SAP-C02 Design for New Solutions Practice Test 26 — 15 Questions

Question 1

A company is designing a global application that requires low-latency read access to a database from multiple AWS regions. The database stores user profile data that is updated infrequently. The solution must ensure eventual consistency and minimize write conflicts. Which combination of AWS services should be used?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Amazon DynamoDB global tables. DynamoDB global tables provide multi-region replication with eventual consistency and automatic conflict resolution. Option A is wrong because RDS Multi-AZ does not replicate across regions. Option C is wrong because Aurora Global Database provides strong consistency, not eventual. Option D is wrong because ElastiCache is a cache, not a primary data store.

Answer

Amazon RDS Multi-AZ with read replicas in each region

Answer

Amazon Aurora Global Database

Answer

Amazon ElastiCache for Redis with global datastore

Question 2

A company is designing a new application that will process streaming data from IoT devices. The data must be ingested in real-time and stored in Amazon S3 for long-term analytics. Which AWS service should be used to ingest the streaming data?

Accepted Answer

Amazon Kinesis Data Streams. Amazon Kinesis Data Streams is designed for real-time data ingestion and can stream data directly to Amazon S3. Option A is wrong because SNS is a pub/sub messaging service, not intended for real-time data ingestion. Option B is wrong because SQS is a message queue service, not optimized for streaming ingestion. Option C is wrong because AWS DMS is used for database migration, not for ingesting streaming data.

Answer

Amazon Simple Notification Service (SNS)

Answer

Amazon Simple Queue Service (SQS)

Answer

AWS Database Migration Service (DMS)

Question 3

A company is designing a new web application that will run on Amazon EC2 instances behind an Application Load Balancer. The application must handle millions of requests per day. To reduce latency and offload traffic from the EC2 instances, which AWS service should be placed in front of the load balancer?

Accepted Answer

Amazon CloudFront. CloudFront is a CDN that caches content at edge locations, reducing latency and offloading traffic. Option B is wrong because Global Accelerator improves performance via AWS global network but does not cache. Option C is wrong because Shield Advanced is for DDoS protection. Option D is wrong because WAF is a web application firewall.

Answer

AWS Global Accelerator

Answer

AWS Shield Advanced

Answer

AWS WAF

Question 4

A company is designing a data lake on AWS using Amazon S3. The data will be ingested from various sources and must be encrypted at rest. The company requires that the encryption keys be managed by AWS and rotated automatically. Which encryption option should be used?

Accepted Answer

Server-side encryption with S3 managed keys (SSE-S3). SSE-S3 uses AWS-managed keys that are automatically rotated. Option A is wrong because SSE-C uses customer-provided keys. Option B is wrong because SSE-KMS uses customer-managed KMS keys. Option D is wrong because client-side encryption is managed by the customer.

Answer

Server-side encryption with customer-provided keys (SSE-C)

Answer

Server-side encryption with AWS KMS managed keys (SSE-KMS)

Answer

Client-side encryption

Question 5

A company is designing a new application that will be deployed on AWS. The application requires a relational database with automatic failover and high availability within a single AWS region. Which database deployment option meets these requirements?

Accepted Answer

Amazon RDS Multi-AZ deployment. RDS Multi-AZ provides automatic failover and high availability within a region. Option A is wrong because Single-AZ does not provide failover. Option B is wrong because Read Replicas are for read scaling, not failover. Option D is wrong because cross-region replication is for disaster recovery, not primary failover.

Answer

Amazon RDS Single-AZ deployment

Answer

Amazon RDS with Read Replicas

Answer

Amazon RDS cross-region replication

Question 6

A company is designing a serverless application using AWS Lambda. The application needs to store and retrieve JSON documents. The company wants the lowest cost for infrequent access. Which data store should be used?

