Home/Practice Test/AWS/Free SAP-C02 Practice Exam | 650+ Real Exam-Style Questions 2026

Free SAP-C02 Practice Exam | 650+ Real Exam-Style Questions 2026

Every SAP-C02 question is an architecture decision.
Use this practice test to choose stronger AWS solutions before exam day.

Real Exam Style
Questions
Detailed
Explanations
All Domains
Covered
Timed
Practice
4.8919 learner reviews across Microsoft, AWS, and CompTIA tracksVerified purchases
Jump Straight to the SAP-C02 Questions (No Sign-Up or Credit Card required)
Why choose us
1
Expert Explanations + Sources Master every concept with clarity.
2
2026-Fresh Questions Always current, never outdated.
3
Real Exam Simulation Practice like you'll test.
4
90-Day Free Updates Stay ahead of changes.
5
Start in 60 Seconds No waiting, instant access.

SAP-C02 exam at a glance

AWS Certified Solutions Architect – Professional · Professional level

Exam codeSAP-C02
CertificationAWS Certified Solutions Architect – Professional
LevelProfessional
Number of questions75
Duration180 minutes
Passing score750 (scaled score 100-1000; compensatory model – overall pass only required)
Question formatsMultiple choice (one correct answer) and multiple response (two or more correct answers)
DeliveryPearson VUE testing center or online proctored exam
Exam cost300 USD (see aws.amazon.com/certification for foreign exchange rates)
LanguagesEnglish, Japanese, Korean, Portuguese (Brazil), Simplified Chinese, Spanish (Latin America)
Certification validity3 years; recertify by passing the latest Professional-level exam; 50% discount voucher available
Retake policyMust wait 14 calendar days after a failed attempt; no limit on attempts; full fee required each attempt; cannot retake for 2 years after passing
PrerequisitesNo formal prerequisite; AWS recommends 2+ years hands-on experience designing/deploying cloud architecture on AWS

Intended for individuals who perform a solutions architect role with 2 or more years of experience designing and implementing cloud solutions on AWS. Validates advanced skills in complex, optimized AWS architectures aligned with the Well-Architected Framework.

Skills measured and their weighting

Skill areaWeight
Design Solutions for Organizational Complexity26%
Design for New Solutions29%
Continuous Improvement for Existing Solutions25%
Accelerate Workload Migration and Modernization20%

Source: aws.amazon.com — official SAP-C02 exam page. Figures on this page were checked against Amazon Web Services (AWS)’s official documentation. Amazon Web Services (AWS) can change exam length, cost and scoring without notice, so confirm the details there before you book.

Sit the whole exam before you sit the whole exam

The full bank covers every domain, with timed mode and per-domain scoring.

Premium
Timed mode Per-domain score tracking Unlimited free updates PDF + Practice Test
Get the full bank 30-day money back

SAP-C02 Practice Questions By Domains

4 domains covered

2. Design Solutions for Organizational Complexity

18 free questions available

Start Practice

3. Continuous Improvement for Existing Solutions

15 free questions available

Start Practice

4. Accelerate Workload Migration and Modernization

9 free questions available

Start Practice
Premium 70 of 679 free

Practice the full exam, not a sample

Unlock the full bank and practise every domain end to end.

Unlock all 679 questions

SAP-C02 Practice Test

Preparing for the AWS Certified Solutions Architect – Professional exam takes more than memorizing service names. A well-designed SAP-C02 practice test helps you learn how AWS services work together, compare several technically possible designs, and choose the option that best meets a company’s security, reliability, performance, cost, and operational needs. You can also Explore all practice tests to organize preparation for SAP-C02 and other professional certifications in one place.

The SAP-C02 exam is aimed at experienced AWS professionals who make architecture decisions across complex environments. The questions commonly describe business requirements, existing systems, technical limits, and several possible AWS solutions. Your task is to identify the design that satisfies every important requirement with the fewest unnecessary compromises.

This guide explains the current exam format, content domains, scoring system, registration process, online testing option, study strategy, and effective use of practice questions. The exam facts below were checked against the current official AWS certification page, SAP-C02 exam guide, and AWS testing policies.

What Is the AWS SAP-C02 Exam?

