Amazon SAP-C02 Online Practice Questions and Exam Preparation

Amazon SAP-C02 Online Questions & Answers

• Question 841:

  A global company runs an analytics application on Amazon EC2 for computing. The company uses Amazon EBS as primary storage for raw and processed data. Users manually upload raw data daily to Amazon EC2 by using SSH from a local on-premises storage computer. The analytics application processes the data and a user manually uploads the data to Amazon S3 for long-term storage. The company wants to containerize the processing logic and migrate the processing logic to Amazon EKS. The company needs an automated solution to upload and move the processed data. The solution must have multiprotocol support and be usable from the EKS cluster.

  Which solution meets these requirements with the LEAST operational effort?

  A. Use AWS DataSync to copy raw data to Amazon EFS. Mount Amazon EFS on Amazon EKS as a volume. Use AWS Transfer for SFTP to copy processed data from Amazon EFS to Amazon S3.
  B. Use AWS DataSync to copy raw data to Amazon FSx for Lustre. Mount FSx for Lustre on Amazon EKS as a volume. Use DataSync to copy processed data from FSx for Lustre to Amazon S3.
  C. Use AWS DataSync to copy raw data to Amazon FSx for NetApp ONTAP. Mount FSx for NetApp ONTAP on Amazon EKS as a volume. Use DataSync to copy processed data from FSx for NetApp ONTAP to Amazon S3.
  D. Use AWS DataSync to copy raw data to Amazon FSx for NetApp ONTAP. Mount FSx for NetApp ONTAP on Amazon EKS as a volume. Use AWS Transfer for SFTP to copy processed data from FSx for NetApp ONTAP to Amazon S3.
  C. Use AWS DataSync to copy raw data to Amazon FSx for NetApp ONTAP. Mount FSx for NetApp ONTAP on Amazon EKS as a volume. Use DataSync to copy processed data from FSx for NetApp ONTAP to Amazon S3.

  ---

  Explanation

  This explanation is based on AWS documentation and best practices but is paraphrased, not a literal extract.

  The company wants to move from a manual EC2 and EBS-based workflow to a containerized application on Amazon EKS and automate data movement. The solution must: Support automated transfer of raw and processed data.

  Offer multiprotocol support.

  Be directly usable from the EKS cluster as a mounted volume.

  Minimize operational effort by using managed services where possible.

  AWS DataSync is a managed service designed to move data between on-premises storage and AWS storage services or between AWS storage services. It can perform scheduled or continuous transfers with minimal operational overhead.

  For storage accessible from Amazon EKS, a shared file system that supports mounting as a volume is appropriate.

  Amazon FSx for NetApp ONTAP provides a fully managed file system with multiprotocol support, including NFS and SMB, and supports features such as snapshots and storage efficiencies. Because it supports multiple protocols, it satisfies the requirement for multiprotocol access and can be mounted by applications running in Amazon EKS using standard Kubernetes persistent volume mechanisms. In the correct solution (option C), DataSync is used to copy raw data from the on-premises environment to FSx for NetApp ONTAP. The FSx for NetApp ONTAP file system is then mounted as a volume in the EKS cluster, allowing the containerized analytics processing logic to read and write data directly. After processing, DataSync is again used to copy processed data from FSx for NetApp ONTAP to Amazon S3 for long-term storage. This leverages DataSync's native integration with both FSx for NetApp ONTAP and Amazon S3, and avoids the need to run or manage custom upload tooling.

  Option A uses Amazon EFS, which supports NFS but does not provide multiprotocol support (for example, SMB), so it does not fully meet the multiprotocol requirement. It also introduces AWS Transfer for SFTP for the processed data upload, which adds an additional managed endpoint and SFTP-based flow, increasing complexity relative to using DataSync end-to-end.

  Option B uses Amazon FSx for Lustre, which is optimized for high-performance compute workloads and integrates well with S3, but it is not a multiprotocol file system and is typically accessed via NFS. It does not meet the stated multiprotocol requirement.

  Option D uses FSx for NetApp ONTAP (which supports multiprotocol) but relies on AWS Transfer for SFTP to move processed data to S3. While this can work, it adds another managed input endpoint and requires SFTP client configuration and management. Using DataSync directly from FSx for NetApp ONTAP to Amazon S3 (as in option C) is more straightforward, better suited for automated large-scale transfers, and involves less operational overhead.

