SAP-C02 Practice Question: Accelerate Workload Migration and Modernization
A company is migrating workloads to AWS using AWS Application Migration Service (AWS MGN). The source servers are running on VMware vSphere. After installing the AWS Replication Agent on the source servers, the migration waves are set up. However, during a test cutover, the test instance fails to launch with an error 'Insufficient IP address space in the target VPC'. What is the most likely cause?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The target VPC subnet does not have enough available IP addresses
The error 'Insufficient IP address space in the target VPC' indicates that the subnet used for test instances does not have enough available IP addresses to launch the instance. AWS MGN allocates IP addresses from the specified subnet during instance launch. Option A is incorrect because a CIDR mismatch would cause a different error, typically related to subnet configuration. Option B is incorrect because IAM permission issues would result in an access denied error, not an IP space error. Option D is incorrect because the service not being enabled would produce a different error (e.g., service not available). Therefore, the most likely cause is insufficient available IP addresses in the target VPC subnet.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The replication settings specify a subnet with an incorrect CIDR block
Why it's wrong here
A wrong CIDR in replication settings would cause the launch to fail for an invalid or unreachable subnet, not for insufficient space. The error indicates the chosen subnet's available addresses are exhausted by the test instance plus other resources. Correct CIDR selection matters when the subnet itself is misidentified.
- ✗
The IAM role for AWS MGN does not have permissions to create network interfaces
Why it's wrong here
Missing ec2:CreateNetworkInterface permissions produce an authorisation failure such as UnauthorizedOperation, not an address-space error. The message explicitly reports insufficient IP addresses, which is a subnet capacity condition. IAM role permissions would be the answer if the launch failed with an access-denied response instead.
- ✓
The target VPC subnet does not have enough available IP addresses
Why this is correct
AWS MGN launches test and cutover instances into the target subnet, each consuming a free private IP address. The launch error explicitly reports insufficient IP address space, meaning the subnet's available address pool is exhausted rather than any agent or replication fault.
- ✗
The AWS MGN service is not enabled in the target AWS Region
Why it's wrong here
The error names IP address exhaustion in the target VPC, so the fault lies in subnet sizing or allocation, not service availability. AWS MGN being disabled in the Region would prevent replication or launch entirely, typically surfacing as an authorisation or endpoint error. Enabling the service is a prerequisite step, not a capacity remedy.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 984 original SAP-C02 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.