authentication. The application currently uses SAML 2.0. The company wants to use AWS IAM Identity Center for centralized access management. What is the best approach to integrate the IdP with AWS?

Accepted Answer

Configure IAM Identity Center to use the existing IdP as the identity source via SAML 2.0 federation. AWS IAM Identity Center supports SAML 2.0 federation with external identity providers (IdPs). This allows centralized access management without duplicating identities. Option A is incorrect because AWS Directory Service for Microsoft AD is for Active Directory synchronization, not generic SAML federation. Option B is incorrect because creating IAM users for every employee would duplicate identities and increase administrative overhead. Option D is incorrect because Amazon Cognito user pools are designed for customer-facing applications, not for enterprise SSO with existing IdPs.

Answer

Use AWS Directory Service for Microsoft Active Directory to synchronize with the IdP

Answer

Create IAM users for each employee and assign groups and permissions

Answer

Use Amazon Cognito user pools with the IdP as a SAML identity provider

Question 3

A company is migrating a stateful application to AWS. The application maintains session state in memory on the application server. Which AWS service should be used to store session state for high availability?

Accepted Answer

Amazon ElastiCache. Mazon ElastiCache because it is a managed in-memory caching service that can store session state with low latency and high availability across multiple nodes. Option A (Amazon RDS) is a relational database that uses disk-based storage, making it slower for session state. Option B (Amazon S3) is object storage with higher latency, unsuitable for real-time session data. Option D (Amazon EBS) is block storage attached to a single EC2 instance, not providing shared access for high availability.

Answer

Amazon RDS

Answer

Amazon S3

Answer

Amazon EBS

Question 4

A company is migrating a multi-tier web application to AWS. The application uses a commercial database that requires a license. The company wants to reduce licensing costs. Which migration strategy should be considered?

Accepted Answer

Replatform the database to Amazon RDS for an open-source engine like PostgreSQL. (Replatform the database to Amazon RDS for an open-source engine like PostgreSQL) is correct because migrating to an open-source database on Amazon RDS eliminates the need for commercial licenses, thereby reducing licensing costs. Option A (Rehost) is incorrect because it retains the same commercial database software, so licensing costs remain. Option C (Repurchase to SaaS) may not be applicable or cost-effective for the database. Option D (Refactor to DynamoDB) typically requires significant application changes and may not align with a license cost reduction goal.

Answer

Rehost the database to EC2 with the same database software

Answer

Repurchase a Software as a Service (SaaS) alternative

Answer

Refactor the application to use Amazon DynamoDB

Question 5

A company is migrating a legacy application to Amazon ECS. The application has a stateful component that stores data on the local filesystem. Which TWO storage options can be used to persist data beyond the lifecycle of the container?

Accepted Answer

Amazon EBS. Options A (Amazon EBS) and E (Amazon EFS) are correct. Amazon EBS volumes can be attached to EC2 instances running ECS tasks (EC2 launch type) and persist beyond the container lifecycle. Amazon EFS provides a shared file system that can be mounted by containers, including Fargate tasks, and data persists after the container stops. Option B (Fargate ephemeral storage) is incorrect because it is temporary and lost when the container stops. Option C (Amazon ECR) is a container registry, not a storage option. Option D (Amazon S3) is object storage, not a filesystem suitable for direct attachment to containers.

Answer

Amazon ECS Fargate ephemeral storage

Answer

Amazon ECR

Answer

Amazon S3

Question 6

A company is migrating a large number of on-premises VMs to AWS. They need to assess the current environment and track migration progress. Which THREE AWS services should be used together?

Accepted Answer

AWS Application Migration Service (MGN). To assess the current environment and track migration progress for a large number of on-premises VMs, the correct combination is AWS Application Discovery Service (to discover and map dependencies), AWS Migration Hub (to track progress across multiple tools), and AWS Application Migration Service (MGN) (to automate VM migration). Option A (SMS) is deprecated and replaced by MGN. Option D (DMS) is for databases, not VMs.

Answer

AWS Server Migration Service (SMS)

Answer

AWS Database Migration Service (DMS)

Question 7

A company is planning to migrate a workload to AWS and needs to estimate the total cost of ownership (TCO) compared to on-premises. Which TWO AWS tools can be used to perform this analysis?

