The AWS Certified Solutions Architect – Professional (SAP-C02) exam validates advanced skills in designing distributed systems on AWS. It is ideal for experienced architects looking to demonstrate their expertise.
Which AWS service provides managed serverless compute?
AAWS Lambda
BAmazon EC2
CAmazon S3
DAmazon RDS
Explanation
AWS Lambda allows executables without servers, unlike EC2 which hosts servers, S3 stores data, and RDS manages databases.
Q122
A company needs to share application configurations securely across multiple environments. Which AWS service can they use?
AAWS Config
BAWS Secrets Manager
CAmazon S3
DAmazon CloudFront
Explanation
AWS Secrets Manager is specifically designed for managing secrets securely, while Config and CloudFront serve different purposes and S3 is for storage.
Q123
What happens when you stop an Amazon EC2 instance?
AData is lost from EBS volumes
BInstance charges continue
CEBS volumes remain intact
DInstance IP is static
Explanation
EBS volumes remain intact when stopped, but data loss occurs only if not saved, charges stop unless using parking, and IP can be dynamic.
Q124
Which service provides event-driven compute functionality?
AAWS Lambda
BAmazon EC2
CAmazon RDS
DAmazon S3
Explanation
AWS Lambda executes code in response to events, while others are not event-driven compute services.
Q125
A company needs to ensure that their data is encrypted at rest and in transit in S3. What must they implement?
ADefault bucket policy
BIAM roles only
CSSE and HTTPS
DEnhanced monitoring
Explanation
SSE provides encryption at rest, while HTTPS ensures encryption in transit; the others address different aspects.
Q126
You are configuring Amazon VPC Peering. What happens if you try to peer two VPCs in different regions?
APeering succeeds without issues
BPeering cannot be established
CTraffic is automatically routed to the Internet
DPeering is established but no traffic flows
Explanation
VPC Peering only allows connections in the same region, while the other options misrepresent the capability and behavior.
Q127
Which service provides event-driven compute functionality?
AAWS Lambda
BEC2
CRDS
DS3
Explanation
AWS Lambda allows code execution in response to events, while the others serve different primary functions.
Q128
A company needs a scalable NoSQL database. Which AWS service should they choose?
AAmazon RDS
BAmazon DynamoDB
CAmazon Redshift
DAmazon Aurora
Explanation
Amazon DynamoDB is a fully managed NoSQL database, while the others are relational databases or data warehouses.
Q129
When configuring a VPC, what is the purpose of an Internet Gateway?
AConnect VPC to Direct Connect
BAllow internet access to resources
CEncrypt VPC traffic
DAutomatically backup VPC resources
Explanation
An Internet Gateway allows resources in a VPC to connect to the internet, which is not the function of the other options.
Q130
Which AWS service helps manage event-driven architectures?
AAWS Step Functions
BAWS Lambda
CAmazon Kinesis
DAmazon SNS
Explanation
AWS Lambda is designed for running code in response to events, while others support different use cases.