The AWS Certified Solutions Architect – Professional (SAP-C02) exam validates advanced skills in designing distributed systems on AWS. It is ideal for experienced architects looking to demonstrate their expertise.
A company needs to optimize its AWS costs primarily for infrequently accessed data. Which storage class should they choose?
AS3 Standard
BS3 Intelligent-Tiering
CS3 Glacier
DS3 One Zone-IA
Explanation
S3 One Zone-IA is cost-effective for infrequent access, unlike Glacier which is designed for archival storage with longer retrieval times.
Q372
You are configuring an Auto Scaling group. What occurs if the desired capacity is set to zero?
AInstances will be terminated immediately.
BNo changes will be made.
CScaling to maximum capacity.
DInstances will run until stopped.
Explanation
Setting desired capacity to zero results in immediate termination of instances, unlike the other options that suggest different outcomes.
Q373
Which service allows you to run code without provisioning servers?
AAWS Lambda
BEC2
CECS
DElastic Beanstalk
Explanation
AWS Lambda executes code without server management, while EC2 requires provisioning, and ECS/Elastic Beanstalk manage containers or applications, respectively.
Q374
A company needs a fully managed NoSQL database with automatic scaling. Which AWS service should they choose?
ADynamoDB
BRDS
CRedshift
DAurora
Explanation
DynamoDB is the only fully managed NoSQL solution; RDS and Aurora are SQL databases while Redshift is for data warehousing.
Q375
You are configuring a VPC peering connection. What happens if the CIDR blocks overlap?
APeering succeeds but with routing issues
BPeering is accepted
CPeering is rejected
DPeering duplicates routes
Explanation
VPC peering is rejected if the CIDR blocks overlap, as this creates address space conflicts.
Q376
Which AWS service provides automated security assessment of applications?
AAWS Inspector
BAWS Shield
CAWS Macie
DAWS WAF
Explanation
AWS Inspector scans applications for vulnerabilities, whereas the others focus on DDoS protection or data classification.
Q377
A company needs to migrate a large volume of data from on-premises to AWS without significant bandwidth. What should they use?
AAWS DataSync
BAWS Snowball
CAWS Direct Connect
DAWS Transfer Family
Explanation
AWS Snowball is optimized for large data transfers offline, while the others focus on ongoing transfers or smaller data sets.
Q378
You are configuring an Application Load Balancer. What happens when you enable sticky sessions?
ARequests from the same IP go to the same instance.
BUsers are redirected to static pages.
CSession data is stored in S3.
DSession stickiness is disabled.
Explanation
Sticky sessions route requests from the same client to the same target, while the other options describe unrelated behaviors.
Q379
Which service provides a managed Kubernetes environment?
AAmazon EKS
BAWS Lambda
CAmazon EC2
DAWS Batch
Explanation
Amazon EKS is specifically designed for Kubernetes management, while others serve different purposes.
Q380
A company needs to manage access to S3 buckets for multiple developers. What should they use?
AAWS IAM Policies
BS3 Bucket Encryption
CAWS CloudTrail
DAmazon CloudWatch
Explanation
AWS IAM Policies provide fine-grained control of access for S3 buckets, unlike the other options.