Accepted Answer

AWS Pricing Calculator. Options A and D are correct. AWS Pricing Calculator estimates costs of AWS services. AWS TCO Calculator compares on-premises costs to AWS. Option B (AWS Organizations) is wrong because it is for managing multiple AWS accounts, not cost analysis. Option C (AWS Cost Explorer) is wrong because it analyzes existing AWS spending, not TCO. Option E (AWS Budgets) is wrong because it tracks spending against budgets, not TCO comparison.

Answer

AWS Organizations

Answer

AWS Cost Explorer

Answer

AWS Budgets

Question 8

Refer to the exhibit. An IAM policy is attached to an IAM user. The user tries to upload an object to `s3://my-bucket/secret/data.txt` from an IP address in the 10.0.0.0/8 range. What will happen?

Accepted Answer

The upload fails because the Deny statement explicitly denies s3:PutObject for the prefix secret/ from the specified IP range.. The Deny statement explicitly denies all s3 actions (s3:*) for objects with the prefix secret/ when the source IP is in the 10.0.0.0/8 range. Since the user's IP is in that range and the object path starts with secret/, the Deny applies and overrides the Allow statement. Therefore, the upload fails. Options A and B claim success, which is incorrect. Option C says it fails because the Deny is unconditional, but the Deny is conditional on the IP range and prefix, so C is inaccurate. Option D correctly identifies the explicit Deny for s3:PutObject (which is included in s3:*) under the given conditions.

Answer

The upload succeeds because the Allow statement grants s3:PutObject.

Answer

The upload succeeds because the Deny statement only applies to GetObject, not PutObject.

Answer

The upload fails because the Deny statement denies all s3 actions unconditionally.

Question 9

Refer to the exhibit. A solutions architect runs the CLI command to list EC2 instances. The output shows three instances. The architect wants to start the stopped instance and ensure it retains its instance store data. What should the architect do?

Accepted Answer

Create an AMI from the stopped instance before starting it, then launch a new instance from the AMI.. Instance store volumes provide temporary block-level storage for an EC2 instance. The data on instance store volumes persists only during the lifetime of the associated instance; it is lost when the instance is stopped or terminated. Therefore, once an instance with instance store volumes is stopped, the data on those volumes is irrecoverable. None of the provided options can retain the instance store data. Option A is incorrect because modifying the instance type does not recover lost data. Option B is incorrect because instance store volumes cannot be detached. Option C is incorrect because an AMI captures only EBS-backed volumes, not instance store volumes. Option D is incorrect because simply starting the instance will not restore the lost data. To preserve instance store data, it must be copied to persistent storage (e.g., EBS, S3) before stopping the instance.

Answer

Modify the instance type to one that supports instance store, then start the instance.

Answer

Detach the instance store volume and attach it to a running instance.

Answer

Run `aws ec2 start-instances --instance-ids i-0a1b2c3d4e5f6g7h9` to start the instance.

Question 10

Refer to the exhibit. A company deploys this CloudFormation template. After deployment, they enable S3 Transfer Acceleration on the bucket. Later, they update the stack. What happens to the Transfer Acceleration setting?

Accepted Answer

The Transfer Acceleration setting remains unchanged after the update.. CloudFormation drift detection does not automatically revert manual changes. The Transfer Acceleration setting is a property of the bucket; if not defined in the template, CloudFormation may not manage it, but typically manual changes are not overwritten unless the template explicitly defines them. However, best practice is to define all settings in the template to avoid drift. Option A is wrong because CloudFormation does not automatically disable it. Option B is wrong because CloudFormation does not automatically enable it. Option C is wrong because updates do not reset to default.

Answer

CloudFormation enables Transfer Acceleration because it is a best practice.

Answer

The update fails because of a conflict between the template and the manual change.

Answer

CloudFormation removes the Transfer Acceleration setting because it is not defined in the template.

Question 11

A company is migrating a legacy on-premises application to AWS. The application requires a relational database with Oracle compatibility and the ability to run read replicas across multiple Availability Zones. Which AWS service should the company use to minimize migration effort?

