SAP-C02 Design for New Solutions Practice Question
A company is designing a new microservices platform on AWS. The platform consists of 50 microservices, each running in its own Amazon ECS service on AWS Fargate. The services communicate via REST APIs. The company wants to implement a service mesh to handle traffic routing, observability, and security (mTLS). They also need to meet compliance requirements that all traffic between services must be encrypted and logged. The solution must be fully managed and reduce operational overhead. After implementing the service mesh, the operations team notices that latency between services has increased by 20%, and some services are experiencing connection timeouts. The team has enabled mTLS and distributed tracing. Which course of action should the team take to diagnose and resolve the latency issues?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Check the Envoy proxy resource limits in the App Mesh configuration and increase the CPU and memory allocated to the sidecar proxies.
AWS App Mesh can inject Envoy sidecar proxies, and increasing the proxy resources can reduce latency caused by insufficient CPU or memory. Option B (using AWS Cloud Map for service discovery) does not address the latency issues; Cloud Map is a service discovery mechanism, not a replacement for the service mesh. Option C (replacing the service mesh with VPC peering and security groups) removes the service mesh benefits like mTLS and observability, and is not a direct solution to proxy resource constraints. Option D (converting to Lambda and API Gateway) is a major redesign and not necessary for diagnosing the latency problem.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Check the Envoy proxy resource limits in the App Mesh configuration and increase the CPU and memory allocated to the sidecar proxies.
Why this is correct
Under-provisioned sidecars can cause latency and timeouts.
- ✗
Use AWS Cloud Map for service discovery instead of App Mesh.
Why it's wrong here
Cloud Map does not address latency caused by sidecar proxies.
- ✗
Replace the service mesh with VPC peering and security groups, and use direct HTTP calls.
Why it's wrong here
Removes mTLS and observability benefits.
- ✗
Convert the microservices to AWS Lambda functions and use API Gateway.
Why it's wrong here
Major redesign; may not reduce latency.
Visual reference
Quick reference
Cloud Service Model Comparison
| Model | You Manage | Provider Manages | Examples |
|---|---|---|---|
| IaaS | OS, runtime, apps, data | Hardware, hypervisor, networking | EC2, Azure VMs, GCP Compute Engine |
| PaaS | Apps and data | OS, runtime, middleware, hardware | Elastic Beanstalk, Azure App Service |
| SaaS | Data and settings only | Everything else | Microsoft 365, Salesforce, Workday |
| FaaS / Serverless | Function code only | Infra, scaling, runtime | Lambda, Azure Functions, Cloud Run |
| CaaS | Containers and apps | Kubernetes, OS, hardware | EKS, AKS, GKE |
Go deeper
Related to this question
About these practice questions
Courseiva writes every SAP-C02 question from scratch — 1,660 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.