SAP-C02 Design for New Solutions Practice Test 27 — 15 Questions

Question 1

A company wants to automate the deployment of a three-tier web application on AWS. The deployment should include the network, security groups, EC2 instances, and an Application Load Balancer. Which AWS service should they use?

Accepted Answer

AWS CloudFormation. Option A is correct because AWS CloudFormation allows infrastructure as code to deploy all resources. Option B is incorrect because AWS Elastic Beanstalk abstracts infrastructure but doesn't give full control. Option C is incorrect because AWS CodeDeploy deploys application code, not infrastructure. Option D is incorrect because AWS OpsWorks is configuration management, not infrastructure provisioning.

Answer

AWS Elastic Beanstalk

Answer

AWS CodeDeploy

Answer

AWS OpsWorks

Question 2

A company is building a serverless application using AWS Lambda. The application processes files uploaded to an S3 bucket. Each file can be up to 500 MB, and processing takes up to 10 minutes. The Lambda function must be triggered as soon as a file is uploaded. Which configuration should they use?

Accepted Answer

Configure S3 event notification to invoke the Lambda function directly.. Option A is correct because S3 event notifications can trigger Lambda for each object creation. Option B is incorrect because Lambda supports up to 15 minutes, but 10 minutes is fine, but S3 event notification is needed. Option C is incorrect because SQS is not necessary for direct S3 trigger. Option D is incorrect because Step Functions add complexity.

Answer

Use S3 event notification to send an SQS message, which triggers Lambda.

Answer

Increase the Lambda function timeout to 15 minutes and memory to 3 GB.

Answer

Use AWS Step Functions to poll S3 and invoke Lambda.

Question 3

A company is designing a disaster recovery solution for a web application hosted on AWS. The primary site is in us-east-1 and the DR site is in us-west-2. The application uses an Amazon RDS for MySQL database. They need to recover the database with a Recovery Point Objective (RPO) of 5 seconds and a Recovery Time Objective (RTO) of 1 hour. Which solution meets these requirements?

Accepted Answer

Use Amazon Aurora Global Database.. Option B is correct because Aurora Global Database provides replication with RPO of 1 second and failover in minutes. Option A is incorrect because RDS Multi-AZ is for high availability within a region, not cross-region DR. Option C is incorrect because RDS Cross-Region Read Replica has RPO of seconds but failover is manual. Option D is incorrect because DMS with ongoing replication has higher RTO.

Answer

Use RDS Multi-AZ in us-east-1 and failover to DR site.

Answer

Use AWS DMS with ongoing replication to an RDS instance in us-west-2.

Answer

Use RDS Cross-Region Read Replica and promote it.

Question 4

A company is designing a new microservices architecture on AWS. They need to ensure that services can communicate asynchronously without tight coupling. Which AWS service should they use for message brokering?

Accepted Answer

Amazon Simple Queue Service (SQS). Option C is correct because Amazon SQS provides a fully managed message queuing service for asynchronous communication between microservices. Option A (Amazon SNS) is pub/sub not queue-based. Option B (Amazon Kinesis) is for streaming data. Option D (AWS Step Functions) is for workflow orchestration.

Answer

Amazon Simple Notification Service (SNS)

Answer

Amazon Kinesis Data Streams

Answer

AWS Step Functions

Question 5

A company is building a serverless application using AWS Lambda, Amazon API Gateway, and Amazon DynamoDB. They need to ensure that the application can handle sudden spikes in traffic without throttling. Which design should they implement?

Accepted Answer

Enable DynamoDB auto scaling and configure Lambda function reserved concurrency.. Option A is correct because enabling DynamoDB auto scaling and Lambda concurrency limits allows handling spikes while preventing throttling. Option B (provisioned concurrency) helps with cold starts but not throttling. Option C (reserved concurrency) prevents other functions from using concurrency but doesn't handle spikes. Option D (DAX) is a caching layer, not for scaling.

Answer

Use Lambda provisioned concurrency and an API Gateway usage plan.

Answer

Configure Lambda function reserved concurrency and an API Gateway cache.

Answer

Use DynamoDB Accelerator (DAX) and Lambda function reserved concurrency.

Question 6

A company needs to store configuration data for multiple applications in a centralized, secure, and versioned manner. The configuration must be encrypted at rest and automatically rotated. Which AWS service should they use?

Accepted Answer

AWS AppConfig. Option B is correct because AWS AppConfig supports versioned configuration, encryption, and automatic rotation. Option A (SSM Parameter Store) can store config but doesn't support automatic rotation. Option C (Secrets Manager) is for secrets, not config. Option D (CloudFormation) is for infrastructure as code.

Answer

AWS CloudFormation

Answer

AWS Secrets Manager

Answer

AWS Systems Manager Parameter Store

Question 7

A company is designing a data lake on AWS using Amazon S3. They need to query the data using standard SQL without moving it to a separate analytics store. Which AWS service should they use?

Accepted Answer

Amazon Athena. Option C is correct because Amazon Athena allows querying data directly in S3 using standard SQL. Option A (Redshift Spectrum) also queries S3 but requires Redshift cluster. Option B (Glue) is for ETL, not querying. Option D (QuickSight) is for visualization.

