The AWS Certified Solutions Architect – Professional (SAP-C02) exam validates advanced skills in designing distributed systems on AWS. It is ideal for experienced architects looking to demonstrate their expertise.
Which service is used for automating infrastructure provisioning?
AAWS CloudFormation
BAWS CodeDeploy
CAWS Lambda
DAWS CodePipeline
Explanation
AWS CloudFormation automates provisioning, while others focus on deployment or CI/CD processes.
Q182
A company needs to connect its on-premises data center to AWS. Which option gives the lowest latency?
AAWS VPN
BAWS Direct Connect
CAWS Transit Gateway
DAWS VPC Peering
Explanation
AWS Direct Connect provides dedicated lines, ensuring lower latency compared to VPN solutions.
Q183
What happens when an EC2 instance is launched in an Auto Scaling group but the launch configurations exceed the limit?
AThe instance launches successfully.
BThe instance fails to launch.
CAuto Scaling creates a new configuration.
DThe limit is automatically increased.
Explanation
If limits are exceeded, the instance cannot launch, unlike the other options that suggest different outcomes.
Q184
Which service is best for long-term data archiving?
AAmazon S3 Glacier
BAmazon EC2
CAmazon RDS
DAmazon CloudFront
Explanation
Amazon S3 Glacier is designed specifically for long-term data storage and archival, while EC2 and RDS focus on compute and databases respectively, and CloudFront is a content delivery network.
Q185
A company needs a disaster recovery strategy that minimizes downtime. What should they implement?
APilot light
BBackup and restore
CMulti-site active-active
DCold standby
Explanation
A multi-site active-active strategy provides immediate failover capabilities, whereas backup and restore and pilot light would lead to longer recovery times.
Q186
You are configuring an IAM role with a trust relationship. What is an essential component?
AService definition
BTrust policy document
CPermissions boundary
DEncryption key
Explanation
The trust policy document defines who can assume the role, while the other options relate to permissions and security features but do not define trust relationships.
Q187
Which service allows you to run code without provisioning servers?
AAWS Lambda
BAmazon EC2
CAWS Elastic Beanstalk
DAmazon ECS
Explanation
AWS Lambda enables serverless code execution, while others require server management.
Q188
A company needs to monitor real-time metrics for its application. Which AWS service should they use?
AAWS CloudTrail
BAmazon CloudWatch
CAWS Config
DAWS X-Ray
Explanation
Amazon CloudWatch is designed specifically for real-time metrics monitoring, unlike the other services.
Q189
What happens when an S3 bucket is configured with public access?
ANo one can access the bucket.
BOnly AWS accounts can access.
CAnyone on the internet can access.
DAccess is restricted to VPN users.
Explanation
Public access allows internet visibility, while other options are incorrect restrictions.
Q190
Which service provides serverless compute power?
AAWS Lambda
BAmazon EC2
CAmazon Lightsail
DAmazon RDS
Explanation
AWS Lambda enables running code without servers, while others require server management.