Accepted Answer

Amazon DynamoDB (on-demand). Amazon DynamoDB with on-demand capacity is serverless and cost-effective for infrequent access. Option A is wrong because Amazon RDS for MySQL is relational and not serverless, and would require provisioning and scaling, leading to higher cost. Option B is wrong because Amazon S3 Standard is not ideal for small JSON documents and has higher cost for frequent updates or retrieval. Option C is wrong because Amazon ElastiCache for Redis is a cache, not a durable store.

Answer

Amazon RDS for MySQL

Answer

Amazon S3 Standard

Answer

Amazon ElastiCache for Redis

Question 7

A company is designing a new solution to process a continuous stream of events from multiple sources. The events must be processed in real-time with exactly-once processing semantics. The solution should be able to handle replayed events without duplication. Which AWS service should be used for the event processing?

Accepted Answer

Amazon Kinesis Data Analytics for Apache Flink. (Amazon Kinesis Data Analytics for Apache Flink) is correct because it provides exactly-once processing semantics through Flink's checkpoints and state management. Option A (Kinesis Data Firehose) is wrong because it is designed for loading streaming data into data stores, not for real-time processing with exactly-once guarantees. Option B (AWS Lambda with Kinesis trigger) is wrong because Lambda processes records at-least-once, which can result in duplicates. Option D (Amazon SQS with Lambda) is wrong because SQS standard queues are at-least-once, and FIFO queues are at-most-once, both unsuitable for exactly-once processing.

Answer

Amazon Kinesis Data Firehose

Answer

AWS Lambda with Kinesis trigger

Answer

Amazon Simple Queue Service (SQS) with Lambda

Question 8

A company is designing a new static website hosted on Amazon S3. The website must be served over HTTPS with a custom domain name. Which AWS service should be used to achieve this?

Accepted Answer

Amazon CloudFront with SSL certificate. Amazon CloudFront can be configured to serve content from an S3 bucket as the origin, and it supports custom SSL certificates via AWS Certificate Manager (ACM) or IAM, enabling HTTPS for a custom domain. This is the recommended architecture for static websites requiring HTTPS because CloudFront provides edge caching, DDoS protection, and seamless SSL termination.

Answer

Amazon Route 53 with alias record

Answer

Amazon S3 static website hosting with bucket policy

Answer

Elastic Load Balancer with SSL termination

Question 9

A company is designing a new solution to store and analyze log files from multiple sources. The solution must provide near real-time analytics and the ability to query the logs using SQL. Which TWO AWS services should be used together to meet these requirements? (Choose two.)

Accepted Answer

Amazon Athena. Amazon Kinesis Data Firehose can ingest log data in near real-time and load it into Amazon S3. Amazon Athena can then query the data in S3 using SQL. Option A (CloudWatch Logs) is for monitoring, not ad-hoc analytics. Option C (ElastiCache) is a cache, not for analytics. Option D (Redshift) is a data warehouse, not designed for near real-time log analysis with Athena-like querying.

Answer

Amazon CloudWatch Logs

Answer

Amazon ElastiCache

Answer

Amazon Redshift

Question 10

A company is designing a new application on AWS that requires a highly available and durable NoSQL database. The database must be able to scale horizontally for both reads and writes. Which TWO AWS services meet these requirements? (Choose two.)

Accepted Answer

Amazon DynamoDB. Amazon DynamoDB is a fully managed NoSQL key-value and document database that provides high availability and durability by automatically replicating data across multiple Availability Zones in an AWS Region. It supports horizontal scaling for both reads and writes through its partitioning mechanism and on-demand or provisioned capacity modes, making it ideal for applications requiring consistent performance at any scale.

Answer

Amazon Neptune

Answer

Amazon RDS for MySQL with Multi-AZ

Answer

Amazon ElastiCache for Memcached

Question 11

A company is designing a new application that will process images uploaded by users. The application must automatically resize images and store them in Amazon S3. The solution should be serverless and event-driven. Which THREE AWS services should be used together? (Choose three.)

Accepted Answer

Amazon S3. Options A, B, and E are correct. Amazon S3 can trigger a Lambda function on object uploads. Lambda can process the image and store the result back in S3. Option C is wrong because EC2 is not serverless. Option D is wrong because SQS is not needed for this event-driven flow.

