SAP-C02 Design for New Solutions Practice Question
Network Topology
A company is troubleshooting a Lambda function that is timing out when trying to connect to an RDS database in a VPC. The Lambda function configuration is shown in the exhibit. The function has a timeout of 30 seconds and a memory size of 128 MB. The VPC has subnets in multiple Availability Zones, but the function only has one subnet configured. What change will MOST LIKELY resolve the timeout?
⚠ Common exam trap
Candidates often assume increasing memory or removing VPC configuration will fix connectivity issues, but the real problem is the lack of subnet redundancy across Availability Zones, which is a common misconfiguration in multi-AZ VPC designs.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Add subnets from other Availability Zones to the VPC configuration.
The Lambda function is timing out because it is configured with only one subnet, but the RDS database is in a VPC with subnets across multiple Availability Zones (AZs). Lambda requires at least one subnet per AZ used by the target resource to ensure network path availability; if the single subnet's AZ becomes unavailable or the RDS instance is in a different AZ, the connection fails. Adding subnets from other AZs provides redundant network paths, resolving the timeout.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Add subnets from other Availability Zones to the VPC configuration.
Why this is correct
Multiple subnets improve availability and connectivity.
- ✗
Remove the VPC configuration to allow the function to access the internet.
Why it's wrong here
Removing VPC will prevent access to RDS in VPC.
- ✗
Increase the function's memory size to 1024 MB.
Why it's wrong here
Memory increase may help compute, not network connectivity.
- ✗
Update the security group to allow all outbound traffic.
Why it's wrong here
Security group may already allow outbound.
Visual reference
Quick reference
Cloud Service Model Comparison
| Model | You Manage | Provider Manages | Examples |
|---|---|---|---|
| IaaS | OS, runtime, apps, data | Hardware, hypervisor, networking | EC2, Azure VMs, GCP Compute Engine |
| PaaS | Apps and data | OS, runtime, middleware, hardware | Elastic Beanstalk, Azure App Service |
| SaaS | Data and settings only | Everything else | Microsoft 365, Salesforce, Workday |
| FaaS / Serverless | Function code only | Infra, scaling, runtime | Lambda, Azure Functions, Cloud Run |
| CaaS | Containers and apps | Kubernetes, OS, hardware | EKS, AKS, GKE |
Go deeper
Related to this question
About these practice questions
Courseiva writes every SAP-C02 question from scratch — 1,660 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SAP-C02 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SAP-C02 exam.