Accepted Answer

Amazon RDS for Oracle. Amazon RDS for Oracle provides a managed Oracle database with Oracle compatibility and supports read replicas across multiple Availability Zones, minimizing migration effort. Option A is wrong because Amazon RDS for MySQL does not offer Oracle compatibility. Option B is wrong because Amazon EC2 with self-managed Oracle requires more operational overhead. Option C is wrong because Amazon DynamoDB is a NoSQL database, not relational.

Answer

Amazon RDS for MySQL

Answer

Amazon EC2 with self-managed Oracle

Answer

Amazon DynamoDB

Question 12

A company is migrating a monolithic application to microservices on AWS. The application uses a shared MySQL database. The team wants to decouple the database per microservice. Which strategy should the team use to minimize downtime during migration?

Accepted Answer

Use the strangler fig pattern to gradually migrate functionality to microservices, each with its own database.. The strangler fig pattern incrementally replaces parts of the monolith. Option A is wrong because re-platforming as-is does not decouple the database. Option C is wrong because a single shared database contradicts microservices. Option D is wrong because rewriting the entire application at once increases risk and downtime.

Answer

Rehost the application on EC2 and use a single RDS MySQL instance for all microservices.

Answer

Use AWS Database Migration Service (DMS) to replicate the shared database to multiple target databases in real time.

Answer

Rewrite the entire application as microservices in a single release, using a shared database initially.

Question 13

A company wants to migrate 500 TB of data from an on-premises data center to Amazon S3. The company has a 1 Gbps dedicated network connection to AWS. What is the most cost-effective and time-efficient migration method?

Accepted Answer

Use AWS Snowball Edge to physically ship the data to AWS.. AWS Snowball Edge is the most cost-effective and time-efficient method for migrating 500 TB of data over a 1 Gbps dedicated connection. At 1 Gbps, the theoretical maximum transfer time for 500 TB is over 46 days, not accounting for overhead and network issues. Snowball Edge physically ships the data, avoiding network transfer delays. Option B is wrong because S3 Transfer Acceleration still uses the network and does not reduce the transfer time sufficiently for 500 TB. Option C is wrong because AWS DataSync is optimized for smaller, ongoing transfers and would still be limited by the 1 Gbps link. Option D is wrong because Direct Connect provides a dedicated network connection but still requires transferring data over the network, which would take many days.

Answer

Use S3 Transfer Acceleration to upload data over the existing internet connection.

Answer

Use AWS DataSync to transfer data over the dedicated network.

Answer

Establish an AWS Direct Connect connection and use S3 multipart upload.

Question 14

A company is migrating its on-premises application to AWS and needs to maintain the same private IP addresses for the application servers. The on-premises network uses 10.0.0.0/16. Which AWS service allows the company to extend its on-premises network to AWS and preserve IP addresses?

Accepted Answer

AWS Site-to-Site VPN. WS Site-to-Site VPN (Option C). This service creates an encrypted connection between the on-premises network and the VPC, allowing the company to extend its on-premises IP address range (10.0.0.0/16) into AWS, thereby preserving the private IP addresses for application servers. AWS Transit Gateway (Option A) is a hub that connects multiple VPCs and on-premises networks but requires VPN or Direct Connect attachments; it does not directly provide IP preservation. VPC Peering (Option B) connects VPCs within AWS, not on-premises networks. AWS Direct Connect (Option D) provides a dedicated private connection but does not inherently preserve IP addresses; it can be used with VPN to achieve IP preservation.

Answer

AWS Transit Gateway

Answer

VPC Peering

Answer

AWS Direct Connect

Question 15

A company is modernizing a legacy application by refactoring it into microservices. The application uses a monolithic Oracle database. The team wants to use Amazon RDS for Oracle as the migration target. Which migration approach minimizes risk and downtime?

Accepted Answer

Use the strangler fig pattern to incrementally migrate functionality to new microservices, each with its own database.. The strangler fig pattern allows gradual migration. Option A is wrong because big bang migration is high risk. Option C is wrong because the phased approach may work but is broader; strangler fig is specific to microservices. Option D is wrong because rewriting all at once is high risk.

Answer

Create a new RDS instance and use AWS SCT to convert the schema, then cutover after testing.

Answer

Migrate the entire database at once using AWS DMS with ongoing replication.

Answer

Rewrite the application as microservices on AWS and then migrate the database.