SAP-C02 is the exam code for AWS Certified Solutions Architect – Professional. It validates advanced skills in designing optimized AWS solutions using the AWS Well-Architected Framework. AWS expects candidates to understand how architecture decisions affect security, reliability, performance, cost, and day-to-day operations across multiple applications or projects.

The exam does not simply ask what an AWS service does. It measures whether you can use AWS services to solve real architectural problems. For example, a question may ask you to connect many AWS accounts to an on-premises network, migrate a database with minimal downtime, centralize security controls, meet a strict recovery objective, or lower cost without weakening availability.

AWS describes the target candidate as someone with two or more years of experience using AWS services to design and implement cloud solutions. The candidate should be able to evaluate application requirements, recommend suitable architectures, and provide guidance across a complex organization. Read the official SAP-C02 exam guide.

Who Should Take the SAP-C02 Exam?

SAP-C02 is suitable for professionals who already understand core AWS services and now design solutions at an organizational level. Likely candidates include:

  • Solutions architects responsible for production AWS environments
  • Cloud architects designing multi-account or multi-Region systems
  • Senior cloud engineers who make security, networking, migration, and cost decisions
  • Technical consultants planning AWS adoption or modernization projects
  • Professionals who already hold AWS Certified Solutions Architect – Associate and want to demonstrate deeper architecture skills

An Associate-level certification is not listed as a formal prerequisite. However, SAP-C02 is not designed as an introduction to AWS. If VPC routing, IAM policies, load balancing, Auto Scaling, storage classes, database choices, monitoring, and high availability are still new topics, build that foundation before starting full Professional-level mock exams.

You are probably ready to begin serious SAP-C02 preparation if you can explain not only what a service does, but also when to choose it, when not to choose it, and what trade-offs it creates.

What Does an SAP-C02 Practice Test Help You Learn?

A strong practice test is a decision-making tool. It should help you recognize requirements, remove unsuitable choices, and explain why one architecture is better than the alternatives.

Use practice questions to improve these abilities:

  • Requirement analysis: Separate mandatory requirements from background information.
  • Service selection: Match the workload to the correct compute, storage, database, networking, security, or migration service.
  • Trade-off evaluation: Compare availability, recovery time, operational effort, performance, and cost.
  • Multi-service design: Understand how services work together rather than studying each service in isolation.
  • Time management: Practice reading long scenarios without getting stuck on one question.
  • Knowledge-gap detection: Identify weak domains before they affect your final score.

For more AWS-focused preparation, review the Free AWS practice tests and choose sets that match your current certification goal.

Do not use mock questions only to remember an answer letter. The real value comes from reviewing the explanation, checking the related AWS documentation, and learning the design principle behind the answer. A memorized response may fail when a new scenario changes one requirement. A well-understood principle can be applied to many different questions.

SAP-C02 Exam Domains and Objectives

The scored portion of SAP-C02 is divided into four content domains. The percentages indicate how much each domain contributes to the scored exam.

Domain 1: Design Solutions for Organizational Complexity — 26%

This domain focuses on architecture across large or complicated organizations. You should be able to design connectivity between AWS accounts, VPCs, Regions, and on-premises environments. You also need to understand centralized security, resilient architecture, account governance, and organization-wide cost visibility.

Important areas include:

  • Amazon VPC, AWS Transit Gateway, AWS Direct Connect, VPN, routing, and hybrid DNS
  • Cross-account access, identity federation, IAM Identity Center, and least privilege
  • Encryption at rest and in transit with services such as AWS KMS and ACM
  • Disaster recovery based on recovery time objective (RTO) and recovery point objective (RPO)
  • AWS Organizations, service control policies, and AWS Control Tower
  • Central logging, auditing, shared services, tagging, budgets, and cost allocation

In practice questions, watch for phrases such as “hundreds of accounts,” “central security team,” “hybrid connectivity,” “shared resources,” or “business-unit billing.” These clues often point to organization-level services instead of a solution configured separately in every account.

Domain 2: Design for New Solutions — 29%

This is the largest domain. It asks you to turn business and technical requirements into a secure, reliable, high-performing, and cost-aware AWS architecture.

