The AWS Certified Solutions Architect – Professional (SAP-C02) exam validates advanced skills in designing distributed systems on AWS. It is ideal for experienced architects looking to demonstrate their expertise.
Which service allows for serverless computing in AWS?
AAWS Lambda
BAmazon EC2
CAmazon RDS
DAmazon S3
Explanation
AWS Lambda provides serverless computing, while the others are not serverless services.
Q332
You are configuring a VPC with multiple subnets. What is the function of a route table?
AManage security group rules
BDefine network ACLs
CControl traffic flow
DAllocate IP addresses
Explanation
The route table controls the flow of traffic between subnets and the Internet.
Q333
A company needs high availability and low latency for its application across regions. Which AWS service should it use?
AAmazon CloudFront
BAmazon Route 53
CAWS Global Accelerator
DAWS Lambda
Explanation
AWS Global Accelerator optimizes path and ensures high availability, while others serve different purposes.
Q334
Which service provides scalable DNS management?
AAmazon Route 53
BAWS Shield
CAmazon CloudFront
DAWS Direct Connect
Explanation
Amazon Route 53 is designed for DNS management, while the others serve different purposes.
Q335
A company needs to manage cost with a serverless backend. Which AWS service should they use?
AAmazon EC2
BAWS Lambda
CAmazon RDS
DAmazon ECS
Explanation
AWS Lambda is serverless and cost-efficient, while the others require managing servers.
Q336
You are configuring S3 bucket policies. What happens if two conflicting policies are defined?
ADeny takes precedence over allow
BAllow always takes precedence
CBoth policies are ignored
DPolicies are merged automatically
Explanation
In AWS, an explicit deny will always override allows in conflicting policies.
Q337
Which service allows for real-time data streaming on AWS?
AAmazon Kinesis
BAmazon S3
CAWS Batch
DAWS Glue
Explanation
Amazon Kinesis is specifically designed for real-time data streaming, while S3 is for storage.
Q338
A company needs a secure way to share sensitive data among multiple AWS accounts. Which service should they use?
AAmazon S3 with bucket policies
BAWS Resource Access Manager
CAWS Secrets Manager
DAWS Direct Connect
Explanation
AWS Resource Access Manager allows sharing resources securely between accounts, unlike the other options.
Q339
What happens when you set the termination policy in an Auto Scaling group to 'OldestInstance'?
ANewest instances are terminated first
BA random instance is terminated
CInstance with highest CPU is terminated
DOldest instances are terminated first
Explanation
The 'OldestInstance' policy removes the oldest instance, not the newest or randomly.
Q340
Which service allows for real-time processing of streaming data in AWS?
AAmazon Kinesis
BAmazon SQS
CAWS Glue
DAmazon RDS
Explanation
Kinesis is designed specifically for real-time data processing; SQS is for message queuing, Glue is for ETL, and RDS is a relational database service.