  Therefore, option C meets all the requirements with the least operational effort by using DataSync with FSx for NetApp ONTAP and S3.

  References:

  AWS documentation on AWS DataSync for automated, scheduled data transfers between on-premises storage, FSx file systems, and Amazon S3.AWS documentation on Amazon FSx for NetApp ONTAP including its multiprotocol support (NFS and SMB) and integration with Kubernetes and Amazon EKS.

• Question 842:

  Question:

  A company is migrating a large on-prem Oracle database (withstored procedures) to AWS. The solution must usemanaged services, behighly available, and enable afast migrationwithminimal downtime.

  A. Use AWS DMS to replicate data to RDS for Oracle. Store database files in S3.
  B. Use backup and restore into EC2-hosted Oracle cluster.
  C. Use DMS to move data to DynamoDB. Recreate stored procedures in Lambda.
  D. Use DMS to migrate toAmazon Aurora PostgreSQL. UseAWS SCTto convert stored procedures.
  D. Use DMS to migrate toAmazon Aurora PostgreSQL. UseAWS SCTto convert stored procedures.

  ---

  Explanation

  Dis correct:Aurora PostgreSQLis afully managed, high-availabilitydatabase engine.

  UseAWS DMSto migrate data andAWS Schema Conversion Tool (SCT)to convert stored procedures from Oracle to Aurora-compatible code.

  This meets the requirements ofminimal downtime,managed services, andstored procedure support.

  Ais not valid-RDS doesn't allow custom S3 integration for storage. Binvolves EC2, which violates the "managed services" constraint. Crequires complete rewrite of the application logic, which contradicts the minimal downtime requirement.

  References:

  https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Target.Aurora.htmlhttps://docs.aws.amazon.com/SchemaConversionTool/latest/userguide/Welcome.html

• Question 843:

  Accompany runs an application on Amazon EC2 and AWS Lambda. The application stores temporary data in Amazon S3. The S3 objects are deleted after 24 hours.

  The company deploys new versions of the application by launching AWS CloudFormation stacks. The stacks create the required resources. After validating a new version, the company deletes the old stack.

  The deletion of an old development stack recently failed. A solutions architect needs to resolve this issue without major architecture changes.

  Which solution will meet these requirements?

  A. Create a Lambda function to delete objects from an S3 bucket. Add the Lambda function as a custom resource in the CloudFormation stack with a DependsOn attribute that points to the S3 bucket resource.
  B. Modify the CloudFormation stack to attach a DeletionPolicy attribute with a value of Delete to the S3 bucket.
  C. Update the CloudFormation stack to add a DeletionPolicy attribute with a value of Snapshot for the S3 bucket resource
  D. Update the CloudFormation template to create an Amazon Elastic File System (Amazon EFS) file system to store temporary files instead of Amazon S3. Configure the Lambda functions to run in the same VPC as the EFS file system.
  A. Create a Lambda function to delete objects from an S3 bucket. Add the Lambda function as a custom resource in the CloudFormation stack with a DependsOn attribute that points to the S3 bucket resource.

• Question 844:

  A company is using an organization in AWS Organizations to manage hundreds of AWS accounts. A solutions architect is working on a solution to provide baseline protection for the Open Web Application Security Project (OWASP) top 10 web application vulnerabilities. The solutions architect is using AWS WAF for all existing and new Amazon CloudFront distributions that are deployed within the organization.

  Which combination of steps should the solutions architect take to provide the baseline protection? (Select THREE.)

  A. Enable AWS Config in all accounts.
  B. Enable Amazon GuardDuty in all accounts.
  C. Enable all features for the organization.
  D. Use AWS Firewall Manager to deploy AWS WAF rules in all accounts for all CloudFront distributions.
  E. Use AWS Shield Advanced to deploy AWS WAF rules in all accounts for all CloudFront distributions.
  F. Use AWS Security Hub to deploy AWS WAF rules in all accounts for all CloudFront distributions.
  C. Enable all features for the organization.
  D. Use AWS Firewall Manager to deploy AWS WAF rules in all accounts for all CloudFront distributions.
  E. Use AWS Shield Advanced to deploy AWS WAF rules in all accounts for all CloudFront distributions.