Study these topics:

  • Deployment strategies, infrastructure as code, CI/CD, and rollback planning
  • Business continuity, backups, replication, and disaster recovery
  • IAM, network security, encryption, credential management, AWS WAF, and AWS Shield
  • Multi-AZ and multi-Region designs
  • Decoupled applications using Amazon SQS, Amazon SNS, Amazon EventBridge, or AWS Step Functions
  • Storage, compute, caching, and purpose-built database selection
  • Rightsizing, Savings Plans, Reserved Instances, storage tiering, and data-transfer cost

Expect several answers to be technically valid. The best answer is the one that meets all stated requirements while respecting limits such as recovery time, budget, latency, compliance, and operational effort.

Domain 3: Continuous Improvement for Existing Solutions — 25%

Domain 3 begins with an existing architecture and asks how to improve it. The required improvement may involve operations, security, performance, reliability, or cost.

Focus on:

  • Monitoring, logging, alerting, and automated remediation
  • Safer deployment methods such as rolling and blue/green deployments
  • Configuration management and patching with AWS Systems Manager
  • Secrets management, least-privilege reviews, backups, and security automation
  • Performance metrics, bottleneck analysis, caching, scaling, and global delivery
  • Removing single points of failure and improving self-healing
  • Finding unused or oversized resources and reducing data-transfer cost

When answering these questions, first identify the current weakness. Do not select a large redesign if a smaller managed solution fixes the stated problem more safely and efficiently.

Domain 4: Accelerate Workload Migration and Modernization — 20%

This domain covers assessment, migration, and modernization. You should know how to evaluate a portfolio, choose a migration strategy, move applications and data, and improve workloads after migration.

Key topics include:

  • Migration assessments, wave planning, total cost of ownership, and the 7Rs
  • AWS Migration Hub, Application Discovery Service, and Application Migration Service
  • AWS DataSync, AWS Transfer Family, AWS Snow Family, and S3 Transfer Acceleration
  • AWS Database Migration Service and AWS Schema Conversion Tool
  • Direct Connect, Site-to-Site VPN, Route 53, identity, and migration governance
  • Choosing EC2, containers, serverless compute, storage, and purpose-built databases
  • Decoupling applications with queues, events, notifications, and workflows

Practice recognizing whether the requirement calls for rehosting, replatforming, refactoring, or another migration approach. The most modern design is not automatically the correct answer; the company’s time, risk, skills, dependencies, and business goals matter. 

Are Generative AI Topics Included in SAP-C02?

The current official SAP-C02 exam guide includes an Emerging Topics section. It says candidates might encounter pretest questions about responsible security controls for generative and agentic AI, including content filtering, access control, and human approval workflows. AWS states that these emerging-topic questions are unscored and do not affect the final result.

This means you should be familiar with the general architecture ideas, but you should not replace the four scored domains with a large AI study plan. Build your preparation around the official domain weights first. Also check the current guide close to your exam date because AWS notes that service lists and emerging technologies can change.

How to Register for the SAP-C02 Exam

You can schedule SAP-C02 through your AWS Certification Account:

  1. Sign in to your AWS Training and Certification account.
  2. Open your Certification Account and select the option to schedule a new exam.
  3. Find AWS Certified Solutions Architect – Professional (SAP-C02).
  4. Continue to Pearson VUE.
  5. Select online proctoring or a test center, then choose an available date and time.
  6. Review your personal details, identification rules, fee, and appointment information before paying.

AWS permits rescheduling or cancellation up to 24 hours before an appointment. Each appointment can be rescheduled twice; a third change requires cancellation and a new booking. Within 24 hours, cancellation or rescheduling is generally unavailable and the exam fee may be forfeited. Check the official AWS before-testing policy for the latest rules.

Can I Take the SAP-C02 Exam Online?

Yes. SAP-C02 is available as an online proctored exam through Pearson VUE, and it can also be taken at a Pearson VUE testing center. For online delivery, you need a private, quiet room, a compatible computer, a webcam, a microphone, and a stable internet connection. A remote proctor monitors the session through the webcam and screen-sharing software.

Run the required system test on the same computer and network you will use on exam day. Avoid a work-managed device if security controls might block the testing application. Clear your desk, close unnecessary software, prepare the required identification, and make sure nobody enters the room during the session. Because proctor communication is required, confirm that an appropriate proctoring language is available for your appointment. Review AWS testing options.

