The AWS Certified Solutions Architect – Professional (SAP-C02) exam validates advanced skills in designing distributed systems on AWS. It is ideal for experienced architects looking to demonstrate their expertise.
What happens when an EC2 instance is stopped and started again?
AIP Address remains the same
BData on ephemeral storage is lost
CInstance type can no longer be changed
DAll EBS volumes are deleted
Explanation
Ephemeral storage is ephemeral; other options reflect incorrect behaviors of EC2 instances.
Q232
Which service allows you to create serverless applications?
AAWS Lambda
BAmazon EC2
CAmazon RDS
DAWS CloudFormation
Explanation
AWS Lambda enables running code without provisioning servers, while others do not provide serverless functionality.
Q233
A company needs to store non-relational data with high scalability. Which AWS service should they use?
AAmazon S3
BAmazon DynamoDB
CAmazon RDS
DAmazon Aurora
Explanation
Amazon DynamoDB is a managed NoSQL database that provides high scalability, whereas the others are not non-relational databases.
Q234
What happens when an EC2 instance is stopped and started again?
AIP address remains the same
BData on instance store is lost
CInstance type cannot change
DRoot volume is deleted
Explanation
Stopping an EC2 instance loses all data on instance store volumes, while other options are incorrect under this behavior.
Q235
A company needs to host a website with rapid scaling needs. Which service should they choose?
AAmazon EC2 Auto Scaling
BAWS Lambda
CAmazon S3
DAWS CloudFormation
Explanation
Amazon EC2 Auto Scaling effectively adjusts capacity, while AWS Lambda is for serverless compute, S3 is for storage, and CloudFormation is for infrastructure as code.
Q236
What happens when a VPC's route table does not contain a route to the internet?
AInstances cannot access the internet
BInstances can access the internet
CVPC automatically creates a route
DInternet connection is restricted by default
Explanation
Without a route to the internet in the route table, instances are isolated from public access, while options B and C are incorrect assumptions.
Q237
You are configuring an IAM policy that grants full access to S3 resources. Which of the following actions MUST be included?
As3:PutObject
Bs3:GetBucket
Cs3:ListAllMyBuckets
Ds3:UpdateBucketPolicy
Explanation
s3:PutObject is required for uploading, while B and C are about listing and buckets permissions, and D does not pertain to general S3 access.
Q238
Which service provides scalable DNS management?
ARoute 53
BCloudTrail
CGuardDuty
DVPC
Explanation
Route 53 enables scalable DNS management while others serve different purposes.
Q239
A company needs to store sensitive data compliant with HIPAA. Which service should they use?
AS3 Standard
BS3 Glacier
CS3 with Encryption at Rest
DS3 Intelligent-Tiering
Explanation
S3 with Encryption at Rest ensures compliance with HIPAA for sensitive data, as other options lack necessary security features.
Q240
What happens when you modify a security group by adding new rules?
AExisting connections are reset
BNew rules apply only to new connections
CAll traffic is immediately denied
DRules only affect inbound traffic
Explanation
New rules apply only to new connections; existing connections are unaffected, while the other options misrepresent security group behaviors.