  ---

  Explanation

  Enabling all features for the organization will enable using AWS Firewall Manager to centrally configure and manage firewall rules across multiple AWS accounts1. Using AWS Firewall Manager to deploy AWS WAF rules in all accounts for all CloudFront distributions will enable providing baseline protection for the OWASP top 10 web application vulnerabilities2. AWS Firewall Manager supports AWS WAF rules that can help protect against common web exploits such as SQL injection and cross-site scripting3. Configuring redirection of HTTP requests to HTTPS requests in CloudFront will enable encrypting the data in transit using SSL/TLS.

• Question 845:

  A company has an application that sells tickets online and experiences bursts of demand every 7 days.

  The application has a stateless presentation layer running on Amazon EC2. an Oracle database to store unstructured data catalog information, and a backend API layer. The front-end layer uses an Elastic Load Balancer to distribute the load across nine On-Demand Instances over three Availability Zones (AZs). The Oracle database is running on a single EC2 instance. The company is experiencing performance issues when running more than two concurrent campaigns. A solutions architect must design a solution that meets the following requirements:

  1. Address scalability issues.

  2. Increase the level of concurrency.

  3. Eliminate licensing costs.

  4. Improve reliability.

  Which set of steps should the solutions architect take?

  A. Create an Auto Scaling group for the front end with a combination of On-Demand and Spot Instances to reduce costs. Convert the Oracle database into a single Amazon RDS reserved DB instance.
  B. Create an Auto Scaling group for the front end with a combination of On-Demand and Spot Instances to reduce costs. Create two additional copies of the database instance, then distribute the databases in separate AZs.
  C. Create an Auto Scaling group for the front end with a combination of On-Demand and Spot Instances to reduce costs. Convert the tables in the Oracle database into Amazon DynamoDB tables.
  D. Convert the On-Demand Instances into Spot Instances to reduce costs for the front end. Convert the tables in the Oracle database into Amazon DynamoDB tables.
  C. Create an Auto Scaling group for the front end with a combination of On-Demand and Spot Instances to reduce costs. Convert the tables in the Oracle database into Amazon DynamoDB tables.

  ---

  Explanation

  Combination of On-Demand and Spot Instances + DynamoDB.

• Question 846:

  A company plans to migrate many VMs from an on-premises environment to AWS. The company requires an initial assessment of the on-premises environment before the migration, a visualization of the dependencies between applications that run on the VMs, and a report that provides an assessment of the on-premises environment.

  To get this information, the company has initiated a Migration Evaluator assessment request.

  The company has the ability to install collector software in its on-premises environment without any constraints Which solution will provide the company with the required information with the LEAST operational overhead?

  A. Install the AWS Application Discovery Agent on each on-premises VM. After the data collection period ends, use AWS Migration Hub to view the application dependencies. Download the Quick insights assessment report from Migration Hub.
  B. Install the Migration Evaluator Collector on each on-premises VM. After the data collection period ends, use Migration Evaluator to view the application dependencies. Download and export the discovered server list from Migration Evaluator. Upload the list to Amazon QuickSight When the QuickSight report is generated, download the Quick Insights assessment report.
  C. Setup the AWS Application Discovery Service Agentless Collector in the on-premises environment. After the data collection period ends, use AWS Migration Hub to view the application dependencies. Export the discovered server list from Application Discovery Service. Upload the list to Migration Evaluator. When the Migration Evaluator report is generated, download the Quick Insights assessment.
  D. Set up the Migration Evaluator Collector in the on-premises environment. Install the AWS Application Discovery Agent on each VM. After the data collection period ends, use AWS Migration Hub to view the application dependencies. Download the Quick Insights assessment report from Migration Evaluator.
  C. Setup the AWS Application Discovery Service Agentless Collector in the on-premises environment. After the data collection period ends, use AWS Migration Hub to view the application dependencies. Export the discovered server list from Application Discovery Service. Upload the list to Migration Evaluator. When the Migration Evaluator report is generated, download the Quick Insights assessment.

• Question 847:

  A company needs to migrate 60 on-premises legacy applications to AWS. The applications are based on the NET Framework and run on Windows.

  The company needs a solution that minimizes migration time and requires no application code changes.

  The company also does not want to manage the infrastructure.

  Which solution will meet these requirements?