Six-Week SAP-C02 Study Plan

This plan works best for candidates who already have practical AWS experience. Adjust the pace if you need more time for labs or foundational review.

Week 1: Baseline and Organizational Architecture

Take an untimed diagnostic practice test. Record weak topics rather than focusing only on the total score. Then study Domain 1: multi-account design, hybrid networking, centralized identity, security controls, governance, disaster recovery, and cost visibility.

Week 2: New Solution Design

Begin Domain 2. Review deployment strategies, business continuity, security, reliability, performance, and cost optimization. Draw simple architecture diagrams and explain why each service was selected.

Week 3: Finish Domain 2 and Practice Trade-Offs

Continue with databases, storage, decoupling, caching, routing, multi-Region patterns, and pricing models. Complete scenario questions that force you to choose between two reasonable designs.

Week 4: Improve Existing Architectures

Study Domain 3. Practice identifying the problem before selecting a solution. Review CloudWatch, Systems Manager, security automation, deployment improvements, performance analysis, resilience, and cost reporting.

Week 5: Migration and Modernization

Cover Domain 4, including migration assessment, the 7Rs, transfer tools, database migration, containers, serverless services, and application integration. Build a small comparison chart for services that are easy to confuse.

Week 6: Timed Practice and Final Review

Take at least two full-length timed simulations under quiet, closed-book conditions. Review every incorrect answer and every correct answer that involved guessing. Revisit weak objectives in the official exam guide, then reduce heavy study during the final day so you arrive rested.

How to Use SAP-C02 Practice Questions Effectively

Follow this process for each scenario:

  1. Read the final sentence first. Identify exactly what the question asks you to choose.
  2. Mark hard requirements. Look for terms such as “least operational overhead,” “minimal downtime,” “most cost-effective,” “multi-Region,” or a specific RTO and RPO.
  3. Identify the architecture layer. Decide whether the problem is primarily networking, security, storage, database, governance, migration, reliability, or cost.
  4. Remove answers that break a requirement. An option may work technically but fail the stated budget, recovery, compliance, or management requirement.
  5. Compare the remaining trade-offs. Prefer the option that satisfies the complete scenario, not the one containing the most services.
  6. Review the explanation. Write one sentence stating why the correct answer wins and why your selected answer failed.

Use Online Practice Tests in three stages: first untimed with documentation available, then timed by domain, and finally as full exam simulations. This progression builds understanding before speed.

A practical error log can include four columns: question topic, reason for the mistake, correct design principle, and next review date. Common mistake categories include missing a keyword, confusing similar services, forgetting a quota or limitation, choosing a solution with too much management work, and misunderstanding the business requirement.

SAP-C02 Test-Taking Strategies

  • Set a pace. With 180 minutes for 75 questions, the simple average is about 2 minutes and 24 seconds per question. Save time for review.
  • Do not fight one long scenario. Choose your best answer, flag the question, and return later if the interface and remaining time allow.
  • Use every requirement. Details about downtime, latency, encryption, account structure, and operations are usually included for a reason.
  • Expect distractors. Some options solve only part of the problem or use a valid service in the wrong design.
  • Answer every question. There is no penalty for guessing, while unanswered items are incorrect.
  • Stay architecture-focused. The exam usually rewards a complete, supportable solution rather than a clever but fragile workaround.

SAP-C02 Exam-Day Checklist

Before an online exam

  • Run the Pearson VUE system test in advance.
  • Use the same computer, camera, microphone, and internet connection planned for the exam.
  • Confirm that your name matches your accepted identification.
  • Prepare a quiet, private, well-lit room.
  • Remove notes, extra screens, mobile devices, and other prohibited items.
  • Join early enough to complete check-in and room verification.

Before a test-center exam

  • Recheck the test-center address and appointment time.
  • Review the identification requirements in your confirmation email.
  • Plan to arrive early without rushing.
  • Store personal items as directed by the test-center staff.

Final exam results are posted to the AWS Certification Account within five business days, except when a result requires additional security or technical review. 

What Happens If I Do Not Pass SAP-C02?

AWS requires candidates who fail an exam to wait 14 calendar days before attempting it again. There is no general limit on the number of attempts, but the full registration fee must be paid for each attempt. After a failed attempt, use the score report and your practice-test error log to choose the two or three areas that need the most attention. Check the current AWS retake policy.

