SAP-C02 Design for New Solutions Practice Test 3 — 15 Questions

Question 1

Drag and drop the steps to recover an Amazon RDS Multi-AZ DB instance after a primary instance failure in the correct order.

Question 2

Match each storage class to its description.

Question 3

Match each AWS security service to its purpose.

Question 4

Match each AWS cost management tool to its use.

Question 5

A company is designing a new microservices architecture on AWS. They need to ensure that services can communicate asynchronously without direct coupling. Which AWS service should they use to decouple the services?

Accepted Answer

Amazon SQS. Amazon SQS is the correct choice because it provides a fully managed message queue that enables asynchronous communication between microservices, allowing them to send, store, and receive messages without direct coupling. Services can poll or receive messages from the queue at their own pace, ensuring that the producer and consumer are decoupled and can operate independently, even if one is temporarily unavailable.

Answer

AWS Step Functions

Answer

Amazon SNS

Answer

Amazon Kinesis

Question 6

A financial services company needs to store sensitive customer data in Amazon S3 with encryption at rest. They require that the encryption keys be stored in AWS CloudHSM and that the S3 bucket must not be able to access the keys without explicit permission. Which S3 encryption option should they use?

Accepted Answer

SSE-C. SSE-C (Server-Side Encryption with Customer-Provided Keys) is correct because it allows the customer to supply their own encryption keys, which can be stored in AWS CloudHSM, and S3 will use those keys to encrypt data at rest. With SSE-C, the customer manages the keys outside of AWS, and S3 cannot access the keys without explicit permission because the keys are provided per request and not stored by AWS. This meets the requirement of storing keys in CloudHSM and ensuring S3 has no independent access to them.

Answer

SSE-S3

Answer

Client-side encryption

Answer

SSE-KMS

Question 7

A startup is building a serverless application using AWS Lambda. They need to store session state that can be shared across multiple Lambda invocations. Which AWS service should they use?

Accepted Answer

Amazon ElastiCache for Redis. Amazon ElastiCache for Redis is the correct choice because it provides a low-latency, in-memory data store that can be shared across multiple Lambda invocations. Redis supports data structures like strings, hashes, and lists, making it ideal for storing session state that needs to be accessed and updated quickly by concurrent serverless functions.

Answer

Amazon S3

Answer

Amazon DynamoDB

Answer

Amazon CloudFront

Question 8

A company is designing a multi-tier web application on AWS. They want to ensure that the web tier can scale automatically based on CPU utilization. Which AWS service should they use?

Accepted Answer

Auto Scaling groups. Option A is correct because Auto Scaling groups can automatically adjust capacity based on CloudWatch alarms. Option B is wrong because Elastic Load Balancing distributes traffic but does not scale. Option C is wrong because CloudFront is a CDN. Option D is wrong because Route 53 is DNS.

Answer

Amazon CloudFront

Answer

Amazon Route 53

Answer

Elastic Load Balancing

Question 9

A company is migrating a legacy monolithic application to AWS. They want to refactor the application into microservices and use container orchestration. Which AWS service should they use to manage the containers?

Accepted Answer

Amazon EKS. Option B is correct because Amazon EKS is a managed Kubernetes service for container orchestration. Option A is wrong because ECS is also a container orchestration service but uses AWS proprietary, not Kubernetes. Option D is wrong because Fargate is a compute engine for containers, not an orchestration service. Option C is wrong because Lambda is serverless, not for containers.

Answer

AWS Lambda

Answer

Amazon ECS

Answer

AWS Fargate

Question 10

A company needs to provide a global content delivery solution with low latency. Which AWS service should they use?

Accepted Answer

Amazon CloudFront. Option C is correct because Amazon CloudFront is a global CDN that delivers content with low latency. Option A is wrong because S3 is storage. Option B is wrong because EC2 is compute. Option D is wrong because Route 53 is DNS.

Answer

Amazon S3

Answer

Amazon EC2

Answer

Amazon Route 53

Question 11

A company is designing a data lake on AWS using Amazon S3. They need to run SQL queries on the data without moving it to a separate database. Which AWS service should they use?

Accepted Answer

Amazon Athena. Option D is correct because Amazon Athena allows serverless SQL queries directly on S3 data. Option A is wrong because Redshift is a data warehouse, requires loading data. Option B is wrong because EMR is for big data processing. Option C is wrong because Glue is an ETL service.

Answer

Amazon EMR

Answer

Amazon Redshift

Answer

AWS Glue

Question 12

A company is designing a disaster recovery solution for a critical database using Amazon RDS Multi-AZ. However, they also need to protect against regional failures. Which additional AWS service should they use?

Accepted Answer

RDS Cross-Region Read Replicas. Option B is correct because RDS Cross-Region Read Replicas provide a secondary database in another region for DR. Option A is wrong because Multi-AZ only protects within a single region. Option C is wrong because DMS is for migration, not DR. Option D is wrong because S3 is not a database DR solution.

Answer

RDS Multi-AZ in the same region

Answer

Amazon S3

Answer

AWS Database Migration Service

Question 13

A company wants to implement a serverless architecture where an AWS Lambda function is triggered whenever a new object is uploaded to an S3 bucket. Which S3 feature should they use?

Accepted Answer

S3 Event Notifications. S3 Event Notifications allow you to configure S3 to publish events (e.g., s3:ObjectCreated:Put) to AWS Lambda, SQS, or SNS whenever an object is uploaded. This is the native serverless integration that triggers a Lambda function directly from S3 without polling or custom code.

Answer

S3 Object Lock

Answer

S3 Transfer Acceleration

Answer

S3 Inventory

Question 14

A company is designing a new application on AWS that requires a highly available and fault-tolerant architecture. Which TWO design principles should they follow?

Accepted Answer

Use Auto Scaling groups to automatically replace unhealthy instances.. Option A is correct because deploying across multiple Availability Zones ensures high availability. Option D is correct because using Auto Scaling groups helps maintain desired capacity and fault tolerance. Option B is wrong because a single instance is a single point of failure. Option C is wrong because a single Region does not protect against AZ failures. Option E is wrong because manual snapshots are not automated.

Answer

Manually create EBS snapshots every day.

Answer

Store data in a single Amazon S3 bucket in one Region.

Answer

Use a single large EC2 instance to simplify management.

Question 15

A company is building a serverless application using AWS Lambda and Amazon API Gateway. They need to authenticate users. Which TWO services can be used for authentication?

Accepted Answer

AWS IAM. AWS IAM is correct because it can be used to authenticate users by attaching IAM authorization to API Gateway, allowing the API to verify the caller's identity via AWS Signature Version 4 signing. This is commonly used for machine-to-machine or internal service calls where the caller has AWS credentials.

Answer

AWS Security Token Service

Answer

Amazon SQS

Answer

Amazon CloudFront