Answer

Amazon EC2

Answer

Amazon Simple Queue Service (SQS)

Question 12

Refer to the exhibit. An architect is troubleshooting an EC2 instance that is not responding to health checks from an Application Load Balancer. The instance is in the 'running' state. Which of the following is the most likely cause?

Accepted Answer

The security group is blocking the health check traffic.. The most likely cause for a running EC2 instance not responding to ALB health checks is that the security group associated with the instance is not allowing incoming health check traffic from the ALB. Option B is incorrect because the instance is in the 'running' state, not stopped. Option C is incorrect because if the instance were impaired due to an AWS issue, its status checks would fail, but the instance is running. Option D is incorrect because CPU credits affect performance but do not prevent the instance from responding to health checks; the instance would still respond even with low CPU credits.

Answer

The instance is in a stopped state.

Answer

The instance is impaired due to an AWS issue.

Answer

The instance has exhausted its CPU credits.

Question 13

Refer to the exhibit. A company has an IAM policy that allows s3:GetObject on all objects in 'my-bucket' but denies access to objects in the 'confidential' folder. A user tries to access 's3://my-bucket/confidential/report.pdf'. What will happen?

Accepted Answer

Access is denied because the Deny statement explicitly matches the resource.. An explicit Deny statement overrides any Allow. The policy denies access to objects in the 'confidential' folder, so the user will be denied access to 'report.pdf'. Option B is wrong because even though the Allow statement exists, the explicit Deny takes precedence. Option C is wrong because the Deny is explicit and does not require other policies. Option D is wrong because the broader Allow does not override the explicit Deny.

Answer

Access is allowed because the Deny statement is not evaluated.

Answer

Access is denied only if the user is not authorized by other policies.

Answer

Access is allowed because the Allow statement is broader.

Question 14

Refer to the exhibit. A CloudFormation stack creation failed. The architect needs to identify the reason for the failure. Which CLI command should be used to get detailed error messages?

Accepted Answer

aws cloudformation describe-stack-events --stack-name my-stack. The 'describe-stack-events' command provides detailed events including error messages, which can be used to identify reasons for stack creation failure. Option A is incorrect because 'describe-stacks' only shows the stack status and output, not detailed error messages. Option C is incorrect because 'get-template' retrieves the template body, not events. Option D is incorrect because 'list-stack-resources' lists resources, not events or errors.

Answer

aws cloudformation describe-stacks --stack-name my-stack

Answer

aws cloudformation get-template --stack-name my-stack

Answer

aws cloudformation list-stack-resources --stack-name my-stack

Question 15

A company is designing a multi-tier web application on AWS. The application must be highly available and scale automatically based on traffic. The web tier runs on Amazon EC2 instances behind an Application Load Balancer. The application tier also uses EC2 instances. Which solution meets these requirements with the LEAST operational overhead?

Accepted Answer

Use Auto Scaling groups for both web and application tiers, and route traffic through an Application Load Balancer.. Using Auto Scaling groups for both web and application tiers with an Application Load Balancer provides automatic scaling and high availability with minimal operational overhead. Auto Scaling groups handle instance health and scaling based on demand, while the ALB distributes HTTP traffic. Option A is incorrect because ECS with Fargate introduces container management complexity, increasing operational overhead compared to EC2 Auto Scaling groups. Option B is incorrect because AWS Global Accelerator does not provide automatic scaling for instances; it only improves traffic routing and latency. Option C is incorrect because a Network Load Balancer is designed for TCP/UDP traffic and does not natively support HTTP-layer features needed for a web application, and it does not integrate with Auto Scaling for automatic scaling as seamlessly as an ALB.

Answer

Use Amazon ECS with Fargate for both tiers, with an Application Load Balancer.

Answer

Use AWS Global Accelerator with a single Auto Scaling group for both tiers.

Answer

Use Network Load Balancer with Auto Scaling groups for both tiers.