Avoid immediately restarting every topic from the beginning. A better retake plan is to diagnose the failure, rebuild weak design principles, complete targeted questions, and then use another timed simulation to confirm improvement.

SAP-C02 Frequently Asked Questions

How many questions are on the SAP-C02 exam?

The exam has 75 multiple-choice or multiple-response questions. According to the official guide, 65 questions affect the score and 10 are unscored.

How long is the SAP-C02 exam?

The time limit is 180 minutes. Candidates who receive an approved accommodation may have different arrangements.

What score do I need to pass SAP-C02?

You need a scaled score of 750 on a scale of 100–1,000. This is not a simple percentage score.

How much does the SAP-C02 exam cost?

AWS lists the exam fee as USD $300. Taxes, exchange rates, and local pricing may affect the final amount shown during registration.

Is SAP-C02 available online?

Yes. You can select online proctoring through Pearson VUE or schedule an appointment at a Pearson VUE testing center.

Is AWS Solutions Architect Associate required before SAP-C02?

AWS does not list an Associate certification as a formal prerequisite. Still, SAP-C02 targets experienced professionals, and AWS describes the intended candidate as having at least two years of experience designing and implementing AWS cloud solutions.

Is SAP-C02 difficult?

SAP-C02 is an advanced exam with long, scenario-based questions and several plausible answers. It becomes more manageable when you understand architectural trade-offs, practice time management, and review explanations instead of memorizing answers.

How long is the AWS Solutions Architect Professional certification valid?

AWS Certifications are valid for three years. You must complete an eligible recertification path before expiration to keep the credential active.

Are practice tests enough to pass SAP-C02?

Practice tests are most effective when combined with the official exam guide, AWS documentation, architecture review, and hands-on experience. Questions can expose weak areas and improve decision-making, but they should support learning rather than replace it.

