The AWS Certified Solutions Architect – Professional (SAP-C02) exam validates advanced skills in designing distributed systems on AWS. It is ideal for experienced architects looking to demonstrate their expertise.
Which AWS service is primarily used for event-driven applications?
AAWS Lambda
BAmazon EC2
CAmazon S3
DAWS CloudFormation
Explanation
AWS Lambda executes code in response to events, while the others do not primarily focus on event-driven architecture.
Q422
A company needs low-latency access to its applications in multiple regions. Which AWS service should they configure for this?
AAmazon SNS
BAmazon Route 53
CAWS CloudFront
DAmazon DynamoDB
Explanation
Amazon Route 53 provides DNS routing, which can direct users to the nearest application instance, while the others serve different purposes.
Q423
What happens when an AWS Lambda function exceeds its timeout setting?
AFunction automatically retries on its own
BLambda function fails and returns error
CData is lost in execution state
DFunction pauses without errors
Explanation
The function fails due to timeout, while the others either imply incorrect behaviors or outcomes.
Q424
Which service can store large amounts of data securely and durably for backup and restore operations?
AAmazon S3
BAmazon RDS
CAWS Glue
DAmazon CloudFront
Explanation
Amazon S3 is designed for durable storage, while the others serve different roles.
Q425
A company needs to allow users from external business partners to access AWS resources temporarily. What is the best approach?
AIAM Roles with SAML
BIAM Users with Admin Access
CEC2 Instance Profiles
DSecurity Groups
Explanation
IAM Roles with SAML provide secure temporary access, unlike the other options which are less secure for external users.
Q426
You are configuring an Amazon RDS instance. What happens if you set the Multi-AZ configuration to 'true'?
ARDS replicates data in two DBs
BRDS lowers performance significantly
CData gets encrypted automatically
DSnapshots are taken daily
Explanation
True Multi-AZ ensures high availability with data redundancy, the others do not pertain to this feature.
Q427
Which service allows for automated scaling of EC2 instances?
AAuto Scaling
BElastic Load Balancing
CAmazon RDS
DCloudFormation
Explanation
Auto Scaling dynamically adjusts EC2 capacity; the others do not provide this functionality.
Q428
A company needs to securely provide temporary AWS credentials to applications running on EC2. Which AWS service should they use?
AIAM Roles
BAWS Secrets Manager
CAmazon Cognito
DEC2 Key Pairs
Explanation
IAM Roles provide temporary credentials for EC2 instances; others do not offer this capability for EC2 directly.
Q429
What happens when an organization uses an Amazon S3 bucket policy to allow public access to specific objects but disables public access at the account level?
APublic access is granted to objects.
BPublic access is restricted by the account.
CObjects become private automatically.
DBucket policy overrides account settings.
Explanation
Account-level public access settings take precedence over bucket policies limiting public access regardless of the policy.
Q430
Which service provides managed Kubernetes clusters?
AAmazon EKS
BAmazon ECS
CAWS Lambda
DAWS Batch
Explanation
Amazon EKS is specifically designed for managing Kubernetes clusters, while the others serve different purposes.