Answer

AWS Glue

Answer

Amazon QuickSight

Answer

Amazon Redshift Spectrum

Question 8

A company is migrating a legacy monolithic application to a microservices architecture on AWS. They want to use an event-driven design where services react to state changes. Which AWS service should they use to capture, store, and replay events?

Accepted Answer

Amazon EventBridge. Option D is correct because Amazon EventBridge captures events and can replay them. Option A (SQS) is queue-based, not event storage. Option B (SNS) is pub/sub, no replay. Option C (Kinesis Data Streams) can replay but is for streaming data, not event sourcing.

Answer

Amazon SNS

Answer

Amazon Kinesis Data Streams

Answer

Amazon SQS

Question 9

A company wants to deploy a containerized web application on AWS. They need to manage container orchestration, automatic scaling, and service discovery. Which AWS service should they use?

Accepted Answer

Amazon Elastic Container Service (ECS). Option B is correct because Amazon ECS provides container orchestration, auto scaling, and service discovery. Option A (EKS) also does but is Kubernetes-based, more complex. Option C (Lightsail) is for simple projects. Option D (Beanstalk) is for PaaS, not container-native.

Answer

Amazon Lightsail

Answer

Amazon Elastic Kubernetes Service (EKS)

Answer

AWS Elastic Beanstalk

Question 10

A company is designing a multi-region active-active application using Amazon Route 53, Application Load Balancers, and Auto Scaling groups. They need to route users to the closest region with the lowest latency. Which routing policy should they use?

Accepted Answer

Latency routing. Option C is correct because latency-based routing routes users to the region with the lowest latency. Option A (geolocation) routes based on user location, not latency. Option B (weighted) distributes traffic by weight. Option D (failover) is for disaster recovery.

Answer

Weighted routing

Answer

Failover routing

Answer

Geolocation routing

Question 11

A company is designing a real-time analytics pipeline for IoT data. They need to ingest millions of messages per second, process them with low latency, and store results in Amazon S3. Which combination of services should they use?

Accepted Answer

Amazon Kinesis Data Streams, Amazon Kinesis Data Analytics, Amazon Kinesis Data Firehose. Option A is correct because Kinesis Data Streams ingests high-throughput data, Kinesis Data Analytics processes it in real-time, and Firehose delivers to S3. Option B uses SQS which is not designed for millions of messages per second. Option C uses Lambda which may throttle. Option D uses Redshift which is for data warehousing, not real-time streaming.

Answer

Amazon SQS, AWS Lambda, Amazon S3

Answer

Amazon Kinesis Data Streams, Amazon Redshift, Amazon S3

Answer

Amazon IoT Core, AWS Lambda, Amazon DynamoDB

Question 12

A company wants to provide temporary access to an S3 bucket for external partners. The access must be time-limited and restricted to specific objects. Which AWS service or feature should they use?

Accepted Answer

Presigned URLs. Option A is correct because presigned URLs provide temporary, limited access to specific S3 objects. Option B (bucket policies) are not time-limited. Option C (IAM roles) require AWS credentials. Option D (CloudFront signed URLs) are for content delivery, not direct S3 access.

Answer

S3 bucket policies

Answer

CloudFront signed URLs

Answer

IAM roles

Question 13

A company is designing a new application on AWS that requires high availability and disaster recovery across multiple AWS Regions. The application uses an Amazon RDS for MySQL database. Which TWO strategies should they implement to meet these requirements?

Accepted Answer

Enable automated backups and copy them to another Region.. Option A (Cross-Region Read Replica) provides DR and read scaling. Option C (Cross-Region automated backups) allows restore in another region. Option B (Multi-AZ) is for HA within a region, not DR. Option D (snapshot copy) is manual. Option E (S3 replication) doesn't apply to RDS.

Answer

Create a manual snapshot and copy it to another Region.

Answer

Use S3 cross-Region replication for the database.

Answer

Enable Multi-AZ deployment.

Question 14

A company is building a serverless application using AWS Lambda and Amazon DynamoDB. They need to ensure that the application can handle a sudden increase in traffic without losing any data or causing errors. Which THREE strategies should they implement?

Accepted Answer

Use DynamoDB on-demand capacity mode.. Option A (DynamoDB auto scaling) handles throughput spikes. Option B (Lambda reserved concurrency) prevents throttling. Option D (DynamoDB on-demand capacity) handles unpredictable traffic. Option C (DAX) improves read performance but not write scaling. Option E (SQS) would decouple but adds complexity.

Answer

Decouple the application with Amazon SQS.

Answer

Use DynamoDB Accelerator (DAX) for caching.

Question 15

A company is designing a new web application that will be deployed on Amazon ECS with Fargate. They need to store session state for the application. Which TWO services can they use for this purpose?

Accepted Answer

Amazon ElastiCache for Redis. Option B (ElastiCache for Redis) is commonly used for session state. Option D (DynamoDB) is also used for session state with low latency. Option A (RDS) is relational, not ideal. Option C (S3) is object store, high latency. Option E (EFS) is file storage.

Answer

Amazon EFS

Answer

Amazon RDS

Answer

Amazon S3