Top 15 Most Challenging SAP-C02 Questions

Question 1
Domain: Design for New Solutions
A business has an app that leverages AWS Key Management Service (AWS KMS) to encrypt and decrypt data. Data is stored in an S3 bucket in a specific AWS Region. Security policies require encryption before upload to S3 and decryption when retrieved. The bucket is replicated across multiple Regions. How can the app encrypt and decrypt data across Regions using the same key?
  • A. Establish a KMS multi-Region primary key and generate multi-Region replica keys in every Region; modify the app to use the regional replica key.
  • B. Set up a separate customer-managed KMS key in each extra Region and adjust the app to use the Region-specific key.
  • C. Utilize AWS Private CA to issue TLS certificates and replicate them with AWS RAM.
  • D. Export the KMS key material to Systems Manager Parameter Store in each Region and update the app to use them.
Question 2
Domain: Design Solutions for Organizational Complexity
A firm is designing an AWS Organizations structure and wants a unified approach to apply tags across the entire organization. New resources must include specific tag values, and each OU should have unique tag values. Which solution satisfies these needs?
  • A. Apply an SCP to block resource creation without the required tags; create a tag policy listing the OU-specific tag values and attach it to each OU.
  • B. Apply an SCP to block resource creation without the required tags; create a tag policy listing the OU-specific tag values and attach it to the organization’s management account.
  • C. Allow resource creation only when the required tags exist via an SCP; create a tag policy listing the OU-specific tag values and attach it to the OUs.
  • D. Deny resource creation that lacks required tags with an SCP; specify the tag list and attach the SCP to the OUs.
Question 3
Domain: Continuous Improvement for Existing Solutions
A large containerized workload runs in AWS using ECS, now using AWS Fargate instead of EC2. There is concern about hitting the ECS task quota. How can the team be alerted when Fargate usage hits 80% of the limit?
  • A. Monitor the Sample Count per service in CloudWatch and alert at 80%.
  • B. Monitor ECS service quotas under the AWS/Usage namespace in CloudWatch and set an alarm for 80% utilization; notify via SNS.
  • C. Poll Fargate metrics with a Lambda function and alert via SES at 80%.
  • D. Use AWS Config to track Fargate quotas and alert via SES on non-compliance.
These are the hard ones. There are 664 more. Every question explains why the wrong answers are wrong, with a link to official docs.
Get all 679 questions
Question 4
Domain: Accelerate Workload Migration and Modernization
A company is modernizing a legacy .NET Framework app backed by SQL Server. Goals: containerize into microservices, manage OS patches and storage, implement load balancing, ensure high availability, with minimal code changes. Which approach meets all requirements with minimal refactoring?
  • A. Use App2Container to deploy on ECS EC2 with an Application Load Balancer and use RDS for SQL Server.
  • B. Use App2Container on ECS EC2 with Network Load Balancer and Aurora MySQL.
  • C. Use Porting Assistant and EKS with Fargate and Aurora MySQL.
  • D. Use Porting Assistant and EKS with Fargate and RDS SQL Server.
Question 5
Domain: Design for New Solutions
A company develops an image analysis solution handling a 50 TB reference dataset and analyzes images up to 1 TB each. The workload uses an Auto Scaling group of EC2 Linux instances in a VPC, with shared io2 EBS volumes in each AZ to store the dataset. During testing, parallel analyses caused disk errors and job failures. Which solution provides seamless data access for all instances at the lowest cost?
  • A. Create a separate EBS volume per instance and periodically copy data from the shared volume; update the app to reference the new volume.
  • B. Migrate the reference data to an S3 bucket; install Mountpoint for S3 on EC2; add S3 gateway endpoints; replace the EBS mount with the S3 mount.
  • C. Move the data to an S3 bucket and use an S3-backed Multi-AZ Amazon EFS volume; mount EFS and replace the EBS mount with EFS.
  • D. Upgrade to local storage on instances and regularly copy from the shared EBS volume; update the app to use local storage.
Question 6
Domain: Design Solutions for Organizational Complexity
A company stores data in an Amazon RDS for PostgreSQL DB instance located in a private subnet within an AWS account. Applications in different VPCs and accounts must access this data via private connectivity, with a cap on active connections and scalability for future accounts. Which solution meets these needs?
  • A. Connect all VPCs with a transit gateway; deploy a NAT gateway in a public subnet; route through the transit gateway to the DB.
  • B. Create an RDS proxy in the database account; add a proxy endpoint in the private subnet; use AWS PrivateLink with a Network Load Balancer for DB access.
  • C. Establish VPC peering between the DB VPC and each external VPC; provide access via an Application Load Balancer over the peering connection.
  • D. Create VPC peering between the DB VPC and each external VPC; place a NAT gateway in a public subnet to reach the DB.
Question 7
Domain: Continuous Improvement for Existing Solutions
A legacy monolithic EC2-based application running on Amazon Linux 2 must have encrypted EBS data backed up to an Amazon S3 bucket due to a legal requirement. The app cannot grant SSH access. What solution satisfies these constraints while keeping the app online?
  • A. Attach an IAM role to the instance with S3 write permissions and use Systems Manager Session Manager to access the instance and copy data to S3.
  • B. Create an image of the instance with reboot; launch a new instance from the image, attach a role with S3 write permissions, and copy data to S3.
  • C. Take an EBS snapshot with Data Lifecycle Manager and copy data to S3.