  A. Refactor the applications and containerize them by using AWS Toolkit for NET Refactoring. Use Amazon Elastic Container Service (Amazon ECS) with the Fargate launch type to host the containerized applications.
  B. Use the Windows Web Application Migration Assistant to migrate the applications to AWS Elastic Beanstalk. Use Elastic Beanstalk to deploy and manage the applications.
  C. Use the Windows Web Application Migration Assistant to migrate the applications to Amazon EC2 instances. Use the EC2 instances to deploy and manage the applications.
  D. Refactor the applications and containerize them by using AWS Toolkit for NET Refactoring. Use Amazon Elastic Kubernetes Service (Amazon EKS) with the Fargate launch type to host the containerized applications.
  B. Use the Windows Web Application Migration Assistant to migrate the applications to AWS Elastic Beanstalk. Use Elastic Beanstalk to deploy and manage the applications.

• Question 848:

  A utility company collects usage data from smart meters every 5 minutes. Data is sent to API Gateway, processed by Lambda, and stored in DynamoDB. As usage increased, Lambda durations increased and DynamoDB PUTs failed with ProvisionedThroughputExceededException. Lambda also experiences TooManyRequestsException errors.

  Which combination of changes will resolve these issues? (Select TWO.)

  A. Increase the write capacity units to the DynamoDB table.
  B. Increase the memory available to the Lambda functions.
  C. Increase the payload size from the smart meters.
  D. Stream the data into an Amazon Kinesis data stream from API Gateway and process the data in batches.
  E. Collect data in an Amazon SQS FIFO queue, which triggers a Lambda function to process each message.
  A. Increase the write capacity units to the DynamoDB table.
  D. Stream the data into an Amazon Kinesis data stream from API Gateway and process the data in batches.

  ---

  Explanation

  Comprehensive and Detailed in Depth Explanation: A is correct because write throttling on DynamoDB means WCU (write capacity units) are insufficient.

  Increasing them will reduce the error rate.

  D is correct because introducing Kinesis allows for efficient, high-throughput ingestion and batch processing, reducing the number of Lambda invocations and overall load.

  References:

  DynamoDB Throttling

  Using Kinesis with Lambda

• Question 849:

  A company hosts an ecommerce site using EC2, ALB, and DynamoDB in one AWS Region. The site uses a custom domain in Route 53. The company wants to replicate the stack to a second Region for disaster recovery and faster access for global customers.

  What should the architect do?

  A. Use CloudFormation to deploy to the second Region. Use Route 53 latency-based routing. Enable global tables in DynamoDB.
  B. Use the console to recreate the infra manually in the second Region. Use weighted routing.
  C. Replicate only the S3 and DynamoDB data. Use Route 53 failover routing.
  D. Use Beanstalk and DynamoDB Streams for replication. Use latency-based routing.
  A. Use CloudFormation to deploy to the second Region. Use Route 53 latency-based routing. Enable global tables in DynamoDB.

  ---

  Explanation

  Option A is correct because: CloudFormation template senable repeatable infrastructure deployment. Route 53 latency-based routingensures users hit the closest Region. DynamoDB global tablesallow multi-Region, active-active replication of application data.

  Manual console work (B) is not scalable.

  Option C lacks EC2/ALB replication.

  Option D adds unnecessary services like Beanstalk and doesn't scale cleanly.

  References:

  https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/GlobalTables.html

• Question 850:

  A solutions architect is migrating an existing workload to AWS Fargate. The task can only run in a private subnet within the VPC where there is no direct connectivity from outside the system to the application.

  When the Fargate task is launched the task fails with the following error: CannotPullContainerError: API error (500): Get https://111122223333.dkr.ecr.us-east-1.amazonaws.com/v2/:net/http:requestcanceledwhilewaitingforconnectionHowshouldthesolutionsarchitectcorrectthiserror?

  A. Ensure the task is set to ENABLED for the auto-assign public IP setting when launching the task
  B. Ensure the task is set to DISABLED (or the auto-assign public IP setting when launching the task Configure a NAT gateway in the public subnet in the VPC to route requests to the internet
  C. Ensure the task is set to DISABLED for the auto-assign public IP setting when launching the task Configure a NAT gateway in the private subnet in the VPC to route requests to the internet
  D. Ensure the network mode is set to bridge in the Fargate task definition
  B. Ensure the task is set to DISABLED (or the auto-assign public IP setting when launching the task Configure a NAT gateway in the public subnet in the VPC to route requests to the internet