  • D. Create an image of the instance; launch a new instance with a role that can write to S3; copy data to S3 via a command.
Question 8
Domain: Accelerate Workload Migration and Modernization
A company plans a cloud migration and wants to assess existing data center VMs to size new EC2 instances. They need CPU, memory, and disk utilization metrics, a list of running processes, and visibility into network connections for mapping. What option is most cost-effective for gathering this data?
  • A. Use AWS Application Discovery Service with a data collection agent on each VM.
  • B. Install the CloudWatch agent on all servers and publish metrics to CloudWatch Logs.
  • C. Use AWS Application Discovery Service with agentless discovery in the current visualization setup.
  • D. Enable AWS Application Discovery Service in the AWS Console and allow VPN-scoped firewall scans.
Question 9
Domain: Design for New Solutions
A blog app runs on AWS using API Gateway, DynamoDB, and Lambda and currently does not require API keys. Routes include GET /posts/{postid}, GET /users/{userid}, and GET /comments/{commentid}. To boost real-time engagement in comments, which design best reduces latency and improves UX?
  • A. Use an edge-optimized API with CloudFront caching for API responses.
  • B. Update the app to poll GET comment[commentid] every 10 seconds.
  • C. Use AWS AppSync with WebSockets to deliver comments.
  • D. Increase Lambda concurrency to lower API response time.
Question 10
Domain: Accelerate Workload Migration and Modernization
A business case is needed for migrating an on-prem data center to AWS. A CMDB export of all servers will be used. Which option is the most cost-effective way to perform the analysis?
  • A. Use AWS Well-Architected Tool to import CMDB data and generate recommendations.
  • B. Use Migration Evaluator for an analysis and upload CMDB data via the data import template.
  • C. Define resource matching rules and use CMDB data with the AWS Price List Bulk API to analyze against AWS services.
  • D. Use AWS Application Discovery Service to import CMDB data for analysis.
Question 11
Domain: Design for New Solutions
A serverless app running on an AWS Lambda function inside a VPC needs access to a new external service that only accepts requests from preapproved public IPv4 addresses. The provider requires you to supply a single public IP before the service can be used. Which setup enables the app to reach the new service?
  • A. Set up a NAT gateway and assign it an Elastic IP; route the VPC to use this NAT gateway.
  • B. Set up an egress-only internet gateway and assign it an Elastic IP; configure the Lambda function's ENI to use the egress-only gateway.
  • C. Set up an internet gateway and assign it an Elastic IP; configure the Lambda function to use the internet gateway.
  • D. Set up an internet gateway and assign it an Elastic IP; update the public VPC route table to point to the internet gateway.
Question 12
Domain: Continuous Improvement for Existing Solutions
An EB Java pilot runs in a single-instance environment to save costs, but CPU utilization often exceeds 85%, causing bottlenecks. To address this before production with minimal operational overhead, which approach fits best?
  • A. Create a new Elastic Beanstalk app with a load-balanced environment, include all AZs, and add a scale-out rule when CPU > 85% for 5 minutes.
  • B. Add a second Elastic Beanstalk environment and use traffic-splitting to divert some load when average CPU > 85% for 5 minutes.
  • C. Modify the current environment to a load-balanced setup with all AZs and a scale-out rule when average CPU > 85% for 5 minutes.
  • D. Use Rebuild environment with load balancing, select AZs, and add a scale-out rule when total CPU exceeds 85% for 5 minutes.
Question 13
Domain: Accelerate Workload Migration and Modernization
A company migrating a containerized Kubernetes application to AWS seeks the simplest path. What is the easiest migration option?
  • A. Run with App Runner using an open-source repository
  • B. Use Amazon EKS with managed node groups and Aurora
  • C. Use ECS on EC2 with task definitions
  • D. Rebuild a Kubernetes cluster on EC2 manually
Question 14
Domain: Design for New Solutions
For a large multiplayer game, real-time leaderboards demand microsecond reads and single-digit-millisecond writes. With datasets in the low terabytes and a need for quick failures in a primary, plus archival-ready data for analytics, which approach minimizes ongoing ops?
  • A. ElastiCache for Redis OSS cluster with cluster mode enabled and primary as the endpoint
  • B. RDS database with a read replica and writes to the writer endpoint, reads to the reader endpoint
  • C. MemoryDB cluster in Multi-AZ accessing the primary node
  • D. Multiple Redis nodes on EC2 across AZs with backups to S3
Question 15
Domain: Continuous Improvement for Existing Solutions
A CloudFront distribution serves a static S3-hosted app with a custom domain and calls a Regional API Gateway endpoint in ap-northeast-1 for backend APIs. With CORS configured, API calls slow down from outside ap-northeast-1. What changes will improve performance?
  • A. Enable CloudFront Origin Shield and S3 Transfer Acceleration on the bucket
  • B. Configure Route 53 latency-based routing between the Regional API and CloudFront
  • C. Add the Regional API endpoint as an origin for CloudFront and access APIs via the app’s DNS name
  • D. Add AWS Global Accelerator in the same account and access APIs via Global Accelerator
Disclaimer: Edurely is an independent educational platform. We are not affiliated with, authorized by, endorsed by, or in any way officially connected to AWS . Full disclaimer
Edurely
Curated By Edurely Team

The Edurely Team comprises certified professionals and subject matter experts dedicated to delivering accurate, up-to-date exam preparation materials. We rigorously review every resource to ensure it aligns with the latest industry standards and certification objectives to help you succeed.